Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: iWj22/nWBtt3BG4KJk2iNaoOzdkB5dFBOuda7rhsbsg=
Subject key identifier: EF:E0:CD:96:8E:3A:0C:5F:82:4E:46:3B:67:45:F9:EE:79:59:92:67
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 0197B6A1BAC59DFA95361F123EC9D20E4C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 13:02:21 +0000
Manifest this update: Sat 28 Jun 2025 13:02:21 +0000
Manifest next update: Sun 29 Jun 2025 13:02:21 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: Uhf0ZmGT5eDuvYaYny+L1PKHXMXLsz9s/QSpCZbE0/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ba:c5:9d:fa:95:36:1f:12:3e:c9:d2:0e:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jun 28 13:02:21 2025 GMT
Not After : Jun 29 13:02:21 2025 GMT
Subject: CN=efe0cd968e3a0c5f824e463b6745f9ee79599267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:7d:b3:88:ea:08:84:96:95:c2:05:2a:30:
9b:f9:6a:ba:f2:f1:96:87:9a:6d:d1:05:d1:b7:2e:
51:29:fb:05:50:6a:d6:f8:cc:8c:6f:d4:b2:ba:a3:
8c:cd:1f:20:24:51:83:30:df:39:43:9b:d1:f8:b8:
d2:58:56:75:65:43:88:b3:b9:e1:c8:6d:b4:51:90:
f4:e9:78:b8:6f:11:4c:dd:8b:d5:74:fc:ed:02:ce:
7f:08:f7:16:da:25:d5:42:ab:b2:c3:97:6d:8f:4d:
70:38:e8:4b:8e:ad:e4:ef:7f:dc:b4:3d:a0:7a:22:
8a:3d:80:e3:ba:3d:55:84:41:c2:6f:e9:ba:6f:fc:
22:66:a7:41:1d:21:e6:a8:e1:82:4e:20:d0:21:41:
77:44:73:87:87:47:c4:50:d4:10:25:5c:f6:d2:be:
b0:17:59:fe:8e:15:00:ce:cb:d9:dd:56:9b:55:5b:
a1:6e:46:ad:4f:ff:a8:83:7d:94:e6:58:ac:51:a0:
1e:37:3d:73:af:c3:a0:3d:1a:98:6e:8d:78:a4:84:
b8:4e:7f:55:00:79:be:ff:6e:7f:2d:06:29:8f:14:
a7:4a:6b:75:e6:04:08:06:05:ee:91:e9:eb:59:6e:
3f:e4:c6:c0:af:4b:68:52:e8:7e:a1:63:b2:f3:8f:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:CD:96:8E:3A:0C:5F:82:4E:46:3B:67:45:F9:EE:79:59:92:67
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:93:5b:a1:fe:26:56:12:5c:ba:53:10:24:09:67:8a:bb:78:
99:44:92:fb:ac:52:63:c4:93:62:9b:01:0b:48:c0:9f:65:8c:
37:ef:0e:03:7c:05:8c:f2:af:65:ef:ec:e4:58:6f:14:9d:d7:
6e:17:c9:3f:62:91:69:80:58:95:17:b6:8e:58:80:cd:a1:54:
48:0f:be:73:06:f9:1b:24:42:54:96:f2:5e:3c:a9:d1:cb:78:
49:18:f6:94:7b:14:ad:dd:d6:12:91:ac:82:56:24:28:12:fa:
17:78:4c:dc:9b:f2:71:77:e2:8e:cc:40:cd:63:13:7a:1f:9b:
6b:c6:10:49:54:8c:02:4f:d0:a1:7f:cc:fc:66:9e:7a:bc:32:
ed:2e:c5:bd:91:84:2f:12:c3:4a:a4:be:24:50:09:91:c6:64:
68:e8:c7:3c:4a:9f:3b:18:9a:6a:2e:92:e2:f0:4c:e1:42:6d:
a4:48:86:03:eb:89:47:a9:42:fe:e4:83:b2:69:b7:ab:d3:f7:
d2:ed:70:e0:81:0c:75:13:79:b6:fc:1b:5d:83:e6:50:34:7a:
8d:38:5a:3c:b4:35:1b:7a:75:20:1e:81:ed:ae:2c:68:13:5d:
9d:01:90:e3:15:f9:6e:8c:0a:42:39:ec:fb:d5:35:62:c5:80:
c1:e5:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:29 2025 by rpki-client