Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: Fq6lqXUYfMbhcPrcPdJlj5zSShW/OVIVwyQ7efR81wU=
Subject key identifier: 7B:5A:F8:33:D6:2E:68:75:A0:84:EE:6E:A8:2D:F3:B7:40:E2:D6:46
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 0197C2DBCA396E99665360182CC1355795C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 15BD
Signing time: Mon 30 Jun 2025 22:01:13 +0000
Manifest this update: Mon 30 Jun 2025 22:01:13 +0000
Manifest next update: Tue 01 Jul 2025 22:01:13 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: 5gPfEv+I2qfd+uDhboYuUPtWi4ln64G6gFtfadq1EXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:ca:39:6e:99:66:53:60:18:2c:c1:35:57:95:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Jun 30 22:01:13 2025 GMT
Not After : Jul 1 22:01:13 2025 GMT
Subject: CN=7b5af833d62e6875a084ee6ea82df3b740e2d646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:af:59:97:66:3e:d1:aa:3f:d0:83:81:14:
75:4f:da:1b:7b:54:cf:f0:fb:e4:9d:5d:1b:bd:99:
54:4a:92:c4:78:c3:34:0e:27:d6:b0:c9:98:e5:8b:
99:01:da:83:42:b6:04:d3:54:1a:7d:fc:dd:67:e3:
9f:d7:78:c7:24:c1:93:e7:44:96:b2:7d:db:0f:2d:
6c:22:e3:68:ca:a2:63:be:d8:38:39:fe:73:e2:6d:
dc:e2:94:dd:2e:cd:0c:d2:c5:21:8d:63:af:c3:f8:
29:d4:85:c7:c0:82:50:2c:8b:b0:66:a0:ce:40:9f:
a2:f2:b9:7e:86:b6:bd:33:18:09:d1:5f:0a:83:50:
c1:cc:92:b4:96:67:c5:06:4e:26:56:25:c9:e1:7d:
28:b0:68:b6:b4:a4:0a:bb:35:16:f3:eb:7b:62:67:
5d:46:17:c4:51:fe:0e:f9:cf:02:13:c0:f6:d8:b8:
09:8c:65:21:fc:e7:87:17:68:b2:44:36:37:bf:b8:
eb:83:d5:28:e9:41:91:48:1d:5f:96:53:de:6f:7c:
ed:93:cd:d2:91:b2:58:5b:4e:cf:f6:36:eb:a3:6c:
bb:30:28:17:bf:b1:2d:23:00:f0:3b:5d:30:13:e5:
a4:a8:7b:88:fc:a3:2c:ad:fd:f6:68:44:04:2b:0a:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5A:F8:33:D6:2E:68:75:A0:84:EE:6E:A8:2D:F3:B7:40:E2:D6:46
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b4:d1:a3:fa:92:5f:75:be:60:46:56:5b:6f:38:08:6f:61:
11:88:c7:c5:5f:aa:51:b0:c8:bd:6e:97:be:be:e9:42:c4:52:
84:ce:68:1e:c5:96:ff:3e:4a:a6:83:68:79:33:c1:74:b7:57:
72:3c:1c:e9:b1:a3:e8:6b:b9:f3:d0:9f:6e:ec:49:c2:36:3c:
d0:06:bc:dd:57:78:c7:77:66:26:40:36:dc:9a:86:63:56:03:
0d:7a:36:e4:63:17:1a:f7:fa:3e:f0:8f:bb:b7:8c:de:33:ae:
60:08:3e:2d:4b:41:e4:ec:05:7f:0e:c0:f0:e1:4f:a6:f6:e4:
26:60:0d:8a:d2:6c:88:29:ab:02:d7:22:70:19:99:86:0b:3b:
b2:8e:87:2d:88:53:ee:e8:a0:e6:bd:9c:6d:38:dd:e3:ee:60:
94:12:fe:d0:3f:b8:25:43:f8:77:52:52:7d:96:ec:61:cb:60:
f4:14:e3:91:53:e5:08:6e:c6:11:9f:cf:63:71:0c:e6:fa:ed:
39:70:3e:15:c5:5c:28:f7:23:12:9d:95:e7:9b:87:11:4b:a8:
fd:a9:73:85:86:08:4b:f7:9e:b5:c1:15:7c:42:dc:a2:da:06:
9e:55:5d:4f:7b:75:64:5d:59:ac:e9:ea:d8:cd:ea:0a:36:71:
97:47:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:27:58 2025 by rpki-client