Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 0pQUe+j4kTvPix1vlfzUVRIjKl99tf7P2LnxbWQfUT8=
Subject key identifier: 58:42:C1:39:9E:90:62:BC:85:BA:2E:DE:98:AC:79:4B:16:61:07:5B
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 0197778A8F3274D7B165271E3C10E1557D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 12A0
Signing time: Mon 16 Jun 2025 07:00:58 +0000
Manifest this update: Mon 16 Jun 2025 07:00:58 +0000
Manifest next update: Tue 17 Jun 2025 07:00:58 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: +xXwuzxbt5VPjgGUrjLJFJ597VJr0xi3qS0Z5VbEjjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:8f:32:74:d7:b1:65:27:1e:3c:10:e1:55:7d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jun 16 07:00:58 2025 GMT
Not After : Jun 17 07:00:58 2025 GMT
Subject: CN=5842c1399e9062bc85ba2ede98ac794b1661075b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d8:42:8c:d9:7d:ca:ca:0d:2a:75:80:8c:9e:
f1:d1:de:f4:20:11:a8:72:7c:29:38:f4:f8:10:6a:
4b:09:15:bd:1e:06:3e:f5:69:0b:51:b9:6e:93:ad:
d8:e3:ef:d0:e1:cb:7c:80:eb:32:67:50:7e:c9:93:
9a:81:3c:19:c4:7a:12:1a:ba:39:6c:bf:82:3e:25:
5d:79:66:5f:3d:2a:4f:84:a2:0e:9e:07:18:a9:31:
ce:20:45:63:fb:6a:ef:64:fc:8d:07:11:7d:0e:ef:
bb:d9:06:2f:15:4d:08:a1:41:d2:86:52:b4:a5:83:
94:64:58:7e:6e:46:15:88:0a:89:dc:13:83:8e:cb:
3e:0c:93:b9:74:6f:09:ea:53:36:c1:93:fd:88:f7:
ad:ce:84:f3:f2:96:da:89:aa:22:70:31:ce:04:1a:
f7:37:93:75:8d:bf:5a:d4:23:b8:9c:f0:49:1b:03:
4e:28:45:dd:a0:2e:f4:33:e6:ad:79:5d:2a:d9:8b:
6f:78:85:b2:cc:2f:23:f0:2e:a8:eb:35:33:23:4e:
1f:d6:30:bc:04:fe:67:8b:99:81:d2:cb:7e:ae:72:
72:7f:e9:41:3d:ba:26:dc:fb:88:56:73:6b:55:b5:
b9:f5:dc:a5:02:34:ed:78:7e:c0:58:d7:00:b5:28:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:C1:39:9E:90:62:BC:85:BA:2E:DE:98:AC:79:4B:16:61:07:5B
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:12:af:92:c9:c5:b8:3a:28:ca:58:18:75:c5:8e:43:4d:96:
ae:92:49:02:96:43:75:0b:0e:a2:de:9b:53:e5:8f:2a:b3:59:
84:56:dc:d1:c7:cb:ba:e2:81:ed:e1:f3:72:09:48:eb:83:db:
be:2c:69:67:52:0d:43:7a:1b:31:b5:66:0f:40:f8:b0:c3:13:
83:4a:80:57:ed:46:89:2d:75:a7:d6:25:8b:28:61:33:68:48:
92:df:ec:78:6f:3c:24:ca:9e:44:5e:90:a1:9d:f5:37:4e:66:
e6:1b:52:72:b9:30:88:99:b1:7a:a6:d9:59:42:98:01:48:05:
e1:6f:bb:82:8d:7a:32:cd:80:f9:25:8f:dc:12:12:b8:ea:51:
a8:f7:58:dc:21:f2:07:17:85:f7:b7:b6:7c:69:ab:be:9f:f7:
c3:5f:db:a6:98:9a:1c:26:52:6d:da:47:01:c9:83:b3:2a:8b:
64:3e:ee:36:9f:e0:55:59:e3:57:25:72:7a:67:87:89:46:c6:
9f:5e:1a:6b:53:dc:b6:2f:81:b7:a7:69:6a:5e:a7:dc:8a:7b:
0f:fd:9b:53:fb:91:8b:b4:4e:1f:cb:8c:94:4a:d2:44:93:09:
29:c9:1b:eb:fc:a5:4f:8c:cb:ee:11:f6:55:c9:34:f6:51:50:
d3:51:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:21:41 2025 by rpki-client