Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: 485DtaHMIDLr/RSckLaaBSrBEd+BQ4/osknOUb5TVOo=
Subject key identifier: 8D:34:3F:A3:11:B5:A2:9C:DC:6D:8C:E2:77:99:F5:7F:DA:76:1C:10
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 0197B6A1BDA6B6110A49053BA2097198E3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 05D0
Signing time: Sat 28 Jun 2025 13:02:22 +0000
Manifest this update: Sat 28 Jun 2025 13:02:22 +0000
Manifest next update: Sun 29 Jun 2025 13:02:22 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: D0xE6nxr95bDQMlH0MYD5wnUNyBvpHEDBUVorA4vxxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:bd:a6:b6:11:0a:49:05:3b:a2:09:71:98:e3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Jun 28 13:02:22 2025 GMT
Not After : Jun 29 13:02:22 2025 GMT
Subject: CN=8d343fa311b5a29cdc6d8ce27799f57fda761c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:c2:82:7d:08:99:00:6b:d8:3f:38:ee:74:
90:b8:cc:71:3b:c4:db:8f:f1:14:bb:24:7d:78:49:
d4:05:02:95:15:4f:28:55:f8:24:9d:02:68:5e:d4:
00:b0:78:92:32:46:f7:83:7c:62:90:c7:3a:e2:31:
5b:3d:d6:4b:2a:6b:80:36:a9:f2:64:3f:cc:c5:45:
f4:da:b8:79:58:cb:8a:bf:48:f6:f9:c2:6f:fa:7d:
36:eb:ae:3e:b3:38:31:7e:ea:12:e5:aa:56:db:e2:
d1:17:64:dc:52:88:c4:2c:58:18:49:21:2f:f6:af:
0b:b4:70:51:25:cb:d1:4e:2a:87:89:f5:d1:95:4b:
26:82:9e:14:de:a9:6c:8c:10:e2:6d:86:a3:c7:7c:
b9:75:bb:27:8a:60:d3:bc:96:f0:0a:3e:23:c3:39:
10:5b:bb:f1:4a:6e:7a:d3:29:49:c9:7e:1d:ee:96:
96:78:02:2f:7b:63:cc:a5:4c:53:ef:e8:a7:4a:1d:
fa:33:70:03:5a:ba:62:45:1e:5a:8c:c5:bf:0d:9c:
c1:04:e2:9c:5b:0b:6f:4c:cf:5d:07:95:54:3f:68:
cd:99:47:00:12:be:e2:29:57:74:34:2b:06:57:60:
0f:d0:8a:9e:99:4e:6b:0c:75:91:0d:71:a4:e7:e1:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:3F:A3:11:B5:A2:9C:DC:6D:8C:E2:77:99:F5:7F:DA:76:1C:10
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:83:d6:27:35:3d:38:27:ef:f8:65:e4:65:95:6d:1a:48:44:
90:b7:85:6d:03:36:66:df:88:19:46:43:c9:ee:41:53:76:b5:
8c:7a:0e:3d:0b:3b:25:c8:72:d2:72:1b:32:7e:01:f0:61:4d:
7a:46:b7:9b:b0:7e:0d:20:52:f3:bf:b8:cb:5a:9e:79:1c:24:
f0:38:ee:84:82:98:20:fb:aa:0e:97:1d:1b:46:61:81:ef:a7:
71:89:57:8c:5c:2a:86:b0:ce:93:5b:ce:72:49:ed:83:1d:03:
6c:da:45:a4:67:70:98:cb:5a:02:59:1b:55:2c:9e:e3:09:cc:
a3:5a:7e:26:63:f5:f8:61:3a:5a:ca:f0:da:22:2d:fb:e6:c5:
eb:f3:72:81:53:bb:60:09:29:b6:72:a5:13:df:a8:db:33:92:
10:61:50:ef:8d:02:04:a3:d0:35:7f:c5:c9:c4:a1:6b:61:50:
95:17:82:ca:1e:2e:61:dd:f4:11:08:bf:69:54:87:7e:91:3a:
b4:67:7d:36:8d:58:53:1f:c9:eb:4a:2e:d7:cf:c4:bf:0a:53:
4f:44:94:54:1f:bd:91:8d:63:e9:37:c9:b1:f1:b5:ef:f8:9c:
e2:69:db:16:23:e3:53:6d:d9:04:d7:76:21:84:93:fb:d7:65:
98:62:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:06 2025 by rpki-client