Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
File: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json)
Hash identifier: cS6xf0l42EWpCDjERS38/uNjx6AnYaUj5pF2hbm/V98=
Subject key identifier: 34:A5:E6:73:D0:87:C1:27:0D:28:47:1C:50:B2:50:FF:6B:96:85:46
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial: 0197B8908CFF156FFD4585968F95C74A71CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:02:50 +0000
Manifest this update: Sat 28 Jun 2025 22:02:50 +0000
Manifest next update: Sun 29 Jun 2025 22:02:50 +0000
Files and hashes: 1: NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa (hash: 1hCazZpKjVTtjQVFUWpkmXqPQOre2tDQ3dmWvgeOvfo=)
2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: gbDy4XL7kWIGwfoTGMxNc5BIsb5wqciU0nciu+do/Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:8c:ff:15:6f:fd:45:85:96:8f:95:c7:4a:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Validity
Not Before: Jun 28 22:02:50 2025 GMT
Not After : Jun 29 22:02:50 2025 GMT
Subject: CN=34a5e673d087c1270d28471c50b250ff6b968546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:71:3e:87:cf:0e:65:65:4f:55:3b:7d:7b:
3f:31:5a:86:b9:2d:99:82:55:7e:09:f1:f9:f3:96:
0a:73:bc:dc:cc:d4:b2:8a:da:5c:5a:eb:2f:50:22:
7c:d5:3e:15:54:3c:f3:e8:d6:db:4b:4b:44:7d:d9:
1e:94:10:7d:7d:9c:ab:39:5b:8f:1a:76:83:1c:69:
86:cb:08:7a:86:8c:65:e6:ed:47:20:00:c2:77:06:
b3:3a:f6:4b:12:ae:48:c6:41:9d:d8:aa:f6:58:8b:
cd:26:c7:22:47:5e:49:e8:9b:1c:d1:3a:02:4a:ae:
3d:9a:10:7f:a1:cd:11:75:7c:04:10:b4:69:7e:30:
26:4c:1f:94:d8:3d:3a:52:25:eb:d2:85:9c:c6:78:
d5:a0:46:42:1e:bb:fe:44:b4:a1:d1:53:86:9d:ad:
75:07:13:5c:25:fd:12:e3:03:81:ce:96:5b:a3:c8:
60:9e:c6:72:99:e1:dd:2d:7c:3f:bd:a3:25:9b:a6:
b5:a4:54:07:08:90:94:79:ec:b6:23:38:bc:a5:8e:
6a:48:fe:72:8a:1c:e3:56:27:02:dd:5d:1a:76:73:
89:09:e0:fb:32:e4:04:e6:c3:8c:93:88:40:69:5a:
19:c8:aa:ff:7d:70:0d:b7:bf:3d:cb:b4:b7:b1:67:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:E6:73:D0:87:C1:27:0D:28:47:1C:50:B2:50:FF:6B:96:85:46
X509v3 Authority Key Identifier:
keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e3:3b:27:bb:06:5d:35:54:48:b6:eb:74:77:36:ed:59:4b:
7e:0b:be:3f:94:d6:8b:98:c9:fb:5a:cf:8c:0c:62:d2:fa:14:
06:29:ab:ee:a3:89:22:a6:ff:46:70:d8:a2:4f:96:31:65:bd:
81:aa:91:72:f2:a4:03:f8:1c:ba:23:3c:2c:c6:96:fa:c4:b0:
6d:1c:57:8a:9f:f5:b1:8a:11:ff:f7:02:5f:2a:47:15:45:20:
6c:8e:ea:96:61:eb:24:4b:99:75:d2:53:4f:ae:ad:ad:06:63:
1d:3f:44:a1:34:36:8d:77:c2:96:b3:41:0b:42:56:1a:21:52:
7d:0a:87:f2:40:1d:ca:dc:2a:87:be:7e:8e:c2:34:ab:45:77:
26:20:25:05:78:51:c9:37:5d:05:1b:f9:6d:dd:41:38:98:48:
67:35:84:43:94:5b:7e:fa:9f:b0:ff:a2:78:b9:2d:c9:bc:69:
ea:28:ad:5c:d9:0d:0d:80:c1:76:1a:5a:86:4b:f0:f4:72:cf:
bf:cb:30:cb:6c:26:29:3f:a6:76:fe:38:46:4b:a0:13:fc:21:
d2:6f:2c:20:d1:c9:10:4a:c2:19:f9:65:ae:05:87:2a:8d:7d:
f0:2c:4c:9b:f3:d2:40:66:ce:55:aa:81:d3:1a:63:ee:8c:dd:
6d:72:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:52 2025 by rpki-client