Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: IOyMfVwVxxpV/ygk0MsudiLENUaXimzyBi1Q5qAJaqU=
Subject key identifier: 0A:D8:35:96:11:85:A3:C7:8A:93:E0:45:13:2C:A9:C8:24:34:99:FB
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 0197B6A06F0EC8303D94A2EF182AED3CA9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 120D
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: ySeWbC/TGoRc6TbZqtEfNWDr4ezVCXWJ9dDC25nqRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6f:0e:c8:30:3d:94:a2:ef:18:2a:ed:3c:a9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=0ad835961185a3c78a93e045132ca9c8243499fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:14:f1:b9:07:15:50:ca:26:b5:d8:ed:22:
d8:f6:40:ba:34:85:41:57:ac:bb:c9:91:4b:4c:92:
c7:91:a2:e0:a3:b6:5f:8b:91:65:dc:fc:ea:89:e4:
ad:65:a4:04:46:d0:72:6e:30:99:37:59:e0:00:2c:
fe:9a:0a:28:64:33:2f:f6:d1:cc:ee:d3:58:12:0f:
63:ad:4f:4d:26:2d:33:c5:93:22:e4:23:71:32:95:
05:22:fc:5e:54:0e:4d:df:72:33:8c:54:d0:11:62:
3f:78:29:13:33:82:1e:a4:15:bb:f7:67:0e:da:19:
47:98:da:8b:1e:94:69:b2:b3:b3:76:44:c6:58:aa:
55:02:a3:f8:ef:b6:0a:58:1f:87:63:e7:af:d9:33:
54:0e:d6:76:40:2a:2d:6c:20:54:38:52:1f:68:15:
8d:c9:14:f2:66:62:64:ae:68:ab:ad:2c:62:58:9a:
fa:19:22:2d:b7:26:fd:19:27:70:76:2b:66:73:44:
a0:7d:d4:b7:40:1a:a1:da:ac:8d:85:6c:e8:e7:61:
79:97:1a:f1:bd:a9:f1:e2:89:03:11:11:0c:99:11:
e7:a9:c4:93:97:56:a8:04:29:42:39:94:18:dc:30:
3a:cc:4c:35:34:c5:92:b9:d3:af:e3:76:e0:4b:8d:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:35:96:11:85:A3:C7:8A:93:E0:45:13:2C:A9:C8:24:34:99:FB
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:20:8f:e2:18:f2:e4:bc:a0:60:41:d1:cd:02:52:90:dd:12:
4e:46:a3:7e:b6:a6:0e:76:91:18:df:66:3c:e5:42:2a:46:5c:
6f:92:7b:44:42:6d:d1:ec:8c:80:7b:65:ab:57:4c:86:19:8c:
dd:f4:62:dd:54:00:da:05:7e:e5:6e:85:c2:1f:c9:84:7c:2c:
16:4d:4d:41:51:c0:87:12:a3:bb:e2:63:7d:93:23:29:0f:88:
bc:13:81:7a:19:85:69:64:4d:2a:af:87:44:43:1a:89:75:81:
0b:a0:40:bb:ad:ea:0c:f2:14:1d:5a:47:7f:f9:4c:91:40:82:
7c:70:6e:86:64:d8:4e:ae:b4:fc:4b:ef:c5:f0:e2:4c:6f:7d:
05:d1:07:8d:aa:9a:24:be:8d:14:ad:fd:f5:ec:ec:0b:76:c4:
3e:5d:19:a5:21:9e:0e:5f:f6:5e:aa:57:5a:96:25:b9:12:9f:
e5:45:43:c5:6e:b8:1b:9d:c5:58:a7:b8:91:1f:4c:4a:bf:b6:
22:67:56:fd:8b:00:04:5b:7b:81:d3:34:61:54:43:e4:ef:c1:
8e:a4:d1:9e:86:ed:c1:ad:c3:e2:2e:e6:18:55:9f:22:c9:53:
6e:65:6e:c2:1f:0b:1a:84:34:31:c4:a1:29:47:ad:e0:31:8f:
71:71:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:54 2025 by rpki-client