Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: TLON4h6yJXnNUYQQj0RYoLIJuJFklXrwmmXlGFQabJs=
Subject key identifier: 8B:AA:8F:9C:CC:C9:03:64:8F:34:9B:A8:5E:D9:3F:95:9D:C3:CE:29
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 0197C500DF1DDD2ED0E71B98E9949CEB9DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 15BA
Signing time: Tue 01 Jul 2025 08:00:57 +0000
Manifest this update: Tue 01 Jul 2025 08:00:57 +0000
Manifest next update: Wed 02 Jul 2025 08:00:57 +0000
Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=)
2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: 1Am/LyoDdMGEig6yTcZtB95Xm8eOHLmGA/aXeYFMiMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:00:df:1d:dd:2e:d0:e7:1b:98:e9:94:9c:eb:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Jul 1 08:00:57 2025 GMT
Not After : Jul 2 08:00:57 2025 GMT
Subject: CN=8baa8f9cccc903648f349ba85ed93f959dc3ce29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:da:f7:51:14:18:ab:a2:84:4a:a9:26:0c:
24:9a:0c:36:38:05:b4:8a:9a:01:91:ef:b1:c0:b4:
4b:6a:dd:63:53:f6:cf:86:9e:41:20:2c:04:5e:93:
f9:01:2d:90:7b:6c:6f:e3:a5:8c:e3:70:7a:9d:8d:
0a:20:06:b5:34:03:17:a5:a8:a5:1d:fb:7f:39:18:
c3:6d:18:54:be:3c:13:c4:4d:f0:60:a9:a6:6a:59:
2e:36:43:74:d2:b8:af:0f:1c:20:c4:0a:8e:60:8d:
a5:2d:39:f7:e8:81:4f:5d:1a:27:c7:06:f4:9b:88:
e5:80:89:fe:aa:fd:33:a5:45:63:30:5a:00:3b:0c:
7d:a6:cd:5c:82:9c:6a:3b:60:44:a5:d9:ba:89:60:
61:ae:8e:43:1b:c5:70:73:66:53:93:a3:73:36:3b:
8a:c1:bf:34:72:68:e7:d8:ae:d2:9c:bb:15:a4:60:
e6:72:4e:65:36:d1:e4:9b:31:72:84:e0:2c:0f:95:
31:75:97:7d:6d:d3:d3:19:cd:d9:40:bf:ac:f5:e9:
26:1a:14:92:9c:36:71:3c:58:0a:4d:47:e8:dd:2a:
ca:8a:7a:74:93:b2:76:4f:b2:68:50:cf:8d:54:e1:
cf:d3:51:62:1f:ef:48:57:c9:fd:be:7d:d1:8b:bf:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AA:8F:9C:CC:C9:03:64:8F:34:9B:A8:5E:D9:3F:95:9D:C3:CE:29
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:06:26:48:c8:86:aa:02:e6:85:a8:10:7c:1b:87:e3:0d:d5:
b4:05:71:b3:e3:0f:a8:f9:15:21:64:f5:e4:ae:a7:e8:53:4d:
59:80:7a:02:fa:de:ed:4d:e3:70:15:03:96:64:26:bb:46:65:
33:fc:e1:da:83:1c:bb:c7:a0:0a:de:a9:0e:9c:58:1d:77:99:
95:d7:09:8f:29:14:e1:59:f8:0f:05:30:0b:c9:b9:92:57:8e:
2b:54:8f:a1:2c:2c:0a:02:2a:fc:5d:75:4e:f2:3d:ec:1d:5e:
76:c0:7e:9e:2b:f9:ac:00:bf:ec:03:53:34:11:c4:6e:f1:f0:
67:71:27:cd:59:42:70:4d:e7:e8:d1:1a:4c:d3:23:13:e9:a7:
b8:c6:ab:ee:e2:fe:79:57:7e:15:e7:a1:74:26:bc:c7:58:f6:
ec:44:bf:d9:bc:8b:c2:a1:1b:8c:d7:51:7c:7b:4b:e0:c8:88:
a5:22:9b:57:1b:ea:1f:a6:3c:0d:00:35:ec:3e:9a:70:02:d4:
56:88:8a:0b:3e:4e:15:20:f5:01:ea:5f:ba:84:a6:f8:e2:2e:
9b:a8:35:57:60:d0:ac:b2:8e:95:91:89:9c:f9:0e:cf:66:c4:
76:fe:5b:6c:0a:67:9d:42:7c:22:d2:98:8c:75:b2:4b:31:77:
fd:ad:c1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:07:38 2025 by rpki-client