Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier: r6IGDmk1JyTO7NrcCfRY7p+b+gC/o3PGw4cDougwByI=
Subject key identifier: 14:1F:0C:4C:4E:4D:7E:72:D8:EE:4B:8F:E8:0E:8D:F2:7B:5F:44:3B
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 0197B6D76090A4025151D86E3DC146AEBDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number: 0C53
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: xYOsm8BUsmYBwfKFXCGnakfV_m8.roa (hash: 061quaNl9U6/3ODiu8AkctDs7yOiVTs6PkYfEN9U9Cs=)
2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: dGH5tfzSR5FDy/GiUskDX2thCpRihKQ+baPZguKk8pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:60:90:a4:02:51:51:d8:6e:3d:c1:46:ae:bd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=141f0c4c4e4d7e72d8ee4b8fe80e8df27b5f443b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:ba:64:70:00:cc:9f:3d:9a:ff:fb:a8:63:
3f:79:ac:c0:e8:52:e0:05:32:66:de:c7:e7:0a:e6:
e9:e2:4d:f9:c9:f2:55:9f:b1:fd:d0:43:60:bd:bd:
fe:de:71:32:dd:be:30:a8:f9:db:5c:42:a8:af:dc:
84:ea:57:7e:ff:e2:11:80:b7:c9:05:3d:6b:a7:09:
60:05:e5:79:36:18:6c:58:89:96:be:37:0e:4f:89:
f9:e2:86:cc:1e:9d:e8:9f:7d:9b:b8:ed:54:c5:8d:
b1:a5:39:bd:2d:69:34:0a:fa:21:f1:c8:44:48:2f:
dd:56:35:2b:5d:90:07:18:4e:8e:cf:76:e6:ed:b3:
24:cd:b7:a2:87:b1:aa:2d:ee:b9:09:f7:fa:b2:09:
1e:e1:27:93:2a:e4:5c:31:b0:9d:de:7c:fd:70:a8:
00:22:75:83:d2:7c:e8:11:76:d9:da:62:e3:41:e4:
ec:03:8c:1a:cf:cf:84:d3:d6:b6:39:f2:69:76:df:
f9:15:25:d2:3f:10:1e:ac:83:c8:42:dd:d9:d4:c5:
bf:df:04:68:5d:2f:64:fe:25:15:20:35:d2:ed:82:
ca:7e:b2:4a:fa:c2:93:80:bb:c9:7b:f2:5f:36:c9:
2d:b5:72:8f:b0:27:4d:36:4c:f6:6b:59:a7:3f:93:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:0C:4C:4E:4D:7E:72:D8:EE:4B:8F:E8:0E:8D:F2:7B:5F:44:3B
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:90:83:68:04:e7:4c:5d:bc:2b:ba:b9:1b:47:88:40:98:
08:90:12:7d:27:60:7d:09:51:6c:5d:b0:56:29:97:d9:7e:77:
63:61:c0:f4:48:ab:29:71:bb:ac:b2:44:03:cd:bc:27:ff:80:
a3:48:b1:7f:0c:a3:7e:49:f7:3a:5f:19:02:df:9e:ac:4b:89:
a8:d0:58:23:bb:88:3e:d5:1d:38:64:48:98:76:f1:0d:ee:5a:
c1:5b:c5:0c:bb:58:0d:a2:3a:b2:8d:b5:63:65:66:b0:fa:07:
e2:c9:13:2f:7e:f4:a7:fd:95:d8:54:51:c8:91:78:01:42:fc:
da:cf:81:b7:8a:9b:aa:9f:29:69:35:ad:63:3e:57:b7:86:04:
73:8a:a2:b8:1e:3f:55:eb:eb:a8:8c:7d:99:0d:72:e9:e3:52:
b1:6f:28:1f:32:3b:b5:bd:31:c1:1a:29:3f:06:e9:3a:0d:9f:
2d:69:33:d0:35:2e:ae:d1:bf:54:9c:e3:f6:fd:42:ef:3b:36:
a2:94:d7:ec:c6:b2:f4:88:bd:dc:91:f3:6d:c1:c0:ec:34:8e:
6a:d0:89:c6:f5:a7:84:68:61:26:d2:ae:8a:68:01:88:0c:df:
6c:91:2b:42:4c:6d:5c:bb:24:86:88:b0:ef:bd:b1:28:0a:5a:
0e:6e:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:48 2025 by rpki-client