Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: 3dUT7HvlgO2Ff+dgiAMb3f60yjjxIKErvnbFWW7FYUk=
Subject key identifier: FC:90:AE:33:B2:BA:D7:B2:6D:11:E8:25:0B:D7:D7:2F:96:74:BA:FD
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 0197B77C8B0498183B93043C32F1A512F653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 0A27
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: L9vkJFA9nJatu+mwekfBo0kXGfuxo3BF/SLMZMnu8sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8b:04:98:18:3b:93:04:3c:32:f1:a5:12:f6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=fc90ae33b2bad7b26d11e8250bd7d72f9674bafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:4d:ba:ea:9c:24:2c:80:ae:d3:34:9c:7a:
87:c0:a7:b8:3f:46:a2:c1:91:b0:50:20:5b:1c:a4:
f0:64:7e:a5:56:92:29:dc:2d:01:e0:be:ad:96:70:
e8:2a:83:0c:ae:9d:fa:95:02:fd:24:80:76:1d:94:
a9:0d:86:e0:14:8a:92:09:cc:35:4c:ed:50:ed:a9:
08:d5:93:9a:4b:cd:ae:f5:fc:c1:74:8c:e4:b8:68:
a8:17:fb:65:b8:c3:16:43:3a:2c:a1:29:b9:92:98:
20:9a:0f:56:53:94:27:36:54:3f:9b:ce:c0:3e:cf:
10:79:db:8f:05:21:2a:8e:6e:72:d1:fc:ad:d6:15:
4a:ba:f5:af:72:95:3e:c4:7b:7e:5a:7d:bf:4b:09:
3b:36:9e:7b:14:fd:d3:8e:c0:3a:d0:05:8b:4a:97:
26:fc:d5:0f:08:d6:c0:21:65:bb:29:de:a7:47:dc:
58:83:de:25:09:49:8d:27:c3:05:d1:21:07:5d:37:
ab:26:b8:06:49:28:31:46:22:f0:6e:f9:27:cf:a5:
71:9c:bd:4c:2c:7a:3c:43:29:0f:73:5a:0a:26:16:
5c:fb:45:21:20:12:b1:99:bb:8d:1b:51:d0:0e:85:
17:18:a9:77:32:76:d5:f4:9d:93:f6:22:45:b9:a0:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:AE:33:B2:BA:D7:B2:6D:11:E8:25:0B:D7:D7:2F:96:74:BA:FD
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d5:54:48:18:8c:4c:d3:b0:b7:e5:ef:f3:a0:75:3d:17:ca:
cd:be:d6:13:00:2f:75:9c:97:98:bf:d5:59:7b:aa:b1:b5:24:
3b:57:42:33:af:1a:89:02:4d:2a:64:fa:a8:a4:af:54:ed:c9:
5c:da:29:26:4b:cf:63:b1:ae:d1:d9:79:83:43:b6:99:c8:8b:
8e:3c:1e:5f:88:84:58:dd:8b:a1:74:4b:4c:81:3b:d9:4d:55:
4e:11:e5:80:8a:1d:84:7e:43:0e:d6:6d:27:be:61:6c:f7:19:
84:c2:ec:ee:b7:31:38:30:93:58:05:60:c0:18:b8:f4:bb:8d:
fe:0f:3b:b9:a4:56:6c:13:0c:00:db:c1:e1:3e:b5:08:4d:c3:
2e:51:cc:46:25:9a:41:4a:54:4f:7d:0b:28:42:60:20:ba:81:
19:4f:e0:d2:df:07:18:56:5a:3b:e9:6c:f1:9b:19:1a:07:8b:
81:6a:9f:15:12:32:27:5b:d3:8f:f2:fd:94:e0:7a:25:27:54:
90:d2:8d:21:ef:fa:e5:29:40:24:b8:27:a9:5f:9e:e1:52:f3:
d3:fe:6e:07:7b:9a:68:13:a5:cc:b8:dc:21:f4:e2:50:82:b1:
18:12:ba:c6:8f:f9:76:83:97:dc:ef:be:03:87:d5:ad:46:8c:
34:b4:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:02 2025 by rpki-client