Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: R7MP6hU7yHpRmPd2Oq6G8lkFE/25QsrZE+i6p6y/VTw=
Subject key identifier: 85:B7:0C:E6:13:EB:A3:5F:FC:02:40:92:73:11:44:2F:CD:5C:CD:1E
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 0197C6151DC8128A72FF8461FE3878480070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 15BA
Signing time: Tue 01 Jul 2025 13:02:42 +0000
Manifest this update: Tue 01 Jul 2025 13:02:42 +0000
Manifest next update: Wed 02 Jul 2025 13:02:42 +0000
Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
2: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: KSttVmLn/getdo2T4kfg3Hm5HUQYjLaNI4nzKh6HvMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:1d:c8:12:8a:72:ff:84:61:fe:38:78:48:00:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Jul 1 13:02:42 2025 GMT
Not After : Jul 2 13:02:42 2025 GMT
Subject: CN=85b70ce613eba35ffc0240927311442fcd5ccd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:ff:c5:07:bd:92:0a:ba:c9:23:70:ef:a9:
23:ce:4a:88:81:ea:84:f6:6b:1d:db:41:87:18:e1:
2d:23:8c:a6:54:9d:69:10:13:63:85:98:68:a4:fb:
72:94:7f:41:75:89:70:0d:e8:6f:5b:17:24:9e:f2:
60:64:5c:4a:cc:a8:d6:70:25:16:ad:94:3a:5b:e3:
c0:c8:a6:ef:f0:6d:30:8b:64:fd:57:4a:95:ed:c3:
98:b5:e8:9b:b8:e0:94:4a:a8:5d:44:ab:9b:07:cc:
ff:b3:a6:b4:58:7f:4c:40:54:14:47:a0:84:19:9a:
7f:71:20:11:f6:35:b1:39:9f:a4:9c:dc:0d:06:fe:
68:0d:e1:b1:6e:2c:02:09:0c:1d:a3:36:9a:cb:95:
2f:35:ee:10:21:e9:3f:15:05:d5:31:39:40:12:ed:
e5:73:81:a4:f4:48:ec:3f:85:da:53:e5:e3:3d:94:
5d:98:f0:64:5f:38:ed:50:90:89:04:56:9b:91:bb:
36:e7:3e:f1:69:c5:3b:ce:64:80:33:63:0d:f3:ae:
59:3a:4f:99:d4:23:a3:ae:f3:0b:03:0a:4b:20:fe:
f6:e5:0b:42:4c:a0:d8:a7:9e:7a:3b:ec:66:d1:56:
12:11:ce:ef:ba:ab:0a:4f:ef:1e:5e:bf:32:e0:7e:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:0C:E6:13:EB:A3:5F:FC:02:40:92:73:11:44:2F:CD:5C:CD:1E
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:ba:63:93:5b:0b:fd:30:1e:0e:76:20:84:56:05:f6:8a:
a8:64:07:83:54:14:a7:2c:08:dc:5a:3f:eb:eb:36:51:84:35:
3f:1e:f2:6b:7d:e8:61:71:21:d7:13:7e:9a:31:1a:24:48:ea:
4f:3b:44:46:64:cc:88:e8:d1:4e:80:bc:64:7a:25:01:80:20:
86:fc:eb:3e:a3:5f:53:74:35:76:a9:d8:4a:0f:5a:da:a5:64:
e5:df:48:60:71:7a:4d:1e:f4:1b:ae:f6:0e:44:64:f7:51:fc:
76:4e:9e:23:7e:6f:8c:7c:55:86:1a:5e:ff:97:ff:27:81:79:
ad:35:2a:ec:1d:25:e1:71:55:30:9e:dc:87:bb:b1:6a:24:95:
f0:f9:88:df:65:fb:9c:76:55:bf:f8:73:b3:66:03:77:c7:af:
e3:02:0a:30:f5:40:6e:97:35:33:8d:83:52:30:6c:c8:b9:14:
21:89:d5:be:9d:92:53:24:d7:bc:b6:3c:15:42:1d:40:c4:a2:
89:b8:81:61:9d:3f:e7:b5:e3:e9:1e:08:bf:1a:d7:7f:c6:73:
f8:ff:03:63:cd:b8:51:94:17:58:ab:df:2b:7b:5b:8b:9d:18:
14:3e:76:8d:4e:ac:3a:4a:f5:10:41:0f:83:40:0d:fd:3c:f1:
ad:15:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:31:06 2025 by rpki-client