Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: XKFVohExjCHIN+Jqak02DfMfcpdE9/vhG1aXmbxhDOc=
Subject key identifier: B7:18:70:21:43:08:CB:5D:49:51:0E:A6:51:2D:AF:A7:56:9C:5F:15
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019774F7B5123DEABB31DFC51DFA4D93B03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 19:01:20 +0000
Manifest this update: Sun 15 Jun 2025 19:01:20 +0000
Manifest next update: Mon 16 Jun 2025 19:01:20 +0000
Files and hashes: 1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: lWLqvSWvvKqQ6W0dPavG0+kpimYvPY4MgOFL3Y2w3Hk=)
2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:b5:12:3d:ea:bb:31:df:c5:1d:fa:4d:93:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Jun 15 19:01:20 2025 GMT
Not After : Jun 16 19:01:20 2025 GMT
Subject: CN=b71870214308cb5d49510ea6512dafa7569c5f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:dc:4b:af:ac:d3:52:8d:a3:12:53:ad:32:
07:49:ea:2c:ba:a4:93:65:a5:77:aa:b9:1e:77:5b:
35:cc:81:f8:ba:11:da:5e:d5:34:ee:48:b6:f7:dc:
b2:7d:59:6d:55:43:54:2a:5c:d2:75:be:d0:fe:fc:
34:f2:6d:c5:e4:75:05:38:32:13:dc:ba:a3:aa:3a:
a5:29:bc:21:26:94:cf:5c:01:54:a5:97:05:9d:30:
0f:1e:1b:39:c5:05:0e:f7:2b:b3:40:8d:1d:ad:94:
c7:7d:20:f1:a1:2a:af:98:c8:7a:e4:9c:36:39:eb:
d1:dd:75:df:70:c9:37:ab:8b:87:50:ff:51:9e:c1:
b1:6e:d0:30:b3:77:01:07:7a:4b:82:03:eb:00:f3:
07:e2:cf:be:4e:86:fe:ec:d1:42:e0:95:04:a6:31:
ee:af:aa:df:f0:2b:c1:40:92:2a:90:a5:d4:ac:00:
36:9d:bc:9b:fe:84:9e:c2:f4:89:07:e5:10:5f:56:
0a:16:01:29:1f:af:84:a8:86:eb:80:41:f6:67:3b:
01:5a:97:7c:6f:d7:20:da:ee:ad:f4:6d:56:83:31:
3b:18:98:b6:25:d8:7a:a1:b4:6e:c6:46:28:ef:87:
de:8b:d8:99:5d:b5:fa:77:06:d0:7b:04:05:c6:d8:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:70:21:43:08:CB:5D:49:51:0E:A6:51:2D:AF:A7:56:9C:5F:15
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:56:db:20:59:b1:d0:13:03:16:3f:a4:bb:e1:53:a6:50:63:
45:3a:13:e1:79:c3:b5:f5:57:c8:40:17:da:7f:38:2c:59:1b:
93:b6:d6:af:60:12:50:59:af:3e:38:90:6b:2a:26:83:13:36:
be:0f:47:37:06:16:f1:da:eb:15:95:b1:97:ea:73:e4:0f:d6:
63:6a:41:d3:88:85:ca:cf:69:6e:44:db:58:a6:cd:42:a5:f9:
95:f1:45:89:ab:73:6c:f5:f4:6c:e1:6e:96:ab:1c:12:7e:a1:
6a:99:a8:db:28:10:62:fc:2d:94:bc:e7:77:2c:a3:cf:fe:f3:
ce:14:05:06:17:bf:18:45:d7:48:22:9a:ac:11:3a:4f:34:c0:
f3:ef:b2:7e:1b:19:1d:ad:21:2b:bb:15:2d:64:31:10:df:bd:
80:09:2a:03:81:29:a9:e2:66:a2:c0:47:bf:78:7b:0e:70:ca:
ac:51:b3:c5:b6:f1:27:24:e4:df:66:d2:2a:64:e8:c5:60:21:
a9:02:40:70:42:e4:4f:19:2d:39:94:e4:9e:a9:6d:ae:20:3d:
2d:0b:1f:cd:98:1f:c2:f3:cd:3d:0d:21:4b:23:7a:44:fb:58:
03:5a:f8:21:7e:fc:34:c3:50:e0:5a:0e:72:61:da:20:71:ad:
84:46:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:29:52 2025 by rpki-client