Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: JfwMp2+ffcOLM6gWJ3EaFzsCnGPjoAtb28N3xRwSugI=
Subject key identifier: AE:8B:52:E8:24:5E:3C:B5:D2:46:68:DA:8B:0E:30:10:FB:F8:89:5E
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 0197B821195974B396EFAE10DE77491326D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: jZ1NMwUex+Mprse8m3e0Ze0DkaHiV+uOVkxUmYs4ejY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:19:59:74:b3:96:ef:ae:10:de:77:49:13:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=ae8b52e8245e3cb5d24668da8b0e3010fbf8895e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:e7:af:25:06:be:81:68:dc:2b:9a:af:97:
68:e1:b7:eb:05:a8:cc:f6:42:90:b5:90:ba:81:0a:
03:67:71:d3:a9:0d:3e:9d:c1:d1:3e:e8:02:cd:1e:
cd:71:49:5e:32:f1:7d:e1:2e:01:6b:a8:bd:58:bf:
b6:1f:73:e2:4b:7a:17:ec:d0:2d:cf:89:fb:84:19:
90:ef:52:54:e7:a7:2e:18:5a:9f:4b:cb:9a:1e:1b:
5d:db:9f:0a:9e:12:5f:96:de:ca:ca:cb:cf:59:bc:
ca:e5:6e:62:e3:78:11:8f:c3:c6:60:2e:3b:2e:91:
11:9d:70:74:44:94:fb:18:4d:d6:01:85:d8:c8:80:
9e:8b:df:51:8b:96:65:55:1f:26:03:a2:83:05:ab:
c7:50:27:6a:92:ac:90:6c:82:51:bd:5c:7e:ce:85:
dd:fe:12:c7:82:79:87:85:c2:51:5f:d8:e4:ed:4b:
25:43:5c:20:ec:21:60:14:e3:4f:c8:86:0b:d0:3e:
b4:8f:eb:69:87:74:90:a3:67:ce:5f:a4:61:d0:a9:
64:d6:f6:9d:a9:e3:0f:d1:66:47:53:42:af:a9:a2:
03:aa:da:be:4a:d2:5c:b4:72:7c:10:05:04:a9:22:
f1:38:88:ab:cd:32:91:75:4c:72:94:db:2c:a1:76:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:52:E8:24:5E:3C:B5:D2:46:68:DA:8B:0E:30:10:FB:F8:89:5E
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f9:c4:36:ad:1c:47:45:90:30:5b:6c:85:88:ca:e0:62:d1:
2e:e2:bf:f0:04:10:19:93:a8:4c:6a:5d:3f:ec:40:8e:68:5e:
e0:11:46:96:da:5e:53:cd:31:bd:e8:f4:96:51:8f:de:af:00:
f6:76:0c:a3:63:2d:15:36:94:b0:f9:17:1f:a8:df:12:58:5a:
63:fd:9e:4c:0c:26:0e:d6:28:9a:13:bd:2e:4a:6f:e7:05:69:
77:3d:4d:b5:c4:57:27:cd:c6:5c:64:a9:a3:2b:fc:7f:d4:cc:
7a:e1:7c:1f:d8:f7:bd:9b:0e:e3:8b:7e:22:b4:9f:d8:ad:d7:
e3:e1:83:a0:7b:69:3c:c5:1f:83:a1:ce:77:47:e5:95:25:c6:
ae:57:85:e2:53:d7:f0:20:cb:15:a8:bc:2b:40:e1:4c:3a:41:
4a:18:00:7c:49:99:76:a5:ed:8f:8f:05:1c:76:f4:c8:c6:87:
f5:0b:28:d3:77:80:54:10:6e:02:4b:0f:f8:da:6a:41:e1:ee:
2c:65:43:f6:0b:e5:eb:84:2f:57:93:82:b7:c0:42:79:90:b0:
cf:d3:92:09:0c:45:09:5c:6a:e1:38:48:7d:cc:de:3a:2c:9f:
2d:3b:aa:44:4f:89:80:43:be:0d:aa:b9:20:a6:d4:08:cb:ec:
b8:c3:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:47 2025 by rpki-client