Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: R1gxQa8IP8t6/xyRALiMbJZgEUUEAnMr7zJVByK624c=
Subject key identifier: 1F:63:A0:33:03:A5:32:80:53:52:0D:1E:E6:EB:A8:C8:3C:A2:08:3C
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 0197C56ED29F6E9448568A7434F1BD704E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 1403
Signing time: Tue 01 Jul 2025 10:01:03 +0000
Manifest this update: Tue 01 Jul 2025 10:01:03 +0000
Manifest next update: Wed 02 Jul 2025 10:01:03 +0000
Files and hashes: 1: Iq8sBOoYl2FdEDuOs7ZjqubA0mo.roa (hash: cKH71Gw8ENbKfDC7hsHD0Ixm5ykhTLruun3w+xwHV3U=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: Ad4m3X5olAOi8oIoFSdGJrCVm6J7VPpnVmQO6lt9zkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:d2:9f:6e:94:48:56:8a:74:34:f1:bd:70:4e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Jul 1 10:01:03 2025 GMT
Not After : Jul 2 10:01:03 2025 GMT
Subject: CN=1f63a03303a5328053520d1ee6eba8c83ca2083c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:49:1f:b7:e8:f8:46:43:1c:a7:f7:1d:58:
48:b1:f7:01:df:7c:71:f7:94:71:8e:16:be:bb:35:
8a:bb:21:b6:20:e8:96:71:12:6b:12:1a:6e:09:07:
0a:4e:c2:3a:08:4f:0f:f0:2e:1c:b3:c6:c9:e3:ed:
b2:fd:7e:fb:37:5f:7b:6d:f9:94:98:87:fc:f1:66:
c5:ee:38:dd:68:c3:fb:b7:45:be:8f:08:69:90:fc:
5e:f7:45:70:bb:b3:62:a0:33:df:ad:1b:25:eb:be:
7c:2b:6f:16:c7:2a:e3:e3:2f:32:25:f1:66:45:22:
5e:cd:14:67:f9:3d:81:7c:6a:5b:eb:e1:fc:a2:91:
ca:7e:cd:bc:9f:49:1b:04:cc:97:a9:6e:be:d9:6d:
89:3b:63:ba:90:92:e3:fd:3d:ff:c3:95:94:10:27:
bc:aa:1f:84:a3:d5:58:37:03:9b:8b:15:5c:38:4b:
c2:98:19:94:4a:ba:f3:58:46:23:9a:08:52:f5:90:
b4:04:39:49:e1:07:40:10:9c:c6:76:fa:61:7b:41:
ce:0b:ec:19:1f:e2:a2:4f:22:3e:f4:e1:68:78:6e:
c6:94:02:f3:93:79:ee:ad:48:f7:89:cd:cb:4f:31:
75:51:64:14:b2:a9:e4:dd:d2:55:d9:6b:73:29:1d:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:63:A0:33:03:A5:32:80:53:52:0D:1E:E6:EB:A8:C8:3C:A2:08:3C
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:14:69:fd:df:d7:f0:df:fe:99:34:18:1f:d1:fa:9f:8e:
1a:10:25:bb:70:15:93:3e:7f:20:4b:ed:ef:4d:77:b5:f7:b9:
54:18:99:5d:1d:23:33:77:1b:bf:8c:7c:c6:31:88:d3:06:cf:
8f:68:48:06:51:70:99:db:45:36:e6:49:54:05:8f:95:f9:0d:
6d:72:da:e9:ce:49:54:e7:b2:9f:bc:ca:33:2c:8b:58:bb:4e:
c6:20:c9:f6:c3:c5:d6:1f:ef:a2:c3:d6:c6:93:9d:bf:f3:f1:
0d:44:d8:17:97:e0:cb:9c:f3:3b:ee:21:a0:f4:44:ea:8a:b2:
e8:1d:0c:98:cc:2c:0f:01:eb:87:16:dd:3c:73:07:74:64:38:
d9:a3:36:0e:80:29:d6:9a:6a:ef:27:94:5e:a1:0a:3d:c4:50:
99:cc:81:ec:44:36:65:d6:b5:32:8f:ec:59:32:bb:f3:e9:4d:
ed:27:34:e0:cb:49:5b:01:cc:7e:dd:a2:de:fc:5c:0e:54:0d:
81:91:fc:68:6a:51:9e:fc:69:84:d5:4f:0f:71:47:b2:a0:3f:
2d:5b:db:0f:e5:bc:1e:ec:03:95:3b:d8:4f:5d:c1:45:6c:7c:
a6:b5:52:86:3a:3e:7f:9d:4e:a6:69:fd:ed:a0:f3:0b:d5:7b:
ae:1c:35:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:59:41 2025 by rpki-client