Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: /SxvhREM6ONbNUwidPJH5h0ZrNZAps9kC7m7G7IAu9M=
Subject key identifier: 38:2F:99:01:18:56:76:A8:E0:03:40:44:CE:F3:49:E7:08:6D:F0:78
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 0197B89065CE5776B90FF4D276F9811646B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: B9
Signing time: Sat 28 Jun 2025 22:02:40 +0000
Manifest this update: Sat 28 Jun 2025 22:02:40 +0000
Manifest next update: Sun 29 Jun 2025 22:02:40 +0000
Files and hashes: 1: 39eMlym5-vUY7eWOJGWxfmeXbRY.roa (hash: WY0sOOmZNXOfMNrzfd1Jh0Sr1ckGzWAuxPnTphEkb9w=)
2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: RPgoMhM7oX85/ZxiojPR3xDIsx4g5RTz2murkH4UwGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:65:ce:57:76:b9:0f:f4:d2:76:f9:81:16:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Jun 28 22:02:40 2025 GMT
Not After : Jun 29 22:02:40 2025 GMT
Subject: CN=382f9901185676a8e0034044cef349e7086df078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:fb:4d:7d:1f:1b:35:92:ae:84:90:09:56:
ad:a2:bd:ae:29:c5:23:b4:17:e7:98:e0:37:7f:4a:
dd:0d:8f:1f:5e:d7:cb:34:d8:f2:48:16:6e:8f:ee:
c4:e0:10:44:c7:dc:21:3d:39:69:31:62:94:ad:89:
13:2f:b3:ee:65:4d:66:a7:0c:1b:c4:6c:1b:55:f3:
12:a6:e8:52:7c:e5:bb:88:e6:94:3b:6b:20:81:11:
34:8d:dc:10:4c:8b:6e:c8:3d:6e:06:c3:fd:f4:6b:
d6:26:c2:96:9d:6a:60:35:ef:1a:5a:57:12:bf:40:
6f:26:c9:a1:bd:2d:37:bc:fa:5a:2e:8b:7d:ef:46:
8a:c8:07:e3:92:3e:89:e3:3a:32:f3:16:ce:cd:0a:
10:89:ea:7a:12:36:47:2d:78:0a:07:41:31:9e:94:
79:0c:5a:7b:99:75:09:0f:ef:40:6e:9e:29:fe:69:
c0:ee:22:cb:42:b1:b0:6f:20:17:97:52:e8:be:92:
18:c5:0d:ed:78:30:dc:4a:54:e4:d5:c1:b1:93:72:
9a:8b:01:3a:be:5d:ab:b4:ff:0a:a9:9c:a2:c3:92:
2d:03:b9:00:9a:1e:70:e5:9b:59:4e:1f:7d:f1:fb:
b1:3a:20:50:3e:55:95:50:ef:ed:f1:a7:44:09:ad:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2F:99:01:18:56:76:A8:E0:03:40:44:CE:F3:49:E7:08:6D:F0:78
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ae:35:2f:32:8c:0b:9e:5a:36:f6:3d:fd:d8:37:78:8d:9d:
b9:c0:40:f3:28:11:cb:9a:96:f6:d6:cf:ac:bc:04:a2:ad:3d:
01:7b:e3:8c:dc:99:2a:eb:11:62:f7:d7:7a:0b:63:a3:d9:73:
11:6d:9a:0b:e9:06:5f:46:64:d0:db:57:1a:f8:eb:98:6f:5d:
17:17:e8:ae:34:5d:97:75:b5:0e:13:4c:7d:bc:bb:de:df:a3:
d0:ef:e0:9d:da:66:b9:cb:73:71:7e:76:5b:41:1e:98:4f:31:
f9:59:bd:71:24:5f:65:c9:68:dc:a1:86:92:d2:4f:2b:8c:96:
c3:32:ca:b8:0f:ad:d8:b7:44:c2:9b:cc:21:85:ee:f6:87:cb:
29:b3:64:b6:6b:66:c5:b2:44:83:bd:87:29:50:a1:1d:ae:45:
59:69:66:3a:4e:2c:48:77:1f:75:9b:5c:c4:86:1c:dd:24:da:
4e:e9:d3:a3:41:6c:ed:4e:8c:c2:d2:65:2b:ee:05:94:27:9e:
ca:21:ff:83:c1:bb:24:ea:a9:01:5b:bf:dd:73:86:de:60:a0:
3b:73:10:70:22:6a:6e:13:83:72:6a:39:09:51:a4:34:23:51:
4e:bb:00:84:9c:ce:50:06:5e:d5:dc:31:5d:a6:b7:2c:54:e6:
92:8f:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:37:40 2025 by rpki-client