Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json)
Hash identifier: fxZ9M47SlLXuk9JGGr55caKDSaoQ5KMlaA9u2JXGdyQ=
Subject key identifier: FE:37:4A:DD:9A:47:43:51:C2:B6:AF:A2:BF:87:3A:99:8D:02:81:E6
Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Certificate serial: 0197B8C5FF691B3ACC13A2BC26BBC1F592BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
Manifest number: 0131
Signing time: Sat 28 Jun 2025 23:01:13 +0000
Manifest this update: Sat 28 Jun 2025 23:01:13 +0000
Manifest next update: Sun 29 Jun 2025 23:01:13 +0000
Files and hashes: 1: hGnhNt09WVSvAvlRb80VOz0njRw.roa (hash: reYotro4wzpVN+aJarCV//yL8yhlq3gQQiQttC9Xbrk=)
2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: E+uh7drA/qs3MyWLfBZggdBBj7qq9AvhhqvKYBouVVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:ff:69:1b:3a:cc:13:a2:bc:26:bb:c1:f5:92:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Validity
Not Before: Jun 28 23:01:13 2025 GMT
Not After : Jun 29 23:01:13 2025 GMT
Subject: CN=fe374add9a474351c2b6afa2bf873a998d0281e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:4f:a6:f3:56:4d:05:18:ff:16:da:ea:5c:
3b:07:39:92:ff:29:7f:dc:c1:7d:95:42:dc:24:56:
77:49:d2:58:73:50:30:b1:11:0c:42:3e:f0:70:07:
59:3d:d8:fb:f3:b0:aa:fe:3a:65:b7:3c:6b:3a:bb:
5f:20:48:df:24:48:ce:3c:b4:ae:1c:8b:82:2b:58:
de:3d:e5:f9:66:ae:bd:40:9d:68:41:6d:8d:19:2c:
96:9d:32:1b:e9:8f:0f:3a:66:6b:c3:9d:08:15:79:
d0:31:d7:27:a7:89:f4:99:df:97:3a:73:a9:e7:bb:
aa:eb:88:8b:9f:fb:ae:cc:fb:85:15:1d:b9:e3:d6:
4f:e3:1c:66:87:11:a6:96:6d:ac:10:60:64:af:db:
33:6d:14:27:0a:38:4a:3f:15:90:32:8a:57:b3:09:
ba:62:80:32:54:1b:4b:82:48:20:f2:6c:1c:f8:8a:
19:51:5e:55:2f:22:0b:3a:17:89:97:74:71:25:d6:
d7:d6:54:34:cd:8b:21:a6:9b:d7:de:0e:90:86:b9:
5f:cc:f2:09:f9:83:eb:cc:8c:7c:08:ad:3f:75:a7:
b5:1d:49:f9:95:2b:35:dd:e6:96:a3:26:bc:02:91:
d6:c2:29:8b:61:4f:d4:87:4e:5c:25:fe:a2:ff:69:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:4A:DD:9A:47:43:51:C2:B6:AF:A2:BF:87:3A:99:8D:02:81:E6
X509v3 Authority Key Identifier:
keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:49:a1:57:d4:cb:4a:35:86:a3:c9:9e:fd:b4:e2:a9:8d:05:
88:68:db:01:99:ad:4c:50:5d:6a:e7:39:8f:ae:f8:dc:29:e4:
85:94:8e:3a:9f:46:96:64:c8:27:68:cc:85:a6:d1:00:9e:6c:
d3:1a:9b:f8:50:60:d0:41:7e:44:a2:d8:4a:85:bc:a4:d7:8c:
34:f3:24:f9:ad:4f:7e:90:c1:d6:ba:23:cd:1c:0c:1d:4e:5e:
cc:9e:3c:b5:81:bc:72:71:23:0a:c2:7a:fc:31:3e:e7:e0:04:
93:d1:be:9a:6a:67:31:cb:8a:43:90:1f:eb:00:3f:a3:41:0b:
bf:48:f9:b7:ff:4a:6a:f8:ef:f9:cc:97:33:f1:fc:db:7e:48:
a5:68:ad:40:e0:e6:ca:d0:89:0b:ce:dd:85:75:49:12:1e:10:
fc:9e:9a:1b:0f:fe:fe:68:a9:05:c6:00:86:85:33:da:09:73:
d3:62:31:1f:ae:bd:e1:66:92:75:f8:5b:0e:3d:ae:fb:3f:c2:
4c:56:85:7a:d1:4f:eb:49:53:18:32:15:8b:09:28:8e:f6:68:
6f:44:84:4c:be:2f:89:e9:62:7b:e2:1a:0b:a8:0c:69:f7:aa:
b7:ab:a6:ab:f5:4d:2c:bf:0a:2d:9a:77:4a:9f:bf:c7:8f:95:
25:d2:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:05:40 2025 by rpki-client