Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: pjlSYkKxVxmWck++DZA/NNQvEGdzc/YY4a3sRd2fChg=
Subject key identifier: 8E:1F:47:E9:76:6C:3B:52:30:25:D5:EB:CF:DB:FE:8B:97:50:D1:28
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 0197B74540F554A9D69A2F9636C083456795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:00:58 +0000
Manifest this update: Sat 28 Jun 2025 16:00:58 +0000
Manifest next update: Sun 29 Jun 2025 16:00:58 +0000
Files and hashes: 1: yEMlFNYIo_7PBG15hC66LWSw4E0.roa (hash: 0NF8QaEpF30c3qMJTec6Bga4N+I8Ns4AqntJ51k9D0k=)
2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: oDNIaHwsKFxl0Vyyzdb/YI/i55ULd1OswnBlE5yJJwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:40:f5:54:a9:d6:9a:2f:96:36:c0:83:45:67:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Jun 28 16:00:58 2025 GMT
Not After : Jun 29 16:00:58 2025 GMT
Subject: CN=8e1f47e9766c3b523025d5ebcfdbfe8b9750d128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:8e:10:f7:e0:d2:21:1c:a1:8c:cd:f3:b1:
06:50:63:8e:f6:a0:1b:58:ae:ad:ee:39:55:40:64:
96:6b:02:aa:62:63:13:a4:c5:8b:9a:30:ad:5f:87:
6f:c7:74:b7:c5:94:92:3f:c0:d5:7b:59:c3:d6:53:
3d:21:79:de:c7:fd:e9:0c:c4:e3:04:f6:ce:76:d3:
2c:54:9e:d3:bf:27:82:7b:5c:0b:69:ca:31:80:cf:
0b:82:79:57:c3:61:a9:64:b0:37:bf:8b:9f:0b:78:
86:9d:ad:63:f8:bc:55:64:ad:a8:ce:82:47:30:04:
ef:4a:fb:99:fb:b9:95:16:ff:34:0e:6a:bb:a3:fa:
42:0d:95:64:b2:20:0d:4c:05:f3:f0:f5:30:6b:dd:
d0:61:1c:cc:e9:b8:53:51:a0:5f:fe:97:e9:7d:5e:
1d:ee:76:4b:b6:23:a0:37:86:69:f6:3c:78:02:71:
b6:1b:04:88:50:4b:6b:31:36:06:a3:5b:42:73:86:
04:e1:b0:9b:07:22:c6:bc:35:a1:9c:ad:1f:1a:27:
de:43:de:55:94:6d:0a:72:31:03:68:21:f0:25:2d:
4e:6e:39:92:f5:4d:48:38:c4:c2:0b:ad:e8:72:dd:
d8:c3:64:f6:37:76:33:0e:ec:e5:00:ab:73:11:d5:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:47:E9:76:6C:3B:52:30:25:D5:EB:CF:DB:FE:8B:97:50:D1:28
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f6:6f:63:dd:7b:48:e9:17:be:72:b8:f1:26:43:2e:5a:8c:
3b:b9:34:b4:10:3b:f9:74:53:3d:73:42:d0:c9:d6:26:b0:93:
0a:ad:8f:52:93:c0:69:4c:e5:4e:16:18:07:70:b7:78:fa:06:
6b:43:cb:4f:0a:fa:1f:d4:9f:8a:a4:ba:80:56:e4:6a:da:db:
64:ad:03:68:3c:6c:39:57:8e:68:b5:f0:03:d4:40:e0:59:8d:
fe:fa:32:5a:2c:98:9e:16:f4:d3:7e:b2:16:91:e5:57:aa:7e:
6f:24:a3:13:48:40:13:df:31:53:b9:77:02:51:1a:4c:b9:75:
bf:40:83:15:e5:45:a2:30:ed:4e:ec:f1:61:65:d7:1d:8f:ef:
f2:e1:b7:6f:b6:4f:d6:4a:8a:3a:87:88:fd:2e:79:65:ce:01:
e0:82:95:5f:57:ce:2e:9a:7e:8e:cb:8c:5d:06:a4:80:56:46:
c9:89:18:5d:c5:a3:ae:61:51:f6:cb:70:ba:4f:75:45:09:b0:
a4:19:d0:d9:48:ab:39:36:e5:ee:5f:f5:e5:6e:63:4b:55:ca:
1c:5a:bd:aa:77:d9:45:b0:bf:d0:a9:05:dd:20:b4:0b:0d:c5:
e8:d1:68:9a:3e:af:49:db:13:bd:2f:64:9d:b3:25:63:70:0a:
09:78:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:28 2025 by rpki-client