Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: wUNFla+Di0cimoMD4KZ042wmLvggNuWJmQVsArQRZ4U=
Subject key identifier: 21:DE:71:A5:92:C4:43:9F:05:B8:09:A0:51:23:65:7F:31:F6:20:26
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 0197CC4CE19CB0902206D9656B501A255650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 0D85
Signing time: Wed 02 Jul 2025 18:01:19 +0000
Manifest this update: Wed 02 Jul 2025 18:01:19 +0000
Manifest next update: Thu 03 Jul 2025 18:01:19 +0000
Files and hashes: 1: Wg-bSrUatmukyH3xDDiSbozsSDE.roa (hash: +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: yEXUgq7WpTqfw1uLSn3lL8QupbhfS9Qfj0XQuv49I3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:e1:9c:b0:90:22:06:d9:65:6b:50:1a:25:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Jul 2 18:01:19 2025 GMT
Not After : Jul 3 18:01:19 2025 GMT
Subject: CN=21de71a592c4439f05b809a05123657f31f62026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:e9:48:6a:d9:f8:d2:96:1d:1d:fb:4b:22:
23:eb:31:13:13:a3:57:cb:1d:48:db:3c:cc:58:44:
51:fe:f5:61:10:ff:3c:94:21:7f:bb:c7:21:13:8d:
c5:b3:79:a6:b3:1d:6c:a7:8b:e8:fe:71:11:fb:20:
46:4d:0c:23:9f:0f:3a:bc:44:22:31:03:0c:21:de:
47:5d:50:e1:2c:ad:6e:c8:93:2a:c8:80:89:78:80:
f9:91:da:7b:ad:cd:fe:95:e6:75:40:5e:ee:20:81:
e2:e7:7f:df:ad:ac:7f:06:17:98:f6:2a:c7:0a:eb:
2b:2e:36:34:51:db:1c:d8:e5:54:42:8d:82:0f:ac:
c9:cb:eb:f6:47:0d:09:27:11:67:97:fc:1e:90:d9:
cb:1f:d4:47:bb:51:57:67:01:03:f6:72:f1:24:6a:
b9:fd:b2:d6:07:e4:10:82:1d:0e:3d:b1:d4:a9:bd:
69:c5:98:ef:8b:4b:74:d1:6b:29:47:09:e0:b5:0c:
69:b1:e5:f8:a4:af:90:0c:ed:8c:ca:81:c4:e9:81:
69:b9:ad:33:4f:4c:63:79:af:91:58:29:66:21:a5:
2b:42:cf:c1:9e:0a:b5:55:4d:81:17:fe:65:39:7f:
f3:0b:43:b6:cb:ac:c2:f6:da:fe:e3:7b:9a:8c:a6:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:71:A5:92:C4:43:9F:05:B8:09:A0:51:23:65:7F:31:F6:20:26
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:df:da:11:c2:70:ea:30:8f:a6:66:52:32:3b:fd:52:7f:44:
61:b9:e8:45:22:5c:30:c3:93:e7:95:b6:14:33:81:d1:ee:40:
da:d6:9b:19:fa:85:6f:f0:74:ce:b4:bc:1b:dd:4c:f5:cf:b6:
e4:51:0c:30:c8:86:76:ed:72:69:81:99:fc:76:b2:fc:dc:49:
ff:cc:05:85:84:09:02:a3:86:b9:2b:f3:c1:de:0d:71:d7:70:
a7:8a:79:01:e3:55:52:40:f7:fe:4e:ab:b2:2f:3f:8a:8d:91:
8b:fd:ae:00:86:f2:05:50:1d:95:b6:34:1b:49:5c:9a:a9:77:
ce:05:bb:de:63:96:96:9e:1e:09:ac:0f:37:83:a9:39:51:11:
85:65:3a:7e:db:a7:1f:c7:96:cd:87:10:c7:52:2c:7b:78:89:
79:0b:fe:97:f4:94:00:2e:28:ea:42:cc:4f:d4:28:ce:f3:28:
92:90:98:08:35:c5:28:f4:67:72:5b:d8:c3:3b:48:e8:b7:57:
04:8a:1a:d1:88:be:4f:36:77:d0:1a:c2:4b:af:d7:53:1b:6d:
ec:6d:b4:d6:df:ce:44:f9:e9:24:b5:31:90:b7:27:32:ce:02:
47:c1:61:39:29:fb:0d:b8:46:0e:54:cb:90:e1:be:62:12:c4:
c3:04:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:43:16 2025 by rpki-client