Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: tWwsLlrukbj3L/fN1+n3mydWlcChPqCLdSgxTRclYS8=
Subject key identifier: F4:0A:B7:B5:3D:90:B2:7F:6E:B1:84:67:F4:94:8F:29:87:B9:D9:DD
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 0197B8214B70F7C0CA99F85455D1F32670D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0EC7
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: O/N5NkzdgUhgQWkL8qY//tzB5ghEbmNvSRerhFrt4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4b:70:f7:c0:ca:99:f8:54:55:d1:f3:26:70:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=f40ab7b53d90b27f6eb18467f4948f2987b9d9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:a6:33:98:b9:fb:10:e7:6f:ed:14:2b:22:
10:37:bf:15:c2:08:f5:dd:4c:b5:2e:1a:b0:0a:19:
49:76:f7:3b:6b:2f:1d:6d:03:c7:a2:0f:88:c6:de:
14:ab:43:58:03:7e:f0:d4:0b:2d:c1:50:c1:c9:62:
89:55:4f:88:7a:3c:bb:93:f6:3c:d2:61:22:a9:6a:
f6:e1:df:5b:40:4d:98:fc:bb:35:3b:1f:0a:8e:71:
24:88:6c:9d:93:45:6b:9f:11:16:18:9a:22:2c:72:
36:f3:35:02:5d:3b:54:4c:bc:dc:8d:9a:cf:ae:92:
92:b1:84:88:c6:68:d6:53:72:87:b7:fa:5a:01:1c:
3a:b9:05:2f:48:ec:a0:c4:1d:e8:20:73:c3:22:92:
99:3b:de:a8:74:04:dd:d1:b3:62:ad:58:1d:a8:5e:
93:d2:cc:a1:23:66:93:1d:e1:98:8e:1a:19:74:77:
05:20:49:1a:bf:d9:5a:ef:95:20:da:4f:1f:29:6e:
69:a4:e9:fc:8f:9a:60:b4:e6:45:c8:14:1a:cd:31:
18:02:27:79:96:77:60:10:bc:72:cd:76:8f:45:30:
e3:49:63:c5:ac:4d:76:7b:93:5a:de:4b:67:02:80:
84:d5:b1:9b:a5:cd:8c:db:c5:58:1b:a2:46:5f:de:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0A:B7:B5:3D:90:B2:7F:6E:B1:84:67:F4:94:8F:29:87:B9:D9:DD
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6d:80:57:3a:d4:50:4c:b5:33:08:7b:d1:6b:9a:66:b3:22:
2d:ee:7c:35:3a:49:f7:4e:59:1d:5c:03:b0:a7:5f:b8:4f:80:
44:ea:78:ee:b3:9c:13:33:bd:68:43:61:21:42:da:75:31:03:
2b:c6:5c:28:d5:92:a2:d2:85:48:9a:16:92:f7:bd:19:f2:de:
6a:07:c2:e1:c1:2e:60:ff:8a:f2:a9:be:52:8c:b0:29:f0:ba:
27:0c:d2:82:be:c6:a9:f5:d3:2c:3c:26:64:cc:f9:9d:df:bc:
a8:7d:df:f2:e5:e2:51:7e:22:53:1a:7e:2b:06:85:50:9b:81:
d4:71:ab:59:33:52:64:8f:8c:7d:8d:bf:60:3b:60:26:0a:17:
47:c0:c5:29:5e:e1:f4:09:29:47:dd:9a:74:7a:20:52:1c:90:
5b:c2:64:3c:8e:d3:3d:d8:34:55:c0:cf:8e:4b:aa:dc:ec:17:
44:1d:e7:ba:32:41:d3:67:1f:1f:a4:74:dc:13:60:31:8e:6a:
ed:53:f0:84:00:83:53:d2:b4:1a:2b:92:a3:8e:60:fa:6c:d3:
05:3f:05:68:52:53:bb:70:d6:d2:bd:f9:38:10:12:16:de:83:
81:14:2d:71:3b:64:be:b6:63:b8:b1:82:f4:db:a2:b6:9c:83:
d9:6c:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:07:01 2025 by rpki-client