Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: do6kE6xtYxQ9r2sRB3SPJoJYM37hXjmHLZuMYHqS49c=
Subject key identifier: EA:6F:D6:90:EE:7B:26:7B:C2:13:AD:A1:30:2B:A2:D3:0B:1C:4A:47
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 0197B6A0F6A75722087A49E7504377DDCB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 1228
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=)
2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: a5SzJYsKMNEEUTDA/gnx9Gq9Y2mV4B2es28g+OEyRsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f6:a7:57:22:08:7a:49:e7:50:43:77:dd:cb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=ea6fd690ee7b267bc213ada1302ba2d30b1c4a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:81:cd:44:5a:72:69:4e:2f:67:2f:f8:e3:
6a:8a:b7:a8:fd:75:82:6f:1f:df:f1:a5:3f:28:8b:
c2:0d:26:7c:15:f4:b3:47:f1:5d:9f:f1:eb:1a:e5:
cd:63:58:36:a5:0d:9b:71:c6:64:d0:9b:4a:74:79:
1b:74:15:c4:e7:85:71:8f:ae:b2:77:29:16:7e:1e:
fb:6b:9f:49:8d:65:6e:29:36:e8:79:72:94:35:d0:
9a:6b:62:a8:50:20:2e:0a:4b:9c:5d:90:dd:b5:00:
51:a5:7b:e2:2e:29:c4:22:6d:89:bb:87:67:6b:bb:
89:64:9f:ee:95:87:b7:aa:8d:a8:9a:51:09:34:a4:
95:ef:24:5d:f8:36:23:bb:d6:eb:e0:fe:11:b1:81:
c3:e7:43:0d:b0:ae:48:25:7b:77:7e:33:56:d8:4d:
de:11:5c:28:13:20:7e:e1:df:9c:2b:c7:8b:2f:a9:
ea:6e:73:99:f6:65:40:65:96:c4:4a:91:35:a4:d3:
1c:1e:13:db:5e:1d:b6:75:2f:b2:7a:51:a6:71:90:
45:4b:71:4a:2b:63:05:3f:59:85:75:59:29:27:ac:
1b:5d:2c:ba:a5:9a:3c:b0:de:19:84:f5:eb:7a:c0:
e0:4f:20:21:fe:f3:27:85:a1:b1:46:0a:e0:66:ab:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:D6:90:EE:7B:26:7B:C2:13:AD:A1:30:2B:A2:D3:0B:1C:4A:47
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a9:ec:dd:c7:26:0a:e6:90:1d:b0:cd:9a:4c:1d:ec:08:c7:
7a:1d:a8:ce:ee:07:60:37:fa:ac:0f:32:59:28:4f:7d:b2:dd:
00:61:8a:5d:4a:6f:15:22:5d:d4:40:70:64:b5:b0:4e:ff:bf:
d6:d9:c2:d5:1a:97:df:50:44:c7:17:8a:5b:c8:b0:4f:03:5f:
41:bf:a8:50:64:53:ac:a5:11:3a:86:24:a5:9e:d2:17:e5:5a:
6b:d6:9c:99:e6:34:25:ce:57:0d:71:4b:99:23:1e:2e:04:ba:
45:53:c4:1c:be:92:a6:22:61:fa:33:cd:cf:e5:ed:6c:2f:05:
3e:71:92:08:4a:b7:3f:dd:bd:d7:89:2e:25:76:38:ae:9d:3c:
e7:50:37:70:2d:3e:2e:3d:42:f0:c2:90:e7:1c:02:58:88:54:
c1:b1:6e:b5:da:03:6f:2a:fd:87:eb:06:12:63:d1:47:cc:a3:
d5:35:a3:c3:2f:5f:f3:71:10:50:4d:3b:41:01:b7:4b:4c:02:
78:51:15:a6:6a:4a:d2:c9:61:05:92:7b:b6:58:44:23:ed:a1:
1e:80:eb:d1:52:1e:2c:b7:15:b0:2b:2a:a0:54:e1:47:43:66:
11:4e:4d:53:14:c3:de:fd:56:29:45:47:47:61:21:b6:11:64:
2b:a5:24:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:18 2025 by rpki-client