Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: eUch+oxc9haxJShS1/Tu/qpR+sGxeJ9hSpJpZc1WRTk=
Subject key identifier: 08:5B:70:A1:CD:FA:27:B0:0C:FA:4E:F1:7E:8B:BD:30:7B:F1:10:2A
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 0197CB70DB4BC158F24C58FC34283D9091F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 14:01:00 +0000
Manifest this update: Wed 02 Jul 2025 14:01:00 +0000
Manifest next update: Thu 03 Jul 2025 14:01:00 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: eIBIN3Iz4M6KqACHPmICcxykyoAqv2zMghC345Wr+/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:db:4b:c1:58:f2:4c:58:fc:34:28:3d:90:91:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Jul 2 14:01:00 2025 GMT
Not After : Jul 3 14:01:00 2025 GMT
Subject: CN=085b70a1cdfa27b00cfa4ef17e8bbd307bf1102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:de:8a:6d:f4:93:51:cb:1f:8f:d1:86:2e:
18:f9:5d:06:fa:e1:5c:58:a4:1b:30:2f:2e:1b:e3:
90:9c:18:d9:a2:c2:32:1f:33:dd:2a:8f:17:89:98:
9f:e4:0b:36:c2:72:ba:aa:df:6f:89:20:4a:cc:19:
c8:38:37:8e:22:77:bc:0e:cc:12:c8:1a:ff:ee:87:
f5:27:7f:ed:cb:bb:52:89:b6:9f:af:29:61:c7:eb:
ca:49:59:eb:e9:48:e3:78:8d:8e:e2:98:68:da:a8:
ee:0c:f9:43:c5:f9:36:d1:7e:33:59:39:05:d7:87:
67:45:7f:58:47:0b:3e:f8:98:de:6a:e1:aa:b7:5c:
ab:b5:7a:66:4e:b3:a9:e9:20:8b:8f:a1:31:92:9d:
70:22:2f:0a:d5:c0:48:f7:ef:39:dd:99:b0:ab:de:
0b:bb:e0:04:fa:22:8e:d6:3f:77:75:07:64:25:b4:
c6:48:46:b0:57:5a:c8:2a:3f:bd:71:8b:ca:8f:2f:
7f:5d:54:24:85:dc:be:b4:d3:ff:be:31:ff:78:45:
ba:79:d2:24:d7:a4:11:d2:af:29:c0:4d:fb:2a:1a:
70:a2:13:cd:e8:d5:b3:cc:fa:72:6a:7c:ba:49:e5:
fe:4e:84:24:e3:fc:38:f2:d5:e0:74:28:97:90:0c:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:70:A1:CD:FA:27:B0:0C:FA:4E:F1:7E:8B:BD:30:7B:F1:10:2A
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ca:10:e0:31:87:42:e7:e9:68:2f:a8:da:92:ed:2a:06:3d:
ce:47:f1:25:10:17:c4:93:27:b1:a5:92:9a:3c:38:0c:9c:2b:
b9:17:7f:b0:e5:2f:d3:b8:a5:c8:c1:0d:3f:cf:78:3f:10:56:
4d:b6:d3:b8:d2:35:32:52:0e:6d:b5:a7:f1:ed:30:13:8f:1c:
27:37:b0:55:d6:55:8b:b6:04:3a:da:8e:94:53:55:d3:80:2a:
1a:b4:cd:df:8a:35:1a:2f:d0:47:40:4f:aa:24:b0:a9:db:88:
29:a2:7f:15:40:5a:f5:c1:8a:b7:e4:0f:4d:f9:80:45:b0:b2:
af:5a:ce:d8:ff:3c:04:b5:7f:52:15:cc:00:96:4f:cf:a8:e6:
e1:bb:85:db:66:37:60:34:b2:f4:03:0d:76:0f:ae:07:ed:66:
85:6b:15:a2:99:51:c8:02:a0:a8:cb:dd:d2:a6:79:c2:71:f0:
4a:9c:df:12:fb:52:16:73:12:06:d9:82:df:3a:fe:e1:7b:2e:
8a:ef:95:11:4d:80:c2:7f:61:9a:f5:b2:f7:d9:11:fd:37:5b:
c7:a4:4d:1e:80:bd:d4:a3:54:f7:e8:70:d3:9d:7a:98:38:fb:
0c:7d:94:c6:39:ad:1b:ae:bd:bb:0d:60:f8:c3:a0:13:65:e8:
9e:cf:fd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:51:33 2025 by rpki-client