Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier: vmp5IKxsHoWihNKtvJPQQ/FXit5Nmhvvau3p1EsjBxM=
Subject key identifier: AE:93:93:9B:92:61:8E:33:D0:4B:3E:1D:97:CA:7C:C5:56:68:92:B2
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 019776E5BFA813A0D792BB01242AF5DE3D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number: 0623
Signing time: Mon 16 Jun 2025 04:00:57 +0000
Manifest this update: Mon 16 Jun 2025 04:00:57 +0000
Manifest next update: Tue 17 Jun 2025 04:00:57 +0000
Files and hashes: 1: Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa (hash: FbjTDRIPu8bBy/5KLYHNgVHrWy/v2L+xeWuUUm4Xmek=)
2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: dLi0Oi5U0wrCISr7jG39Wq0CVjUibqGaHSLGiuGBfg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:bf:a8:13:a0:d7:92:bb:01:24:2a:f5:de:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Jun 16 04:00:57 2025 GMT
Not After : Jun 17 04:00:57 2025 GMT
Subject: CN=ae93939b92618e33d04b3e1d97ca7cc5566892b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:21:83:02:43:8f:bd:40:d6:42:1d:7c:21:
6c:e2:c3:8c:9e:b1:c7:5a:6d:f3:11:ff:d7:15:19:
c4:5f:c8:0c:06:73:74:a6:1e:e0:38:40:90:17:4f:
2b:e6:34:0e:6e:d0:0b:4a:51:96:7d:99:f9:82:2e:
e6:a0:6b:ae:8d:5f:80:41:09:2f:e9:93:c2:dc:c7:
dc:0d:2a:14:15:56:3f:e6:d4:8a:7b:4a:29:69:66:
85:50:e4:2f:a2:bc:17:38:53:5a:db:e8:ae:5a:27:
5a:79:b5:e1:65:82:e1:5e:29:72:e6:7d:bf:fd:91:
b1:e1:38:9a:df:4b:ef:0c:7b:e7:f0:23:29:16:1d:
68:32:2e:c0:d8:82:c3:ea:e2:40:90:0f:a8:ae:4c:
80:e4:0d:e4:78:30:19:fe:42:14:8e:15:e2:a2:db:
b3:60:8c:7f:30:b2:21:0a:df:29:fb:5c:c0:68:39:
0d:3b:81:5f:77:b1:79:56:a1:42:9c:38:0c:61:c2:
8e:d1:ea:85:99:2e:a5:dc:4b:3b:7b:1e:44:01:31:
e2:e3:bf:25:ef:43:f7:d6:28:87:b9:e3:89:ea:03:
05:38:0a:6b:ba:1d:fc:47:86:4f:83:69:b9:3e:6b:
5d:f5:34:40:c3:00:01:5f:27:13:e3:5b:81:7e:0f:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:93:93:9B:92:61:8E:33:D0:4B:3E:1D:97:CA:7C:C5:56:68:92:B2
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:6e:f8:60:01:b2:de:a2:03:cf:70:74:fa:ff:69:f9:f3:
9f:34:8b:f4:8a:84:4d:2f:49:89:d3:fa:0a:f5:19:01:f5:e6:
6d:32:b0:1a:d0:d6:60:36:6c:61:0f:d2:25:49:88:b7:f9:e4:
1d:93:97:63:ca:38:8e:a5:8c:96:a8:e1:53:24:60:27:ff:f2:
5d:f1:fd:cb:78:6f:aa:80:67:c4:73:6b:9e:09:94:ec:00:12:
ba:1c:08:22:4b:bb:d8:42:11:93:68:5a:4e:50:e3:b9:a8:30:
ee:d0:d3:e7:fe:23:7a:bc:30:a8:59:1f:b9:79:70:4f:04:7d:
41:e5:51:c1:5f:82:43:a7:4f:05:af:4e:a6:75:74:74:a2:5c:
b8:0d:7e:cc:32:76:ed:dc:ce:4e:e1:0f:02:46:ed:bb:f9:62:
b1:8d:b8:be:c4:20:79:fa:78:f6:db:dd:dd:1b:10:2e:92:d7:
83:cf:06:7a:a8:85:36:d4:17:f3:04:5c:5f:21:94:ba:0b:05:
6f:a3:7a:2f:f2:af:df:ae:18:c7:d4:2d:83:9b:15:b7:04:fd:
0f:c2:28:76:1d:8f:e0:df:dd:90:ed:e5:96:2c:ad:a5:64:81:
85:f8:c2:27:6d:fb:9e:3c:e7:c3:d4:26:aa:71:1b:09:3e:56:
62:3a:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:22:46 2025 by rpki-client