Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: pElpHeff1tQKXTSzaqj3ery/dSlDUzX1KI5/nXOtSpk=
Subject key identifier: DC:9D:68:12:6C:C4:1A:DA:57:5C:13:F7:DF:E0:89:A8:C9:A1:1A:9F
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 0197684E756A4959928CA168910A7E15CBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 032F
Signing time: Fri 13 Jun 2025 08:01:01 +0000
Manifest this update: Fri 13 Jun 2025 08:01:01 +0000
Manifest next update: Sat 14 Jun 2025 08:01:01 +0000
Files and hashes: 1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: P/RnNZBsqymvmaLZ1deP5pDTdNkoXUypZ2utN5ADHE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:75:6a:49:59:92:8c:a1:68:91:0a:7e:15:cb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Jun 13 08:01:01 2025 GMT
Not After : Jun 14 08:01:01 2025 GMT
Subject: CN=dc9d68126cc41ada575c13f7dfe089a8c9a11a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:41:73:a3:63:ea:10:ad:13:f6:d6:07:d0:
a8:01:a2:1c:cd:89:99:77:a5:bb:54:fe:fa:0e:5f:
67:8b:89:bf:91:4d:eb:86:15:f1:12:0d:a7:41:0c:
a8:a6:58:4b:24:a4:16:95:6f:fa:1e:29:c8:f4:1d:
eb:5a:82:5e:8d:91:28:e7:0c:19:f3:0b:f2:3d:a0:
53:a7:60:ce:7d:3f:51:60:af:15:0d:ff:da:7f:59:
ae:f0:3d:bf:30:e9:1b:3f:dd:d4:57:f3:9f:73:e0:
5d:5a:58:92:12:d4:59:0b:d7:df:7b:e9:59:0f:29:
17:01:db:66:b5:24:45:23:db:5a:03:60:fb:bc:d1:
18:39:38:c0:67:51:c7:72:3c:06:be:49:3f:a2:8e:
a5:29:9b:fe:42:07:d7:60:1e:87:87:89:11:a6:51:
d6:44:7f:0c:c4:0a:a7:01:d3:25:c5:df:4b:51:fd:
5e:19:30:df:d9:16:40:bd:31:a4:e9:74:4d:37:43:
35:e1:00:9b:08:76:e3:03:dc:ea:4b:92:c5:19:40:
4b:a9:50:8e:62:96:0b:b2:d3:85:e2:a7:6f:02:30:
ff:5a:95:27:60:aa:6e:48:15:d8:ee:34:65:ad:e9:
a1:ac:cd:c7:41:9e:2a:1c:c4:68:dd:69:ff:2f:4d:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9D:68:12:6C:C4:1A:DA:57:5C:13:F7:DF:E0:89:A8:C9:A1:1A:9F
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:29:17:7f:25:a3:e5:ff:7b:b4:e6:b2:b1:7a:54:a1:5b:
3b:bc:67:46:53:d9:c8:a5:01:72:95:c6:db:18:c1:09:fd:61:
72:f3:10:86:af:a7:b3:ab:dc:66:6a:66:d0:d9:94:19:fb:40:
01:6a:5c:ff:c8:6d:f1:e5:a3:9a:db:4c:90:76:e8:39:92:bb:
d0:1c:b3:d6:1f:f9:9c:72:00:a7:01:79:c0:a0:4f:06:3a:2d:
24:1a:de:2e:08:bc:d0:45:37:c3:cf:b6:2b:fa:b0:26:97:2b:
2f:20:90:06:fb:1d:70:ce:fb:b2:5e:98:7a:e6:4c:d0:18:f6:
b2:39:4b:28:77:9c:5f:b0:1e:2f:6c:ab:19:5b:ce:6f:d5:a4:
43:6e:cf:ee:ae:80:29:de:e5:a2:23:ea:cc:bc:10:f7:d2:7a:
09:9e:e3:b3:f4:8f:e3:32:3f:e1:8e:27:f6:6d:d4:07:c2:bb:
95:17:ea:98:0c:1f:66:58:8e:43:3f:a6:e1:ea:5d:7b:aa:83:
db:f7:87:9a:45:23:e6:56:ae:e2:df:25:ff:93:ce:b8:db:16:
25:1c:42:d6:97:90:0d:af:3b:42:0a:90:8d:95:c2:ca:22:7a:
e9:a0:1d:d7:f2:b8:f3:a6:7d:a6:68:a2:d1:ca:82:9e:0f:95:
87:c7:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:00 2025 by rpki-client