Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: teh+AVVY/1kCnpX+btKU1EtIm6EIjbdcvVyb8IvZ9BQ=
Subject key identifier: A3:93:38:9E:0D:B6:1F:9C:64:B6:39:06:03:C6:E0:B6:FC:BE:CC:B5
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 0197CC4D16D6839097F54D9AD076F5F0901A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 1008
Signing time: Wed 02 Jul 2025 18:01:33 +0000
Manifest this update: Wed 02 Jul 2025 18:01:33 +0000
Manifest next update: Thu 03 Jul 2025 18:01:33 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: /pFoBteg9ky/j9rpJV4ZLnKjtt+WDVVMNYIrA3FUxyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4d:16:d6:83:90:97:f5:4d:9a:d0:76:f5:f0:90:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Jul 2 18:01:33 2025 GMT
Not After : Jul 3 18:01:33 2025 GMT
Subject: CN=a393389e0db61f9c64b6390603c6e0b6fcbeccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:99:45:d0:2b:41:4f:fa:72:cc:52:1a:ad:62:
2d:c0:ca:a1:ff:f3:90:f5:19:b3:45:d7:c3:4c:79:
9b:cf:1f:61:1b:72:00:a3:c0:6e:84:60:40:53:3e:
54:c5:cf:23:5e:ad:62:ee:c7:52:e0:56:db:a3:4e:
69:2c:76:3b:75:84:3a:e8:6f:12:f8:ee:a8:7e:43:
bc:62:0a:82:81:fb:2c:9f:8f:32:b8:cd:c1:63:b9:
60:56:8e:ce:5d:15:fd:a4:e1:27:d3:a8:8d:f1:d4:
37:c9:9d:e2:74:e7:2c:7a:f2:9e:4f:8d:9c:cc:4a:
35:9d:d3:78:93:1d:e8:68:88:22:1b:49:8b:8c:b1:
8d:5d:1e:03:02:9c:b7:ce:af:80:bb:d0:3e:ec:79:
6f:b3:9b:f8:27:55:4a:c3:43:ab:f4:81:3c:d6:e0:
b6:de:25:7b:60:80:88:9c:fd:f6:78:23:00:5f:bb:
95:56:04:2a:2f:99:4d:b8:76:2f:fd:dd:43:56:2b:
d8:21:14:b2:74:95:c8:82:9c:56:c0:6a:01:40:93:
dd:f1:bb:f0:09:54:62:3e:e9:c3:fa:22:f4:57:99:
04:cf:97:95:b0:00:93:03:1b:c0:30:57:80:9d:ab:
0a:8c:ec:b1:af:a2:6a:86:ef:0f:19:59:fe:e9:d4:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:93:38:9E:0D:B6:1F:9C:64:B6:39:06:03:C6:E0:B6:FC:BE:CC:B5
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d6:2b:fe:19:0d:d9:86:c8:78:35:79:71:6d:1d:39:a8:b0:
14:dc:bb:3a:44:64:28:84:13:b1:fd:c7:84:b7:2b:a3:b9:a6:
4a:92:90:62:c9:5a:00:e2:13:c9:38:d9:ec:3a:16:c0:78:09:
3b:ed:66:4c:f9:85:1e:b2:0e:53:67:fe:2f:5c:0a:52:67:a4:
3b:04:c1:d6:07:aa:db:ca:5d:b6:66:c5:30:2c:d5:6e:4d:4d:
2d:ed:3d:29:05:87:55:f1:d4:bb:19:74:9f:4d:ce:a9:13:15:
41:ca:54:96:6a:ee:eb:7c:97:f2:70:2f:f7:a1:2a:12:5e:38:
ad:c1:d3:91:bf:4c:07:b2:12:ee:44:40:a7:1c:bf:c3:51:94:
ff:1c:49:13:6a:80:f6:bd:a7:2c:5a:f8:d7:0e:86:2b:b4:0a:
00:be:ac:93:f6:e6:6b:33:64:be:cd:01:87:80:36:62:0c:28:
52:90:ad:09:b4:b2:dc:ae:c0:75:74:6b:5c:26:7b:ef:2c:eb:
97:59:2d:d5:13:41:5b:8d:63:00:51:13:c6:9f:20:09:54:34:
43:f3:f0:d6:6b:ef:d5:ff:3a:ec:65:54:0d:c5:31:d4:3e:81:
5a:ce:b9:a1:62:8e:0e:70:17:21:2f:a1:9c:d3:11:43:d6:b3:
aa:19:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:03:02 2025 by rpki-client