Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: 1MkuwkJDat28FBp4qBQ21SIWwad8blCZ6VbQCFWlh4c=
Subject key identifier: B6:68:C3:32:2B:BE:D9:28:05:4A:F3:83:F6:FE:5C:14:62:F0:3F:90
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 0197C38044C05D503698D6F17908D67B71DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 09A9
Signing time: Tue 01 Jul 2025 01:00:52 +0000
Manifest this update: Tue 01 Jul 2025 01:00:52 +0000
Manifest next update: Wed 02 Jul 2025 01:00:52 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: KstSpwfETY5vQzmFKT1SPZbhz1CRa+fD5bPhC5Q9He8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:44:c0:5d:50:36:98:d6:f1:79:08:d6:7b:71:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Jul 1 01:00:52 2025 GMT
Not After : Jul 2 01:00:52 2025 GMT
Subject: CN=b668c3322bbed928054af383f6fe5c1462f03f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:cd:da:aa:1d:d2:42:c3:5a:f5:67:2e:52:
bc:d1:f7:50:c2:a3:4c:f4:5f:eb:ac:72:60:f0:94:
07:18:e1:2a:96:96:2d:d5:8a:15:51:d0:f7:a5:66:
02:6d:23:89:d2:c7:22:42:09:d7:a0:82:a0:3f:e8:
7d:45:9a:d8:5a:23:e6:57:5e:dc:71:e7:66:35:26:
63:e8:de:10:39:ed:f0:15:1f:56:f5:53:3c:cc:62:
b8:9d:0f:45:46:6a:98:23:30:f5:60:51:1e:8a:14:
c0:8b:54:60:8e:5a:a2:e2:f0:de:82:f5:38:c5:eb:
53:ea:4a:0a:c7:fe:3f:d3:a2:94:88:6f:d3:a2:d5:
2d:38:2c:21:67:bf:0e:5a:e9:bc:2f:3b:00:52:ca:
52:f4:5d:5a:62:37:f2:62:0a:10:e6:6a:1a:01:92:
f6:01:4e:68:31:e0:8b:30:1b:0b:dd:ba:ee:c3:f8:
f2:88:da:ac:4f:ee:42:b3:45:68:66:9d:6e:b1:48:
6d:0c:cd:85:6a:b3:56:76:76:1f:39:d6:fe:b9:91:
b6:d6:44:5a:86:4d:c4:df:53:86:3d:f8:08:2e:b2:
37:37:ba:ce:8a:61:77:bb:f7:f4:43:d6:2a:43:8b:
7e:7a:64:b0:3f:f1:85:70:95:f2:bd:f5:f2:a1:41:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:68:C3:32:2B:BE:D9:28:05:4A:F3:83:F6:FE:5C:14:62:F0:3F:90
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:dd:41:c2:c2:a4:d0:b3:ea:0a:8b:44:e2:18:3a:ed:b0:
51:6f:e6:89:c3:ca:64:29:d3:e3:93:62:93:04:6c:45:6e:c7:
d2:2c:f5:cb:cd:4c:84:1f:3e:1a:ef:2b:b5:04:7e:2b:c7:cb:
71:c2:aa:37:0a:0a:a6:9f:b5:a7:b6:c0:ce:fc:e8:50:2b:66:
fe:f0:1f:29:99:42:bf:a3:43:0c:82:a6:ba:55:bd:9d:5a:ff:
0e:41:a3:55:5b:1f:ff:9f:e5:7c:97:b8:f7:c1:cc:71:5e:e3:
e8:c9:08:1c:9e:bf:f1:c5:d3:64:b1:15:9b:30:81:c7:df:fe:
5f:17:c2:30:15:c8:23:1d:e3:32:b5:a0:f7:6c:d2:8a:3d:12:
74:4e:78:ea:95:1e:75:c1:f8:0a:39:8e:38:93:72:86:91:4f:
05:10:08:d0:97:80:23:1c:b7:11:6f:21:58:66:1a:11:e3:6e:
61:ef:89:31:24:fb:e6:10:0d:38:f6:9f:8c:d0:f7:97:aa:58:
16:c5:77:37:9e:69:75:db:f1:ac:60:0b:79:2e:0c:90:41:a4:
18:42:cb:b0:4f:8d:6e:8a:05:80:39:2d:1e:7e:6f:1e:c0:eb:
ed:54:b1:ae:ce:29:b7:e6:2b:91:ac:0f:96:aa:ec:54:24:1f:
00:21:cc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:26:24 2025 by rpki-client