Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: wlO8P5P9Wb1g04HzTb2zysVwduCVKQDRXevKyh88TgY=
Subject key identifier: BB:EA:C5:D8:12:E6:D7:C8:ED:77:4D:D3:FC:BC:2D:AF:2E:7D:25:2A
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 0197B9D942999FD97DC75954641D15A2ED97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 1178
Signing time: Sun 29 Jun 2025 04:01:52 +0000
Manifest this update: Sun 29 Jun 2025 04:01:52 +0000
Manifest next update: Mon 30 Jun 2025 04:01:52 +0000
Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: GHqFzMYNGR2y3X5cT+Tv7SN0we9rClmNXL5j0G1HWhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:42:99:9f:d9:7d:c7:59:54:64:1d:15:a2:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Jun 29 04:01:52 2025 GMT
Not After : Jun 30 04:01:52 2025 GMT
Subject: CN=bbeac5d812e6d7c8ed774dd3fcbc2daf2e7d252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:94:e0:54:a2:a7:ee:8d:63:3d:34:98:08:
94:ce:39:f5:ce:ab:3c:d4:d2:aa:68:9d:12:00:81:
f7:77:01:84:23:2d:22:3b:a6:10:5f:cb:03:fd:63:
79:e9:70:2a:a4:79:20:ec:8e:38:3e:0b:4c:c1:e3:
f2:ea:de:6b:30:85:8d:69:06:b7:9e:95:4b:ab:72:
a5:87:bc:ac:e0:92:35:e7:84:e4:0a:56:ef:c9:39:
54:e6:cd:5a:15:e5:d9:ec:f5:9e:3b:57:9d:14:c0:
56:f3:da:85:91:80:d6:ae:64:c1:55:50:d8:4b:c1:
ff:63:aa:c2:06:22:e9:bb:b1:69:b8:6c:69:89:0e:
93:1b:b3:99:27:38:fc:a1:a7:a8:ff:c8:4b:24:83:
1d:a3:11:ba:a9:0e:cd:67:1e:97:41:d3:51:11:be:
ba:9c:a7:2f:a5:25:b3:92:a4:74:99:a1:52:fe:b0:
31:91:4d:c0:b5:0b:5f:2d:f8:07:bb:7b:57:50:55:
ef:93:ea:1b:c3:a7:69:a6:d8:a4:2a:ce:a7:99:e6:
85:a9:30:a8:57:3e:ec:85:19:08:4e:7b:90:1c:98:
97:f7:52:ae:ea:a0:5b:1f:ae:3d:ad:52:d7:3b:ae:
2c:9c:95:23:58:aa:f7:56:8f:07:c2:e3:50:6a:7a:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EA:C5:D8:12:E6:D7:C8:ED:77:4D:D3:FC:BC:2D:AF:2E:7D:25:2A
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8a:95:57:b4:f7:83:a9:cd:e8:39:c4:79:a4:c4:92:37:16:
5f:05:62:76:5b:aa:2a:80:42:a5:c7:ad:f5:16:73:64:05:68:
3e:c1:a2:65:a5:8b:4b:35:13:8d:2a:5b:ff:7a:f1:67:fc:ae:
5e:c4:9f:88:33:85:5a:5f:d3:07:e1:05:95:2f:38:90:2a:ae:
68:04:24:5a:13:89:69:c6:2e:a6:6b:9a:73:e5:1e:cd:d9:e3:
22:95:05:7f:e6:d7:85:47:05:9c:a1:ff:10:4b:e6:91:e8:40:
ea:83:5a:7f:ab:3f:8d:6a:98:6d:c8:e4:ec:fc:1b:cc:8a:d1:
94:7c:bb:22:4e:72:e3:89:df:3c:64:dd:bc:24:52:6f:6c:c6:
28:3a:9c:5f:00:b4:d5:40:60:2a:94:4d:5a:eb:55:01:e3:4c:
c3:12:6f:cc:1f:f6:89:8d:34:68:fe:40:6b:bc:5a:37:75:33:
c7:33:d9:2c:b4:36:d4:0a:81:bb:9a:a2:1a:68:e1:24:6c:63:
5e:32:89:33:46:97:4b:c0:ef:7a:b9:84:76:9b:a7:47:c4:2e:
25:26:4c:a8:09:66:2b:1f:d2:48:65:2f:3c:b6:34:b7:90:12:
bb:6e:40:76:29:08:2c:52:31:39:c5:92:54:bc:8d:28:39:e0:
92:2a:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:08:13 2025 by rpki-client