Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: zKQ4RPZrqUchtm4pseC9rQL2EPBkU0i/vA00Yq+s84Y=
Subject key identifier: 0D:0A:AD:39:08:81:AC:1D:75:01:11:69:2A:89:14:24:6A:83:C0:46
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 0197B82141C43DB4863EE9929364F3F37C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0ABB
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: D93yZPaQVJVZorfMCOoH5mkxISjDsalOeQgAlRs0Gfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:41:c4:3d:b4:86:3e:e9:92:93:64:f3:f3:7c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=0d0aad390881ac1d750111692a8914246a83c046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:4b:13:b9:67:16:94:5b:4d:ac:c7:cc:1c:
a9:c7:18:4f:9b:1c:42:6d:6e:18:fc:f9:cd:44:64:
1f:c9:44:1a:06:35:85:be:2b:41:85:5a:74:c0:93:
05:d0:f8:31:9b:69:2e:74:58:66:e5:30:fc:d7:08:
b4:75:fc:7d:b6:07:b6:84:1d:6a:63:4a:f0:09:70:
0e:c4:a0:42:db:ca:fb:29:13:5e:27:e2:25:bc:6b:
91:e3:63:40:32:61:f6:2e:12:f3:34:d5:14:4d:0c:
e0:0a:98:ec:db:66:7e:99:2e:38:43:48:44:47:65:
13:c6:28:bb:b3:10:34:91:d9:82:ea:bf:c7:e6:b5:
2f:20:ee:ac:27:9c:e9:95:bc:91:03:a3:e0:bf:fa:
aa:8e:48:56:2d:10:ee:00:aa:d1:c4:4d:61:6d:7a:
53:ca:1f:5f:22:a0:52:8a:4c:ca:95:6b:82:fb:e0:
9a:b0:f6:fd:22:78:15:7a:c9:78:ad:15:cb:c3:47:
16:e4:25:b1:ef:be:b4:8e:10:76:fe:07:86:d7:62:
84:30:ff:29:60:21:d8:db:ae:79:d9:6f:c1:bd:8c:
1b:34:65:72:6e:6c:bf:95:34:25:dc:fe:79:b6:dd:
5b:5d:24:cb:70:70:50:cb:40:17:a5:f9:6e:65:6e:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:AD:39:08:81:AC:1D:75:01:11:69:2A:89:14:24:6A:83:C0:46
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ce:3e:61:1d:07:ea:54:15:da:aa:c2:f2:19:0b:d6:40:17:
78:e4:f6:13:70:7f:fb:b1:c8:2d:04:65:a5:43:28:a8:f8:68:
55:de:81:fb:60:ef:12:80:fd:92:40:1b:ef:99:47:60:de:60:
6f:77:c5:90:f0:01:18:ac:d4:81:d8:55:db:f2:30:fa:34:d3:
34:aa:5e:6b:62:af:18:e6:10:23:54:47:66:9a:90:38:a9:25:
dd:c0:1b:fc:8b:82:d1:fb:fc:39:35:7d:d5:86:d5:f1:b0:67:
5c:1a:ac:a3:4a:0a:e5:2a:da:85:64:61:11:5c:12:be:fa:e2:
d4:37:bb:26:32:c6:fc:f8:2e:43:d6:03:da:59:4d:b0:07:67:
74:c2:ff:be:1c:b2:60:01:94:f6:30:26:b2:2d:04:72:af:7c:
24:59:b4:b6:33:fb:8b:00:92:e4:ea:e1:b8:6b:21:a6:28:5d:
05:e6:01:2e:73:e4:3a:ee:ca:fe:21:0a:69:cd:9e:42:ed:53:
75:84:21:05:d3:99:0c:31:60:d7:61:33:19:10:a2:3a:c0:54:
8e:df:32:f3:63:2c:fb:7b:4b:47:be:bc:5a:a0:7f:6f:61:54:
d9:0b:02:32:11:f5:53:c7:03:75:dd:de:07:20:4d:f2:98:3a:
7a:e6:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:49 2025 by rpki-client