Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
File: ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft (raw, json)
Hash identifier: FuE970guRusaOCGP4q8pnArHbmabd6HG0kjEBAUMOyE=
Subject key identifier: C9:40:F1:5A:C9:66:75:77:FA:3A:9D:A6:4C:D8:0B:61:40:89:22:74
Authority key identifier: CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2
Certificate issuer: /CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2
Certificate serial: 019769CF29FAFDD7E483F4CB550BF3DA3706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
Manifest number: 0145
Signing time: Fri 13 Jun 2025 15:01:13 +0000
Manifest this update: Fri 13 Jun 2025 15:01:13 +0000
Manifest next update: Sat 14 Jun 2025 15:01:13 +0000
Files and hashes: 1: knggMszGXslbbJ2_Oh2Jaifz1gc.roa (hash: 1NY+pqUYlKwDvhTu3JTqY8SDs7jlakZ17fJjnTdwI9Y=)
2: ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl (hash: v/IoRKCFG2SRXWNK1j4zShaghE+ZpA82xKZWz6LlyAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:29:fa:fd:d7:e4:83:f4:cb:55:0b:f3:da:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2
Validity
Not Before: Jun 13 15:01:13 2025 GMT
Not After : Jun 14 15:01:13 2025 GMT
Subject: CN=c940f15ac9667577fa3a9da64cd80b6140892274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:53:47:6d:c1:46:26:23:f5:c9:7b:93:1c:
d4:48:81:a7:0f:b0:05:5b:4a:c3:86:62:ec:1d:11:
6b:87:57:32:f4:a1:0e:b3:cf:0b:ab:ee:42:c8:06:
93:0b:dd:44:d8:39:25:0f:01:ba:80:bd:0b:f1:40:
07:d7:1c:44:2d:10:e9:fa:44:3c:42:dc:fc:27:1a:
86:0a:44:c0:04:a9:c0:f5:a8:d0:b5:d9:9f:47:fd:
d1:36:26:da:38:df:6f:43:fa:4e:4d:3d:bf:d3:ad:
b5:0a:75:d8:48:e5:11:a9:b3:37:23:d4:30:24:2d:
ca:3f:97:b9:38:da:d0:6e:26:39:fa:9f:fd:4f:64:
cc:3a:aa:15:e2:5c:3d:3a:e2:9e:a0:b6:a0:10:81:
9b:50:40:4d:a0:cc:22:81:65:a8:fa:f2:f8:93:5e:
fa:31:ec:d2:ed:3a:c4:98:db:7b:b0:bb:79:f9:29:
7b:d3:97:ea:d9:31:6f:11:0c:b8:6d:d8:45:2e:17:
a5:ff:c7:02:fb:d7:f2:f7:65:2f:a6:1a:b0:24:24:
2f:a6:66:6e:26:b3:af:38:a1:6c:09:17:74:90:ea:
40:a8:17:8f:d6:ef:c3:56:b8:b0:d8:d4:2d:f2:cb:
c6:03:ce:a7:03:e4:d2:9b:af:d9:32:f7:2c:24:a2:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:40:F1:5A:C9:66:75:77:FA:3A:9D:A6:4C:D8:0B:61:40:89:22:74
X509v3 Authority Key Identifier:
keyid:CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bb:4b:12:45:6e:69:99:58:39:48:13:cf:ec:9e:aa:6d:96:
6f:dd:9e:ec:3d:09:c3:f0:ca:ef:30:82:00:0d:d8:26:7f:fa:
dd:de:f2:25:d9:1c:f6:28:95:f7:49:bf:16:d4:ae:19:c5:8b:
11:9b:94:3d:ba:bd:8b:fd:77:5f:fd:de:f9:e0:ee:21:73:e8:
95:0a:12:38:d7:ca:d2:d7:d7:35:56:fc:57:a8:80:f5:a3:e9:
4e:d1:d9:b9:98:f2:67:48:1f:5b:a1:87:10:ad:56:c7:80:68:
20:75:f7:77:7e:73:d3:e4:88:fe:1f:24:16:ee:1b:b4:e6:1d:
bf:f7:61:c5:d3:36:a0:48:f0:eb:17:21:c3:e4:48:b1:8c:bb:
a1:3b:77:01:29:f0:11:f3:73:89:a9:1b:f4:e4:6b:a6:ec:b4:
78:c9:2c:87:87:a9:81:89:ec:89:f4:eb:72:bc:0b:49:9a:93:
93:23:06:b9:d0:c7:17:54:d4:2e:32:f4:64:73:d4:df:08:0a:
49:94:2d:57:13:b6:80:6b:b4:52:f3:c9:85:1c:a3:76:d2:d1:
61:9f:3b:e3:89:ec:4e:e8:69:fa:e9:c5:25:35:4f:bb:0e:cf:
94:b7:82:ab:a2:f6:01:87:ab:5c:a1:61:e3:e8:5d:73:20:90:
6d:b2:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:10 2025 by rpki-client