Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: Tm0Eaal9FPwk4s6VeUYPhepoGH9f88p3J6vaCHXU4X4=
Subject key identifier: 12:30:7C:0A:58:25:EC:3C:36:BB:88:43:EF:11:3A:A4:CD:50:C6:C0
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 0197B6A1DB1B59B159313363BBBBE7857E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 03B5
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: gi5ISgpX9eNZMlRfJVODdUdURQcu+8Wxee3p/AC+pCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:db:1b:59:b1:59:31:33:63:bb:bb:e7:85:7e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=12307c0a5825ec3c36bb8843ef113aa4cd50c6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:cd:b3:de:67:0f:49:29:b9:dd:f5:58:36:
d9:bd:7b:86:ae:68:6b:9c:dc:0b:f2:8e:56:e4:27:
d1:c9:38:20:cf:c0:6f:01:d7:ea:4e:55:83:23:6f:
16:98:77:87:e2:ff:78:d9:ba:de:57:1a:80:0d:7a:
22:d2:8c:91:20:4b:ef:c2:16:a6:6a:3f:08:79:51:
a9:c3:8f:0f:3c:b7:a1:ea:e0:a5:be:26:0b:0c:a0:
29:68:80:be:bd:ec:48:07:e6:a6:ab:bc:8a:d6:29:
a5:c7:2a:a0:d4:9f:76:bc:24:13:a2:4b:c8:90:5a:
ff:ae:53:03:8d:fe:78:05:d6:56:31:1c:b9:43:2a:
0f:d7:25:3b:38:3a:21:5d:4b:47:78:e1:66:e8:8c:
02:bd:25:4e:be:a8:b1:27:3f:a3:66:0e:e5:41:13:
e1:0d:a1:50:a8:c8:01:b8:90:ee:5e:12:12:d8:02:
da:e1:53:8e:38:e4:f7:30:f6:55:fe:9a:db:fd:78:
7b:9c:54:ba:b1:95:39:ef:95:5b:52:3a:01:d0:4a:
78:41:b4:0f:b9:91:11:19:51:e4:20:f2:f2:58:0b:
b6:94:b5:0a:92:7b:9e:c9:38:f1:54:17:2d:72:09:
56:09:50:7b:31:38:6d:2e:30:ee:7b:bf:54:09:5e:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:30:7C:0A:58:25:EC:3C:36:BB:88:43:EF:11:3A:A4:CD:50:C6:C0
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8d:f3:93:e6:ff:41:66:6b:51:09:b5:c6:6f:2e:9b:5b:9c:
43:bf:9b:70:2b:6c:a9:56:0d:31:83:57:47:e0:bb:d5:2b:99:
51:59:12:13:dc:90:5f:66:1e:f4:bf:cb:fb:4b:34:8f:bb:f3:
0e:9f:9a:d3:6f:6e:01:3e:90:61:5c:6a:33:9f:62:9a:5b:25:
53:dc:e9:32:76:3a:85:3e:85:f4:a0:70:89:5b:ba:4b:5c:64:
ed:85:5c:6b:4b:22:8b:48:77:9b:f6:c8:65:8c:a8:3c:73:8a:
53:1e:f1:1f:d6:94:d9:6c:49:1d:f7:a1:f1:f8:da:4f:79:b4:
ef:ad:29:e9:f8:d5:02:c7:1a:c5:8d:20:1b:a7:59:05:64:a8:
14:e0:a0:4a:d4:99:fa:80:88:ea:c6:c2:51:ca:ee:12:68:36:
9f:45:0c:74:fa:85:e4:fd:50:cc:fd:a7:bc:07:be:28:7d:05:
51:73:9e:70:1a:48:2a:83:29:75:c6:f5:99:1a:41:c3:8c:09:
63:c3:fc:a5:b0:80:2f:c6:cb:56:36:22:31:e4:2f:29:ac:9b:
85:61:0a:bf:9a:c1:9f:1a:64:31:bf:78:6e:8f:9c:00:eb:ad:
15:fb:eb:2c:b4:3f:e2:04:0f:a8:67:57:92:fd:63:46:c3:19:
5c:1c:65:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:20:13 2025 by rpki-client