Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: oO8WQ9/yXc2X2H+UODKp2d61CgHNL8rzF2cp3Mu3B0Y=
Subject key identifier: A4:1A:4C:7E:57:51:01:AF:60:98:4D:33:78:28:98:8B:6F:77:1B:E3
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 01976D3E3BE356029F839AA3B13D2921AA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 92
Signing time: Sat 14 Jun 2025 07:01:24 +0000
Manifest this update: Sat 14 Jun 2025 07:01:24 +0000
Manifest next update: Sun 15 Jun 2025 07:01:24 +0000
Files and hashes: 1: 39eMlym5-vUY7eWOJGWxfmeXbRY.roa (hash: WY0sOOmZNXOfMNrzfd1Jh0Sr1ckGzWAuxPnTphEkb9w=)
2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 8wv/4CdYKQMwxhakTw/6qXHvvBTwLEBaAZXayNWVTXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3b:e3:56:02:9f:83:9a:a3:b1:3d:29:21:aa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Jun 14 07:01:24 2025 GMT
Not After : Jun 15 07:01:24 2025 GMT
Subject: CN=a41a4c7e575101af60984d337828988b6f771be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:af:c6:0b:f9:9b:91:9b:63:e9:2a:0b:2d:
74:2c:07:a7:5d:9a:21:ad:fe:fe:02:c4:d8:ba:a1:
5b:84:18:e4:7e:0d:08:1c:36:7d:d1:3d:c8:4c:ef:
86:3f:59:da:cd:d5:b2:a0:05:04:e4:03:26:2e:10:
34:e3:c7:fc:3e:68:7f:c1:9f:b8:cf:14:2d:e7:36:
dc:ec:99:37:fd:0b:c3:a4:e9:3c:4e:cf:1e:47:81:
52:40:ca:81:69:b4:fe:33:7b:a1:29:15:e7:ef:7d:
45:0e:a0:17:a2:c2:e0:f5:a9:f9:a7:8a:10:fe:25:
b7:a0:3b:e4:42:e1:84:cb:8c:f2:a2:ac:d3:dc:2d:
0f:3b:62:f2:b9:e6:dc:f6:48:01:87:b5:ea:c1:ce:
8c:a6:d1:12:a5:bc:94:91:dd:65:16:f7:26:f3:2c:
29:e1:94:7c:da:83:4f:02:66:c7:80:8f:cc:f2:f3:
1c:14:d1:3d:9b:a7:90:15:3b:83:d4:3e:0b:1f:12:
ab:62:2a:00:55:29:71:03:e8:e0:ca:2a:4a:82:4f:
41:b1:3c:d4:29:17:18:12:89:2e:18:c4:dd:ad:27:
9f:d5:ea:42:8c:30:e1:64:d4:2b:da:8c:29:4d:9c:
63:75:33:e9:67:9f:0a:36:5f:31:28:7c:c9:d2:4a:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1A:4C:7E:57:51:01:AF:60:98:4D:33:78:28:98:8B:6F:77:1B:E3
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fd:3d:95:a4:40:cd:9a:7c:33:c4:89:e4:54:8d:75:3b:98:
d6:77:9c:13:d2:3c:f5:52:7d:93:52:8c:13:40:f8:72:61:c9:
7b:d8:8b:04:46:9d:ed:cb:1e:85:2a:e9:9b:aa:83:b0:86:bd:
4f:42:8f:ec:ca:b4:9a:a2:10:5e:b5:26:2c:71:07:5b:f1:09:
17:59:6c:29:1b:bb:a7:cf:e1:6e:ec:21:01:32:94:65:74:e3:
1f:c2:0a:a8:b1:88:28:8a:77:64:39:43:54:a2:9c:bf:be:14:
10:9e:6c:58:96:f3:1d:81:01:27:b4:d4:a1:a6:12:29:44:e8:
10:64:05:e4:02:8b:ef:02:eb:03:26:8b:17:a0:6e:df:76:cb:
a6:2d:e3:dc:b3:78:e5:6b:8c:ac:10:e6:d0:aa:24:19:17:96:
f7:04:8b:a9:30:38:84:0a:2f:25:55:97:e3:c4:6a:75:df:b1:
b3:c4:dc:ec:8e:5e:0c:7d:d6:f7:0b:bb:ce:af:3b:ca:35:4c:
e7:77:bf:9d:21:e4:8a:d4:88:2a:3f:67:7c:fd:40:f3:e3:53:
72:16:97:e8:4b:c4:52:a0:8d:f6:cb:14:b5:6f:12:74:c7:75:
23:38:c5:a7:a5:75:c9:32:5d:34:68:af:87:f0:5a:81:f3:ca:
8c:d5:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:52 2025 by rpki-client