Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: dLMRploRRpqfeN1y9CSO9xxEuC15sSJSRyFTSN+B68A=
Subject key identifier: 33:04:8C:22:D0:52:91:F1:19:A1:C9:37:3D:70:0A:1C:B2:E3:AC:02
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 0197C12415C158F111495D46CFE5B58D2BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0D49
Signing time: Mon 30 Jun 2025 14:00:56 +0000
Manifest this update: Mon 30 Jun 2025 14:00:56 +0000
Manifest next update: Tue 01 Jul 2025 14:00:56 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: X6WfPjevnd+ogkCzg7yoKLOWzWZgspwUOSU82/Qd3K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:15:c1:58:f1:11:49:5d:46:cf:e5:b5:8d:2b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Jun 30 14:00:56 2025 GMT
Not After : Jul 1 14:00:56 2025 GMT
Subject: CN=33048c22d05291f119a1c9373d700a1cb2e3ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:a2:b1:f3:80:33:e9:ee:40:16:32:e7:b0:
65:f6:e1:70:d9:9f:9c:8d:63:34:c0:4d:3e:8b:88:
66:39:01:f4:77:e3:b7:c2:12:f7:63:4e:86:04:e1:
3b:d2:46:19:7e:e6:14:e7:3c:1b:aa:0b:a7:26:a6:
61:29:fd:8f:94:b9:12:33:84:41:f9:13:84:ba:32:
ac:ca:97:bf:17:4f:4b:ad:9e:01:bc:d9:f3:62:01:
4b:76:95:ce:25:b8:d2:5e:85:90:0a:7d:40:d6:2e:
49:49:9f:61:73:a3:b4:65:6f:34:d9:dd:41:a6:1b:
f6:3c:6d:28:3e:9b:1b:0b:68:58:0b:c9:3a:5c:3d:
4e:2b:77:cd:44:83:ae:15:67:1e:ab:33:e2:64:8a:
f2:54:4d:8d:3a:4b:2d:9f:c0:3e:ac:6c:63:fe:12:
c1:b3:40:f3:d1:6a:f0:05:e0:6d:15:20:ff:b3:3b:
2f:37:66:1f:79:9b:90:1b:a5:22:47:7a:73:cd:69:
95:8e:61:c7:1e:e4:d8:69:1a:d4:7f:11:b3:3e:8d:
52:92:a3:02:d3:8e:c3:26:df:a5:ef:e4:cf:ad:91:
c5:fb:d8:2a:0f:2f:00:83:c8:b4:be:bc:6b:af:b6:
18:ce:e1:eb:e7:34:05:05:d0:a4:88:41:32:b1:8f:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:04:8C:22:D0:52:91:F1:19:A1:C9:37:3D:70:0A:1C:B2:E3:AC:02
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:06:6e:23:db:5f:15:c2:cf:08:34:cf:3f:74:62:1c:ad:
de:04:aa:23:4f:6c:a4:7a:9a:eb:29:b2:8f:ad:17:6e:54:32:
1a:75:be:1e:fb:4d:46:51:eb:39:de:9e:0f:54:b0:45:e2:54:
25:31:f3:5d:9e:2d:6b:da:1f:cd:90:bf:a1:a7:12:4f:dd:d8:
27:1b:a4:70:ff:8a:97:34:82:41:7a:18:6e:7f:fd:8c:dc:bb:
65:ed:d8:72:11:62:0d:08:28:d0:54:0b:60:1f:4f:6e:61:1c:
37:cd:d2:1e:29:f0:2a:13:7f:0f:f9:e3:5f:09:0c:ae:13:f9:
1c:67:68:d0:de:e7:64:3e:a8:4e:9c:3e:84:bd:73:98:00:a2:
bf:83:b5:66:b4:6e:fa:36:7f:2c:1e:0a:77:aa:01:02:77:cc:
af:4f:1f:6f:5f:d3:ed:95:26:9a:40:ef:1d:40:dd:43:ec:ba:
1e:5b:8f:e7:ac:61:3c:12:36:62:b6:94:79:ce:2a:d3:6a:d6:
2f:e7:92:de:1c:0f:29:4d:e0:59:2b:af:6f:a6:56:f8:c8:35:
38:4b:73:13:11:db:70:64:9b:a9:5b:07:39:7e:de:82:40:b8:
79:e2:a5:59:ee:3d:f6:ab:37:93:f4:f4:7e:46:a5:ba:97:53:
be:96:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:28:38 2025 by rpki-client