Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: tTK0UblslMtQ8BY2fG1fXCTmKkzuYEcD77lzaoF3+7I=
Subject key identifier: C1:86:F9:DC:15:BA:3B:F9:A1:8A:0C:96:06:99:92:C6:D6:35:8D:25
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 019769615A841F3160D5739B54A421F906F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 038D
Signing time: Fri 13 Jun 2025 13:01:17 +0000
Manifest this update: Fri 13 Jun 2025 13:01:17 +0000
Manifest next update: Sat 14 Jun 2025 13:01:17 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: nc0Q7EY2fTlB09VLv0D54vC66EmgPolX9pblXTv02pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:5a:84:1f:31:60:d5:73:9b:54:a4:21:f9:06:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Jun 13 13:01:17 2025 GMT
Not After : Jun 14 13:01:17 2025 GMT
Subject: CN=c186f9dc15ba3bf9a18a0c96069992c6d6358d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:68:34:32:87:aa:7a:11:79:70:6b:bb:86:
6c:2a:25:20:2b:6a:96:5f:81:50:f7:04:55:72:87:
a1:e4:f5:43:fa:b2:d1:83:4f:10:bc:d6:04:95:50:
a8:eb:34:0c:3e:db:df:07:65:24:99:67:2f:23:22:
6b:11:ae:e1:0c:18:43:01:16:a5:49:8f:9d:49:c6:
0e:ea:13:10:81:9e:ad:61:4e:36:6d:da:91:b7:e7:
b6:b2:b3:ba:62:c6:5d:20:5f:af:b4:65:66:0d:57:
d2:ba:47:a8:d7:f7:ef:53:11:40:e2:af:2d:19:e1:
d5:6e:0d:fb:fd:0e:36:a5:72:08:a2:5b:26:c8:50:
ee:68:60:af:7e:c5:06:d4:fb:ea:e0:df:e4:d3:da:
9b:f3:f1:87:13:bc:fa:d2:d5:7a:a6:91:8a:67:cb:
87:51:5a:f3:7d:43:f7:ef:99:38:32:c6:a8:68:8f:
18:2b:11:59:c0:1a:da:b6:65:80:20:2d:e5:2c:ef:
ac:67:6d:02:71:9b:d9:19:fb:24:55:72:7f:5e:29:
77:f8:2f:d8:1a:a1:7f:77:a0:de:8e:1c:97:39:8e:
a5:b4:dc:16:7f:a3:a6:28:7e:76:31:36:9c:42:18:
a2:1e:f6:ac:28:4c:f7:66:7e:e6:76:78:a7:ce:c0:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:F9:DC:15:BA:3B:F9:A1:8A:0C:96:06:99:92:C6:D6:35:8D:25
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e8:da:5a:d1:08:14:01:a6:74:f3:90:57:45:9d:a9:70:91:
d9:67:6f:db:1d:d0:ab:f3:9d:6a:f0:63:60:af:57:93:a3:8b:
7a:7b:86:3f:95:c5:63:36:32:df:80:b1:42:02:5e:2d:e8:e2:
3c:94:a9:b1:45:8a:41:63:9d:50:ad:f6:29:97:87:fb:c1:2d:
aa:a7:20:91:db:13:97:8d:48:f5:0d:55:57:6d:2d:7c:44:19:
51:89:00:a9:b7:e1:98:95:fa:b0:a6:d6:c5:4c:c6:74:a6:3a:
de:0b:7a:a4:b5:60:b4:90:46:65:a1:3d:e9:50:8f:09:b7:e1:
ad:40:70:2f:eb:17:58:a7:88:ae:69:47:4b:f6:26:19:28:ce:
2b:2b:35:7a:5d:0c:37:8c:e0:a5:f0:96:1a:c7:a1:60:f1:22:
14:ff:1a:69:81:57:db:e2:2c:a1:46:78:f7:71:e2:10:f0:fe:
a1:ef:3b:01:5c:da:45:11:5e:62:75:65:95:7b:1e:2b:01:b1:
30:21:1a:31:f8:28:da:7e:62:71:75:a3:69:c6:28:27:84:6b:
bb:a9:a8:e4:ec:9f:48:c0:81:00:cd:90:43:9f:22:de:8f:69:
7a:21:5a:72:d8:a8:0f:ad:ab:46:ac:c5:f1:34:2c:b0:e6:f2:
f5:4e:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:40 2025 by rpki-client