Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: fipavLRHmz7/VSoYwAQgCNddYKIC+pPa0W18ZXns+FI=
Subject key identifier: 1D:E0:F7:ED:45:8A:DE:2C:7A:A8:3F:B8:BE:A8:70:3D:AA:F6:A5:B0
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019773089908A938AB4039472D7DD9D2CC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 0345
Signing time: Sun 15 Jun 2025 10:00:32 +0000
Manifest this update: Sun 15 Jun 2025 10:00:32 +0000
Manifest next update: Mon 16 Jun 2025 10:00:32 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: dI3ndZmmpGld54a5a49lqZmKNH9OaKhgaMTlpzC6Rv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:99:08:a9:38:ab:40:39:47:2d:7d:d9:d2:cc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Jun 15 10:00:32 2025 GMT
Not After : Jun 16 10:00:32 2025 GMT
Subject: CN=1de0f7ed458ade2c7aa83fb8bea8703daaf6a5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:70:f7:b2:df:c7:be:c2:87:8b:84:05:45:
4d:eb:ac:56:e7:f8:1f:2a:81:67:ee:25:9a:5e:2e:
3b:b7:6b:e5:24:b2:be:f7:fe:01:6d:80:11:90:ea:
12:34:3b:84:7c:f1:a8:ed:46:9e:38:c8:a8:17:8d:
37:0c:63:5b:76:0b:11:44:7a:1d:18:25:8a:d4:76:
f5:bd:b8:36:0b:1c:fa:0b:fe:f4:3e:bd:55:0e:b7:
b8:9b:65:24:e1:ca:7d:f5:6b:2d:cb:be:49:51:20:
de:25:b9:13:62:ad:8b:c0:d5:af:88:40:b5:28:31:
4d:07:3e:d5:11:d8:8b:d1:e5:2a:e6:93:d4:ba:d4:
b4:61:55:ee:d0:13:e3:70:db:12:d3:83:70:55:75:
2d:dc:b5:3e:0d:47:d4:06:39:c7:9f:2b:99:e6:0f:
db:6a:60:a6:3d:fb:ce:37:e0:19:15:ab:08:d6:cf:
a2:2c:0c:20:4e:be:1e:9b:dd:0f:3e:1c:75:f3:ce:
05:c3:ee:dd:ae:55:42:fb:82:f6:74:94:0f:58:5c:
08:a3:87:dc:e7:50:03:93:e9:7f:51:6e:8f:2c:33:
c2:c7:4a:dd:53:14:4c:db:1b:cc:f3:36:27:26:11:
c7:2c:6b:d2:a7:c7:15:f9:04:15:a8:24:8a:09:ee:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:F7:ED:45:8A:DE:2C:7A:A8:3F:B8:BE:A8:70:3D:AA:F6:A5:B0
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f4:27:c0:3c:ea:ba:f7:90:1a:13:aa:57:a8:ca:6b:da:be:
8e:bd:6d:b9:d8:27:fe:4f:70:7b:bc:bf:97:d5:ee:d4:7b:33:
1e:8a:ad:a6:61:6a:5b:37:b7:b0:d7:4e:95:8c:5b:9d:45:94:
7c:eb:71:d4:85:6c:e3:17:0b:54:a1:57:be:25:52:2d:c2:58:
3d:f2:71:92:16:24:fe:06:86:14:d9:33:b9:62:8d:2d:a0:d7:
a4:9f:10:24:5c:0b:11:de:01:f9:77:3c:4b:05:84:b5:f0:41:
a6:5b:17:b1:d6:d0:da:6a:3f:64:e6:ab:fe:c4:26:01:eb:36:
42:a2:d4:ca:0b:ea:ed:f9:b6:43:e8:62:4e:52:2e:b8:07:3b:
97:3f:48:ed:27:04:fb:19:32:a2:1c:3f:49:32:90:e5:d9:d2:
a6:a9:e2:71:8a:5e:1a:de:ce:db:6b:82:fd:82:e4:cb:02:be:
07:10:6f:44:2a:28:99:3d:4b:a2:ed:1d:e4:98:70:4c:3c:28:
2e:57:42:a9:62:9d:b0:04:ba:36:e7:35:b2:57:40:76:85:03:
87:c9:fe:be:ae:7f:0c:64:37:51:19:e0:bf:8b:41:3b:fb:ef:
39:28:60:71:fe:67:ba:06:e3:74:95:15:dc:1f:ff:81:a5:24:
73:18:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:06 2025 by rpki-client