Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: PIig7ehjRS/oPd5OxTgGf71Rw2LosGmO60djmSCwm8E=
Subject key identifier: C7:B4:31:F6:23:B1:26:A7:29:99:E6:46:2E:BC:BA:BD:FA:2B:1C:2B
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 0197B820D08C7A473FCBD1E60E6F7E59BB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0C9D
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: PaUzB8wgbbRsaVQjkghBHBx-i68.roa (hash: lFrqYnlO5yM3Jwu/7kIddY95Ktd00GHwSSlGhdD9Z3M=)
2: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (hash: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: ZjT7XDD+Hk+v/bMvc/x8eIqqVXCuiUWA67Q4g9z1Mow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d0:8c:7a:47:3f:cb:d1:e6:0e:6f:7e:59:bb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=c7b431f623b126a72999e6462ebcbabdfa2b1c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:62:45:1a:e8:1d:f2:3d:ed:b7:d2:57:9e:
61:2f:ee:ce:38:df:71:43:0f:c2:f4:4c:71:60:2a:
23:86:a0:f4:e7:a2:ac:69:20:46:3a:cd:f6:fa:45:
ad:05:26:7c:42:07:8a:83:c8:7e:6a:0e:a8:fa:cb:
3b:21:85:2f:5a:c4:73:e5:e7:32:e2:6f:2e:4a:d2:
0d:46:b2:aa:16:a4:f5:b7:cf:9a:33:73:e8:da:cb:
c2:54:df:15:01:ac:36:5b:0c:6c:b3:89:d0:16:bd:
91:f6:9e:39:e0:d1:be:f2:fa:96:95:ea:a2:b3:27:
c0:07:b9:db:4a:f1:9b:32:2d:59:39:49:e4:18:09:
6b:b5:7f:b0:c8:d4:d0:0d:33:02:ad:ea:fb:7f:83:
7c:0f:2d:04:a7:f7:95:3a:ed:e4:df:e8:08:f3:f2:
19:92:64:15:12:f3:ac:9e:04:1b:d0:82:b6:02:6e:
6a:52:1e:60:25:17:1b:b1:4a:40:7c:b1:c6:96:c7:
fe:03:e6:f4:d4:6a:69:5d:1e:f7:18:99:3f:a8:b2:
c3:06:44:29:31:c5:1e:dd:1c:4b:de:79:c1:04:42:
6e:b6:10:89:fa:39:c4:22:b7:6e:2f:3d:b0:e4:78:
52:79:1e:8b:8d:2d:63:45:53:67:90:c9:c9:4b:c7:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:31:F6:23:B1:26:A7:29:99:E6:46:2E:BC:BA:BD:FA:2B:1C:2B
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:99:7e:5b:57:5c:c4:85:e5:54:c5:fb:f5:a9:1d:d2:d8:
b0:1d:16:f6:e8:98:c4:08:09:f2:eb:88:bc:7e:4e:7a:fc:39:
85:33:1b:ea:32:d2:6f:57:a2:d2:75:68:e5:14:62:51:dd:ac:
8d:24:00:14:25:ea:63:cc:57:bb:6c:7f:3a:61:98:f9:69:fd:
9a:fc:a3:7a:2f:44:ae:aa:77:bf:56:37:85:eb:64:1c:cd:8d:
37:1b:f7:51:00:be:5f:01:e7:40:4a:65:80:4f:6e:fc:4a:c0:
a0:04:81:a5:68:d4:03:14:c0:e5:7b:5c:c1:65:20:cf:7c:91:
e6:cc:88:27:86:51:79:f3:79:78:c9:3d:99:a2:b4:1d:11:75:
00:7f:c4:49:42:a1:45:ce:84:90:ce:9b:0f:e7:87:d4:f1:cb:
52:84:b6:3a:a6:52:91:79:17:35:aa:ad:5d:6c:bf:22:0e:a3:
c3:28:a7:25:97:b5:c7:da:65:f0:9f:d2:30:ba:a1:74:53:95:
97:81:3e:d7:0a:3b:68:97:5f:6e:ae:a9:99:42:56:2b:62:ff:
c3:87:e4:41:63:75:31:a8:b8:15:62:a6:99:c6:9b:4d:b7:7c:
46:18:64:8c:4d:68:b2:7c:e0:ad:6d:da:7f:ea:1d:6e:a7:81:
32:f5:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:21 2025 by rpki-client