Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: MSsGkKLcDZ4AqAB3OzgsmaRZmpDWD4+RHd7cKijPHFc=
Subject key identifier: 38:80:F3:11:70:04:4B:E2:52:CC:D1:8E:50:2B:9C:5F:9B:98:4A:71
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 01976929BEDAD6A0710C0AA0A56A3BC62BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 12:00:32 +0000
Manifest this update: Fri 13 Jun 2025 12:00:32 +0000
Manifest next update: Sat 14 Jun 2025 12:00:32 +0000
Files and hashes: 1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: ah6BhzH87jpJwcN3LRBndHXFQPtAZAVdDQ1EO0RsqrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:be:da:d6:a0:71:0c:0a:a0:a5:6a:3b:c6:2b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jun 13 12:00:32 2025 GMT
Not After : Jun 14 12:00:32 2025 GMT
Subject: CN=3880f31170044be252ccd18e502b9c5f9b984a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:70:97:2f:87:ef:7e:b5:db:01:16:f9:e9:
e0:e2:e9:c2:7c:2f:34:82:33:64:9c:db:4c:e7:ba:
00:c8:23:20:27:0f:d6:45:4a:69:a7:54:96:d8:f5:
34:54:47:80:8d:c5:ea:11:50:b0:74:05:00:5f:e9:
ce:23:c0:05:69:82:5a:19:87:fe:ef:52:72:78:15:
5d:48:19:c9:6b:ce:1b:95:7c:c2:4d:47:e6:92:ff:
68:a7:5c:16:77:5d:84:a1:05:49:af:0d:62:1e:eb:
1c:ae:d1:c4:95:ac:e4:13:25:97:15:9b:b1:7f:7f:
36:41:16:b7:30:63:58:0b:e3:5d:c3:10:ec:dc:70:
97:84:3c:0a:9a:3b:eb:79:d3:92:62:b8:cd:a3:6d:
78:38:db:0f:24:22:28:4b:3b:0d:17:c5:41:d6:5e:
b4:cf:80:72:66:84:2e:c6:16:fa:45:c7:c0:79:1d:
d5:00:cc:37:7b:13:c1:c5:83:a5:b7:01:20:2d:15:
2d:08:10:d2:ee:af:15:e3:00:a1:e4:3d:00:2a:ea:
a0:69:75:e3:29:80:12:3e:14:cb:94:1f:45:e2:c4:
bf:91:0c:9e:8e:b9:0a:52:92:22:fb:01:38:e3:84:
f7:26:87:fc:db:19:1f:17:c0:e1:02:f4:8d:9a:1f:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:F3:11:70:04:4B:E2:52:CC:D1:8E:50:2B:9C:5F:9B:98:4A:71
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:04:c1:37:08:2c:26:42:ed:97:47:b1:9f:4a:17:65:33:80:
10:ad:26:13:09:fe:c7:c5:d6:fa:f6:c5:7d:b8:a9:e2:62:54:
ab:6e:b7:d1:43:33:58:ee:08:24:2f:01:a9:24:97:1e:2c:49:
fb:ef:db:a6:bb:97:42:2e:4e:99:e5:25:2b:ac:b1:19:4e:0a:
64:70:62:9b:ee:b9:47:14:89:d6:8d:67:55:97:37:b2:4f:ed:
b0:92:b3:2b:96:6c:40:e2:1e:3b:2a:91:d7:f7:01:f1:4c:4e:
75:3d:25:07:3a:f9:80:16:20:c3:dc:52:c5:5e:b4:bc:e4:3a:
8e:65:b4:cd:5a:53:b3:ec:34:c5:c7:c8:f8:e9:e0:7f:02:93:
6b:b8:ec:39:0e:c5:06:49:95:06:31:ad:c3:13:32:fe:93:c2:
e0:21:52:08:4a:c8:7f:74:d2:b5:33:20:2d:4a:e9:2b:bd:f6:
6e:75:1a:4b:ee:10:a0:30:e2:32:12:15:6c:c1:2f:5f:84:f2:
c2:4a:70:90:18:04:47:cc:ca:34:7c:47:5f:72:40:c6:55:b2:
85:27:e6:a9:2d:0e:b6:ae:3f:68:ed:d9:04:9a:a1:78:82:6a:
3a:86:b7:ee:d8:ba:fa:84:09:0f:32:a3:7e:39:8b:a3:c5:02:
4a:21:2b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:11 2025 by rpki-client