Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: B1i/BVjk/TJlu1ehEm981FSS6ywEvsljnHW+Oz6FDPg=
Subject key identifier: D0:5E:7F:B3:B5:79:E0:D1:55:F1:80:83:05:4A:8B:28:A1:F3:0A:CF
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 0197B74558AF14F19BE511EAF392AB4D1E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0CEA
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: Pdx/qjweX84iUnEhHPQuqHYmBi5BRdQv0qHpNzL7t00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:58:af:14:f1:9b:e5:11:ea:f3:92:ab:4d:1e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=d05e7fb3b579e0d155f18083054a8b28a1f30acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:26:6a:27:a1:3e:a9:92:51:da:23:a6:40:
3c:ae:d5:62:d4:b1:dd:c5:d4:52:6b:98:57:ff:87:
20:86:60:07:7c:79:01:32:49:70:83:78:ab:2d:25:
8b:0a:df:7e:ab:b2:9f:fd:0a:0a:65:69:bc:e4:0a:
5a:59:ab:83:91:93:5e:42:d5:98:da:75:a1:80:49:
14:95:09:60:7a:b8:e2:00:5c:4d:40:5d:97:e5:14:
92:c8:cf:a3:29:c8:f3:57:46:be:76:90:a3:79:d9:
99:c5:4c:f9:0d:a6:43:57:75:a0:c0:6f:34:0b:e9:
cd:9d:89:f2:32:01:5b:79:31:36:16:19:11:53:35:
c2:90:5a:4f:47:52:d8:12:99:4c:50:5e:a3:94:73:
b7:87:60:e2:b9:73:89:60:55:3f:eb:4b:6e:90:3b:
bf:b7:81:f0:d4:d2:35:c1:d9:a1:58:27:0f:76:6e:
a5:49:15:84:92:24:2a:7e:c0:db:a9:61:ea:f9:de:
51:31:a5:ea:11:f9:be:a9:15:47:94:71:d8:f0:6f:
3f:0a:5b:24:cd:cc:22:5e:78:15:34:83:2c:a7:58:
18:26:77:8d:2b:9f:5b:61:84:b9:ab:a5:46:52:2e:
2e:d4:5e:65:55:ea:8c:41:6d:8d:d4:a1:82:77:81:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:7F:B3:B5:79:E0:D1:55:F1:80:83:05:4A:8B:28:A1:F3:0A:CF
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7c:91:21:48:5c:03:64:90:ca:80:0c:a1:84:86:31:37:51:
bc:bf:86:09:93:6e:f0:5d:5a:19:84:ae:af:eb:e3:67:2d:ce:
eb:63:df:1c:4c:cf:d6:d5:6f:e1:a9:72:08:78:a7:00:60:b9:
c0:11:9e:cb:8f:c4:b7:e3:53:29:a9:0e:ce:67:76:e4:14:37:
42:44:68:2d:26:a0:f5:e5:36:e9:e8:80:5c:d9:db:0e:6d:bb:
94:d9:6a:41:8a:5a:7f:28:34:8b:cf:74:0e:a1:06:36:bb:78:
32:5c:33:06:2b:0b:c3:3a:6b:8d:6a:05:43:1e:33:07:77:57:
24:f6:e2:a8:a1:18:41:67:6a:29:1f:a0:eb:dc:e2:24:88:ef:
ea:d7:3c:a8:a3:e8:84:5b:ea:ab:75:c1:00:5a:46:6b:0a:b7:
14:2e:61:93:fd:b4:53:65:95:29:df:14:ca:61:70:ad:44:30:
ae:e1:32:08:3d:9e:f1:11:65:c4:51:ee:bf:26:86:7e:33:90:
08:da:9a:85:4e:44:a2:0d:d6:bd:7d:d3:51:13:27:80:18:fd:
03:04:8a:51:31:75:67:23:8b:c7:d7:2d:4e:fa:ac:06:2a:a6:
d7:68:cf:e6:1a:5e:c0:b1:0d:bf:b1:0d:63:91:18:e1:d0:cc:
05:17:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:11 2025 by rpki-client