Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: rYHzjefOc62No1lR9KTCrDrNIoKzHIKAXLRtbjUbpEE=
Subject key identifier: 11:AF:62:F9:5E:62:36:E4:11:62:32:D6:64:4C:5D:3D:C1:6A:66:E4
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 0197B890249DF4F265F8F06DEE0090E49F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0D7B
Signing time: Sat 28 Jun 2025 22:02:23 +0000
Manifest this update: Sat 28 Jun 2025 22:02:23 +0000
Manifest next update: Sun 29 Jun 2025 22:02:23 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: 7wC11DJoSOJzTOFxmqB9ieB4yeTUc/XNJWaj3jNT62E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:24:9d:f4:f2:65:f8:f0:6d:ee:00:90:e4:9f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jun 28 22:02:23 2025 GMT
Not After : Jun 29 22:02:23 2025 GMT
Subject: CN=11af62f95e6236e4116232d6644c5d3dc16a66e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:85:db:3c:0f:18:07:24:11:c0:71:0f:a9:
2a:e3:d4:62:67:02:a8:08:58:ed:41:22:11:f0:08:
74:9e:bf:ab:93:1b:df:1e:3e:e5:89:71:e3:06:ee:
90:68:93:6a:b5:e8:b7:4d:97:68:4a:c0:47:23:14:
ba:55:fe:29:c4:f0:65:89:81:64:e1:bc:1e:15:31:
df:4a:ee:8f:72:55:db:70:f1:5a:66:5e:40:72:c5:
0a:81:39:66:7b:0e:89:26:f5:4e:09:27:c5:5f:d5:
3d:0a:0f:13:70:ec:ed:21:ce:c9:34:ef:78:6d:91:
b1:89:ae:ea:d9:00:66:b7:3a:cf:bb:a1:ce:e6:49:
0d:32:26:df:c4:73:3b:97:60:9e:c4:8e:18:8a:4d:
1b:ce:bf:d6:ad:45:cd:54:5c:af:a5:10:46:7e:58:
6b:2b:a3:da:d2:03:9f:73:86:42:ee:25:08:1c:80:
48:ca:c8:1c:f9:6d:b3:1f:eb:e6:52:34:60:d0:9d:
64:98:41:98:7f:ae:5c:99:92:af:76:40:48:aa:52:
42:67:8c:f8:6a:36:e1:17:62:f9:db:c3:27:51:2e:
93:00:bc:e6:df:e8:84:0e:91:34:f1:20:96:24:41:
06:b5:0f:10:c9:47:ab:7e:42:ee:03:c7:78:8a:f9:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:62:F9:5E:62:36:E4:11:62:32:D6:64:4C:5D:3D:C1:6A:66:E4
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d6:c8:4e:8e:e4:7a:a9:f2:e5:06:b4:c4:de:52:24:18:3d:
fd:b2:1a:3e:8d:88:d8:52:6a:30:7b:8d:9c:0c:bb:61:f8:1b:
15:30:90:40:d4:b3:45:c1:38:37:0f:24:d7:ad:74:71:97:87:
c6:22:0c:d4:05:c7:88:c4:ae:37:48:ad:5e:94:7f:2a:8b:eb:
29:bd:a5:51:8f:37:4b:98:7e:6f:82:d6:17:da:9d:52:ee:5e:
57:a8:24:39:d1:58:22:00:d9:ff:a1:a8:1d:c8:f9:96:45:7b:
b3:be:28:64:8a:fc:7e:fd:79:35:82:d8:18:3c:8a:04:28:01:
48:61:ce:50:2f:aa:56:d3:8c:c3:e9:b4:28:e0:98:cc:e0:60:
e5:bf:5a:92:c0:13:aa:5a:1e:98:f9:62:6e:ec:01:9a:6e:d0:
13:5e:38:3e:ba:4c:e2:bf:65:e5:ad:35:bd:aa:54:3c:d5:27:
8a:59:96:88:e4:f8:c3:e0:18:e8:e8:e3:92:1a:ba:e0:b7:68:
4e:03:28:2e:5e:0d:75:14:85:eb:28:19:1a:52:ef:91:27:9b:
2b:d7:34:e1:78:1e:33:2f:62:80:20:a7:8c:0d:ee:24:c8:d2:
57:c3:2d:3a:08:2a:93:61:07:cd:95:a2:d2:a0:d3:8b:bb:44:
7e:8a:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:32:28 2025 by rpki-client