Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: DbyAG5piJl9KaKo+5rOzZasD7wBSreEfF9YwLZnn/sU=
Subject key identifier: F0:C5:12:22:AE:60:D7:2F:68:D5:6D:06:BC:E4:E4:36:F5:9C:9A:88
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 0197B7456ECB447E00D5BBD9C59EAC1A18D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 12C1
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: NJoSkcO4sEN2Nkz7iQebcQXYSxiEP0XnyPrAbW3RKJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6e:cb:44:7e:00:d5:bb:d9:c5:9e:ac:1a:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=f0c51222ae60d72f68d56d06bce4e436f59c9a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:b0:52:05:df:be:df:5d:92:dd:6b:a4:ec:
de:06:3e:0b:f5:44:e3:87:02:9a:53:bd:76:9b:a4:
b9:ac:a7:4d:88:40:af:34:8d:28:5f:16:54:ce:04:
2b:a7:af:3d:80:c9:aa:a1:b9:d3:5b:28:57:a0:d3:
8d:f4:fb:d5:c4:57:ec:4b:82:55:c4:a5:6b:38:33:
d8:0f:2c:a2:36:fe:14:83:8c:64:4c:44:09:7f:c8:
6e:d7:95:0a:be:ca:44:4f:d7:f0:55:18:5d:00:09:
89:9d:be:7a:52:82:c5:48:0b:81:8e:23:12:ba:9d:
c3:bf:f7:c3:ab:77:be:d4:d7:59:e0:4c:45:61:b8:
e8:9e:6c:50:22:ab:57:df:a1:61:85:57:38:75:8c:
f1:1d:c5:fc:19:fd:1b:de:1b:2a:76:e9:0b:94:15:
37:f8:f8:7e:1a:51:64:f7:03:0e:b5:b9:7c:5e:3e:
53:ca:6c:45:89:3e:ab:61:c4:cd:66:de:ae:21:18:
29:80:dc:2c:33:8d:62:0e:49:ad:e3:ca:83:86:83:
e2:5e:47:6f:ad:21:5e:51:5c:f1:78:44:ff:cf:3a:
41:99:aa:7e:5f:04:1e:1a:33:97:9f:71:52:25:e9:
84:b8:27:e6:79:5c:7c:f9:70:db:ed:74:d8:d8:0d:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:12:22:AE:60:D7:2F:68:D5:6D:06:BC:E4:E4:36:F5:9C:9A:88
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:48:48:21:5f:0e:1a:c7:91:86:03:6e:a2:3e:79:4c:b4:
29:f1:98:e3:ad:db:37:bf:14:02:42:29:3c:b0:ea:bf:ca:61:
19:77:1b:73:d9:41:ac:1b:da:e0:38:52:26:19:fa:ed:e1:8c:
48:08:b3:d8:4b:32:9f:69:46:c3:65:2d:9c:b4:0b:8b:27:dd:
89:ee:fa:72:e0:45:c5:96:83:58:fc:6f:ec:f9:98:a3:64:3e:
b9:b9:6b:6a:c8:f3:16:75:f4:35:e4:a1:1c:51:64:f2:dd:0e:
30:c4:43:29:ef:54:f5:34:c3:46:90:dc:15:43:0d:a1:89:d2:
08:7d:c6:22:52:3d:91:de:1d:ea:90:29:96:b3:fc:d6:d2:02:
1b:e1:39:76:be:4b:4b:d2:da:7f:ed:ef:06:d9:09:85:af:bd:
a1:94:99:0c:b7:25:8f:bb:c6:64:5f:36:b6:8e:23:6e:13:70:
eb:15:b5:a4:5a:fa:38:42:93:a0:fa:ab:42:d1:79:3a:0d:19:
af:1f:fa:51:96:86:c9:c2:e7:12:05:31:20:6b:d3:30:26:2d:
42:3f:07:d8:ee:08:43:7b:5c:d7:4a:81:a7:e9:3c:4c:84:e2:
06:71:de:f8:85:ef:58:98:82:62:f1:7d:2d:12:1d:20:2e:b2:
94:1d:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:14 2025 by rpki-client