Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: 1XrgLdu36/OROB5K4YtholeM9cCVtycXofnEfbhyVKM=
Subject key identifier: EE:98:FE:F5:E1:F3:6C:7B:5C:CF:BE:97:66:C6:BE:54:E2:4C:F9:60
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 0197B7B34D5890FCA2DB6ECA4115B6EC9BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0DD4
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: GmVpfU12vDwJ8WPNeUQzo7AO/hJRfm22TyTMCaHCpMA=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4d:58:90:fc:a2:db:6e:ca:41:15:b6:ec:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=ee98fef5e1f36c7b5ccfbe9766c6be54e24cf960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:37:99:bc:dc:73:5e:e3:7a:ee:19:2b:ac:
a0:3f:27:ec:8a:1a:97:9f:38:b5:52:ba:11:21:cc:
f1:cc:c0:76:5f:59:68:72:61:b3:f6:e5:ac:6a:39:
ea:9d:1a:69:56:53:7f:48:c6:18:a4:e4:0e:3f:a7:
06:e6:0a:2b:f0:c5:e8:7a:c2:08:43:3d:84:77:ff:
6e:f3:7f:4f:d1:7b:d4:35:c3:bb:4d:85:c4:76:dd:
a3:a6:9e:8b:8c:b4:a7:23:60:57:b0:1e:fb:82:d6:
88:d4:9a:f7:a9:ab:89:ac:ee:1d:36:3d:bd:5d:71:
47:7d:96:49:8c:c5:9d:d6:05:56:9c:24:f5:7e:92:
85:49:59:b9:12:4a:0b:55:8f:74:e4:b5:65:3a:f2:
6e:81:12:7e:8e:8b:18:a3:e0:5b:cf:c8:00:b4:6c:
a6:41:88:4c:e7:8e:8b:92:61:c5:6a:ac:1d:de:a4:
e2:22:9d:30:24:23:de:36:02:11:57:76:fd:a7:70:
1e:94:5f:9c:7f:34:ce:99:de:65:14:eb:ee:a4:65:
c3:7f:6e:4e:67:ed:8f:6c:aa:49:8d:5b:a2:26:92:
68:2d:a1:bb:14:71:77:ef:36:00:a9:89:85:2d:c7:
b6:f7:d5:a3:4a:64:7b:80:86:e3:7e:e8:c6:fd:f0:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:98:FE:F5:E1:F3:6C:7B:5C:CF:BE:97:66:C6:BE:54:E2:4C:F9:60
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4a:6b:0e:b4:af:e7:80:db:5a:52:1e:f0:be:57:60:fb:7d:
12:4a:c6:48:79:fa:39:44:44:3b:be:e9:47:f5:9c:08:0d:e1:
12:7f:93:ee:e2:66:76:0f:ca:70:36:2e:20:5a:9b:d0:e4:46:
6d:c9:94:e2:1b:37:3e:5f:8c:52:bf:2e:b3:f3:9e:24:94:f3:
cd:01:b5:a6:15:4a:df:03:35:9b:85:bb:e0:23:22:3a:3e:68:
5b:3e:2b:0a:a8:c9:21:5a:3d:11:93:80:cb:9f:c9:92:17:f7:
8c:20:15:a5:b6:6e:0e:88:e1:19:dd:2e:54:6a:b1:30:a3:73:
4a:ea:72:13:7e:39:c0:16:a5:f1:a9:d5:8e:25:eb:73:34:56:
5d:f3:4b:ab:3f:43:6c:ee:11:d2:5b:d9:67:70:09:01:f1:fb:
b7:08:6d:ef:d8:b9:07:c5:fa:22:2d:47:00:c8:a1:8e:a5:d6:
8c:1b:85:2f:42:4b:2a:90:0e:b2:fe:cf:f7:c1:ac:80:ff:05:
fe:21:03:c0:43:fa:66:ca:8b:5a:ee:d4:bb:cf:31:c8:eb:f7:
11:44:03:b7:ea:a5:f7:47:e5:09:8d:72:a0:55:29:d0:11:e9:
c6:51:dc:e5:38:8e:ca:4d:e8:70:4f:de:b9:80:fe:de:58:4a:
98:1f:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:45 2025 by rpki-client