Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier: Qh5dRSpiUNdNpouyoCz+RmPY/txBFBcDV8tVcbreL74=
Subject key identifier: D1:94:56:B4:13:FC:E2:74:19:24:C0:EF:48:C4:08:17:BF:3E:8A:34
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 0197B6A188914B3A01118D682C4131EA60CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number: 1247
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=)
2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: ob4xEsdveffZrTdlo8kjNyUWnCE3E5Iosj/lsJrlMLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:88:91:4b:3a:01:11:8d:68:2c:41:31:ea:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=d19456b413fce2741924c0ef48c40817bf3e8a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:33:1d:5f:ae:6d:52:52:2e:50:c6:f3:51:
0c:d3:4a:ed:08:10:7f:cf:f4:05:44:3e:14:20:5f:
f7:a7:8d:2b:91:b7:04:3b:1f:7c:a8:87:5e:ab:3b:
b6:81:14:3a:2a:b7:c8:97:3e:bb:5e:e6:1b:77:f0:
2c:51:19:7c:49:45:6a:12:09:a5:99:9c:49:55:92:
70:db:b2:5b:a6:ff:66:00:46:f2:93:23:42:9c:bb:
df:ab:05:46:c4:b5:1e:59:1b:03:6c:48:f1:f8:41:
b3:fc:31:29:0a:df:08:35:a3:94:75:d6:09:5b:69:
fd:d2:c3:79:e4:79:ef:fc:53:31:fc:3b:03:95:64:
de:7e:87:bb:44:8f:a1:d1:59:64:27:9e:db:4c:23:
fb:5a:d0:d9:09:e1:c7:00:d4:fc:05:0b:27:a3:60:
a3:d3:e2:0d:05:12:6a:8e:82:ac:5b:f9:65:ce:29:
86:40:1f:bc:d5:6c:90:93:cf:ab:5d:a3:7b:15:57:
53:27:d0:fb:cf:39:63:54:f5:b7:ef:d4:ae:08:87:
37:8c:57:93:26:58:31:18:ba:2d:58:5b:54:7a:e3:
4a:a3:77:fa:eb:65:c4:1b:67:bd:bc:28:1e:19:27:
81:c8:12:30:11:e5:3f:c1:c7:f0:8c:d7:d5:04:ea:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:56:B4:13:FC:E2:74:19:24:C0:EF:48:C4:08:17:BF:3E:8A:34
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b7:ff:50:1a:5a:5f:d3:ef:d5:10:49:72:2d:52:12:5f:ff:
af:9f:26:b8:1e:b3:77:c0:b0:e7:44:eb:d0:7c:32:5f:c1:d0:
19:4c:a8:88:a5:22:35:2f:4d:92:02:03:1a:03:0e:83:9f:22:
4b:31:73:a2:5d:90:17:9a:bd:35:4b:11:5a:9c:23:8d:a9:3f:
38:a3:74:26:1a:05:09:db:68:4b:3d:1b:66:c1:32:c2:3f:26:
20:bc:48:de:f1:90:09:a5:54:12:f6:17:6f:f9:73:8c:b5:8d:
82:cd:56:5c:67:77:03:00:ff:e4:15:87:ef:c6:b6:54:b5:b0:
b1:94:cf:d4:c3:87:7b:fc:ae:67:89:2c:31:0d:a5:75:8c:6e:
8b:fc:49:ca:fa:83:95:fe:a1:3f:32:75:f5:dd:49:88:0c:5d:
b5:97:e3:64:f1:a7:90:cb:3d:5d:df:0f:ac:10:26:a5:db:90:
c7:08:9a:7f:8c:ef:39:10:87:a2:4a:25:83:dd:f6:cc:cf:92:
ba:43:b9:f7:ff:73:eb:9a:ae:ff:88:60:93:61:dd:84:f3:96:
ac:c8:0d:36:b1:0c:68:fd:0a:5e:40:eb:6f:69:92:cb:9c:b8:
2f:5e:74:65:c4:45:fb:85:ac:74:5a:56:64:2b:4d:a8:8d:50:
1f:0b:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:20:46 2025 by rpki-client