Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: xnnvkkqI0mIzgxjfD3FTspxCt1j8gO7qH41l1dKsRRU=
Subject key identifier: 7A:CD:DC:4F:8B:1F:00:C0:02:95:39:B4:07:E0:07:3A:70:F4:9B:30
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019785B47DC754F705E09CC8D70DAB57C7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 01:01:27 +0000
Manifest this update: Thu 19 Jun 2025 01:01:27 +0000
Manifest next update: Fri 20 Jun 2025 01:01:27 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: JzGJJfk/cBpxtNK6k33fYImuO24LnbuVJo+QbL+gIoM=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:b4:7d:c7:54:f7:05:e0:9c:c8:d7:0d:ab:57:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jun 19 01:01:27 2025 GMT
Not After : Jun 20 01:01:27 2025 GMT
Subject: CN=7acddc4f8b1f00c0029539b407e0073a70f49b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:23:af:09:93:59:7c:46:00:46:11:f9:8c:
12:5c:71:0f:fb:2c:db:12:df:9b:c1:a5:2d:4c:84:
90:03:3a:c2:d0:64:e4:3e:54:c3:c5:5d:a3:50:4b:
4f:91:b2:41:b8:30:4a:4e:f1:a9:1c:9c:e5:18:2a:
87:cb:80:4e:83:0d:a9:97:1d:5d:62:d9:8e:14:f6:
9d:79:73:0a:a4:45:ec:16:32:f4:71:fc:45:3d:ef:
61:51:be:5b:9a:88:af:7b:c4:fd:77:9a:75:89:5b:
f5:be:b5:47:b3:c4:12:9e:94:2f:65:d8:6e:ad:f2:
54:66:e6:53:1e:61:2c:52:b3:98:d7:fb:b4:c1:1c:
b0:4d:eb:11:38:db:ff:b6:9b:e3:3c:18:a7:fb:ea:
27:07:98:bf:33:73:43:5b:6f:ab:25:b4:f3:92:91:
3c:b6:71:74:df:8d:74:dc:37:cf:68:95:3a:5d:90:
b5:ce:24:f4:aa:d5:9b:03:52:73:a4:e9:fc:46:19:
e3:a0:01:e8:1b:a3:24:4e:28:cc:d3:11:88:66:9a:
32:68:ec:ff:c6:cb:a4:41:dd:d5:9a:8c:f8:e2:f7:
41:f5:30:76:69:3a:fb:8b:3c:ec:e9:43:4d:2b:89:
8f:20:88:c4:75:88:b0:12:23:65:d5:8d:22:d0:d0:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:DC:4F:8B:1F:00:C0:02:95:39:B4:07:E0:07:3A:70:F4:9B:30
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c0:64:d1:9f:15:07:34:7b:58:70:b2:6f:12:f2:92:6d:03:
b5:65:61:c7:a2:8f:82:de:75:65:02:b9:d7:b2:ac:d3:f7:ed:
f3:c4:ca:21:e6:e7:c3:20:cd:c2:0c:e8:c3:c7:68:43:6b:f5:
77:e6:a2:a8:81:5c:3c:70:ea:d5:01:45:de:1d:8a:39:03:11:
25:48:f2:77:71:81:db:d5:1d:de:18:61:dc:d8:53:9c:b8:a0:
5f:f0:b0:0d:08:0f:9c:6b:93:f4:bd:bd:91:9f:ad:7f:05:31:
68:3a:4c:52:8e:d5:02:2d:27:44:99:dd:22:e0:4f:b5:4d:8a:
b5:98:bc:ae:85:f2:f6:cb:1e:be:ee:fc:9a:7f:14:c6:ab:ef:
56:5e:0b:77:4e:82:fa:39:26:98:9b:58:0d:18:9e:0c:a8:c7:
9e:62:b9:03:b9:d1:de:a9:5d:80:86:34:a4:22:de:c4:33:e3:
3b:a4:cd:d5:ba:8b:af:e9:7d:32:a3:61:00:17:ba:b8:2c:f8:
a0:6a:a0:38:ce:15:85:b5:1c:35:7c:0c:a4:97:79:00:84:ee:
08:77:34:2c:fb:57:31:20:7b:85:e8:71:41:b1:57:95:f0:32:
54:13:38:0b:a2:7c:c8:c4:ab:cc:cb:5d:ba:ba:4d:8a:77:8e:
f8:a2:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:57:03 2025 by rpki-client