Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: m3KS7Tb/q+xsJX5QlGwyICk2RCsP3UVY5jy5l1H8AoE=
Subject key identifier: BC:7F:36:99:94:FE:6F:7D:0E:41:14:41:B0:8A:26:31:2C:72:C5:73
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 0197BFDA84AE2EC5EF841BFBB434098E7065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0AAC
Signing time: Mon 30 Jun 2025 08:00:58 +0000
Manifest this update: Mon 30 Jun 2025 08:00:58 +0000
Manifest next update: Tue 01 Jul 2025 08:00:58 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: 93BGTrE0EeR3lmfayvZDPlQqUnacl/yGAWhbSchUEAI=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:84:ae:2e:c5:ef:84:1b:fb:b4:34:09:8e:70:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Jun 30 08:00:58 2025 GMT
Not After : Jul 1 08:00:58 2025 GMT
Subject: CN=bc7f369994fe6f7d0e411441b08a26312c72c573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:8b:c0:dc:13:22:89:e4:cd:ee:c8:80:b1:
cb:64:4e:6a:fa:cf:07:53:d3:b5:59:58:90:3b:13:
0a:4f:5e:e0:c1:62:59:18:e5:2c:82:99:05:98:36:
f0:1a:bb:4e:4b:d2:22:9e:bd:ad:52:f5:32:97:4b:
4f:86:62:5e:26:c7:94:95:4b:49:36:f8:cf:1c:fe:
fc:b1:38:aa:62:29:9b:4e:79:2e:cc:3c:76:cf:49:
6b:d0:09:f2:9a:25:cd:f2:77:f6:1d:1f:d4:cf:5d:
9e:e2:18:78:15:5c:5d:9b:43:c8:13:93:8c:3e:02:
90:f0:63:7f:1d:4b:c6:61:a9:5a:c0:ca:0e:75:94:
55:63:b2:5b:ee:81:c3:fd:d6:af:08:b1:b4:eb:b9:
0c:f6:fd:5e:b3:84:85:44:b5:66:ad:26:1f:1a:db:
7b:ab:0e:f8:08:8f:4d:3c:28:1a:7c:00:5f:58:1c:
8f:c9:1e:15:67:2e:f7:80:10:e9:e0:d8:82:8b:46:
43:08:ec:e2:40:a7:64:74:8d:d6:78:9c:e8:15:95:
f2:9a:5b:86:7c:7f:fb:b7:b1:79:3b:9f:7f:a4:6c:
a9:d2:61:0c:f4:c4:80:ef:5a:0c:c5:b5:df:3e:ee:
d1:14:b9:12:dd:35:8d:b4:75:cb:c0:1a:a3:a0:cc:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7F:36:99:94:FE:6F:7D:0E:41:14:41:B0:8A:26:31:2C:72:C5:73
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:35:14:1f:08:60:fe:63:68:77:04:24:fb:e1:b0:b1:25:
e8:8c:41:47:68:d9:f3:36:54:5c:2c:dc:d8:13:6c:e8:d1:58:
a2:3b:c4:5d:4a:db:8c:e2:6f:a3:38:3a:22:54:84:0d:91:d3:
8c:55:28:e0:65:ba:d8:f6:56:71:c2:b5:97:eb:83:04:53:68:
43:9e:e3:fe:af:60:53:4f:e1:ef:fd:76:5b:5f:91:bf:29:06:
ce:6c:72:ac:81:e5:d3:b0:ea:53:f3:4c:b7:79:64:4f:b3:b4:
50:76:ae:3d:c3:30:ce:7b:b3:12:df:4e:af:f3:a1:30:80:74:
48:4d:f7:86:bd:df:88:cc:a7:cf:1e:f0:bd:79:7d:f0:77:ea:
da:24:c5:76:d8:18:82:5f:51:22:5a:59:d9:ac:2b:f7:f1:c4:
ed:05:5e:73:05:2a:34:c7:56:e2:d6:ae:0d:5e:cd:10:16:ff:
a6:46:be:f4:ae:fb:a9:eb:02:0f:b5:a6:b4:08:2f:7b:ae:c9:
64:44:be:a3:2b:03:82:2a:1a:13:8b:5a:25:35:91:d9:7b:44:
48:f2:db:55:4e:04:34:33:10:35:dd:64:9e:52:70:16:21:bb:
7b:65:86:98:1e:a8:e8:7c:dc:2c:60:5b:f1:ed:81:a6:b4:53:
84:1e:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:31:59 2025 by rpki-client