Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: cF4tP9AAhA5VrTfs6N6AAuktr66YqPPb2APCzrm+PMQ=
Subject key identifier: 18:C5:35:F0:60:C5:1E:89:77:41:48:24:30:CE:FD:F8:1C:F8:91:D6
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 0197B6A18407862C2644B4969264B8B3905E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: 4hrgxjaPnncTq5wtBlVELGXyMuvmYjJ6BhcnGvHhCQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:84:07:86:2c:26:44:b4:96:92:64:b8:b3:90:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=18c535f060c51e897741482430cefdf81cf891d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:71:74:4a:18:29:52:47:27:98:93:cc:41:
28:a3:1b:25:f0:e7:cc:6c:e3:9b:e1:04:86:98:33:
9d:a8:ef:94:09:dd:dc:bf:6f:97:7e:14:5b:79:7d:
8a:9a:b6:f1:04:81:9c:cd:8b:74:94:2e:83:b3:ab:
5e:c3:ac:ee:cf:20:6b:0c:d7:bd:58:b6:5b:2e:0d:
52:b0:9e:da:a9:bc:68:f7:11:c1:6a:bc:73:40:b7:
81:70:40:e3:46:46:68:3a:7d:38:78:f8:b5:0e:f5:
b9:5c:85:8f:3f:f3:49:9e:8a:bd:9f:f1:55:28:68:
28:0f:94:59:42:6a:05:cb:ba:27:e5:ce:9b:ca:07:
08:d9:f1:ee:fa:65:8b:63:5e:c8:1f:12:6f:9f:3d:
b4:d5:a7:2a:41:d5:97:b3:f5:f0:46:2c:2b:59:72:
23:e1:44:80:54:49:b4:f6:39:ae:87:85:6f:d9:cc:
1c:4b:80:0d:13:1d:9d:8e:aa:f1:56:a0:29:e6:d2:
81:81:76:68:92:40:fb:ac:49:a7:9e:70:6e:25:74:
e4:f7:ed:c9:6e:c8:7f:d8:1a:6b:d7:5f:12:0b:9f:
5b:ae:87:e6:39:b5:fc:63:f8:1e:96:53:40:66:40:
51:92:c7:00:89:77:5c:0a:da:df:35:22:ec:b0:e4:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:35:F0:60:C5:1E:89:77:41:48:24:30:CE:FD:F8:1C:F8:91:D6
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:85:26:ed:ac:40:e5:70:e1:d6:d4:52:e7:fe:fb:aa:8f:9c:
fe:44:9a:b2:92:1b:de:d6:a6:12:5d:59:1c:20:7c:21:d7:0c:
2c:b6:bd:e2:a7:6d:f9:c9:f7:07:13:dd:72:8b:0a:90:82:39:
6d:26:35:1d:38:db:53:ca:37:08:5a:3f:a2:57:06:87:c8:3f:
fe:28:b0:0b:32:eb:8b:0e:e0:1d:13:ab:98:e1:06:ec:89:64:
20:dd:49:3c:21:90:98:c8:27:50:5b:f0:1b:bd:b1:b1:04:7f:
2b:d7:60:24:9b:38:fc:25:b9:e5:da:20:2c:ba:06:a2:80:2e:
4c:5f:8b:a5:ee:b1:31:92:63:18:90:31:4e:f2:d9:53:e1:fe:
d0:bb:ff:d7:5a:ef:27:bf:a4:04:55:c2:ad:cc:55:8f:8a:d2:
b9:fa:81:1c:45:3e:f2:4b:0f:6d:f5:9c:6b:c4:a7:94:6c:2d:
0f:13:a3:29:66:19:00:9b:96:1f:0b:c0:0d:75:64:61:01:25:
4c:3c:4c:db:62:b3:07:18:86:d2:ab:ef:72:da:58:af:f5:41:
f7:c3:0d:79:f1:72:ac:de:5f:c3:d7:17:e1:4b:bd:12:30:58:
eb:7b:f2:f1:c1:af:2c:26:ce:38:fa:f4:55:01:cc:22:b3:58:
e2:bb:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:08 2025 by rpki-client