Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: LKhtti8NhTayttXc0SjhIXF/U8BZRbf4pkOVozTHFG4=
Subject key identifier: 5A:19:01:CF:37:7A:CB:31:72:93:13:5E:30:4A:BF:F6:D5:92:D4:90
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 0197C9825307DA69FFDAE04C5E33E2DE1BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 0290
Signing time: Wed 02 Jul 2025 05:00:50 +0000
Manifest this update: Wed 02 Jul 2025 05:00:50 +0000
Manifest next update: Thu 03 Jul 2025 05:00:50 +0000
Files and hashes: 1: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (hash: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=)
2: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (hash: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=)
3: ajlhxYNtAPzeTPjXCJjwu3u7DCY.roa (hash: IqXuM6//Ku9jh4JzK+2CUndK/ugkLqCne4Oz+cOP1rE=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: nowG7oc1oIgXgt2lxwK51aScT2TV+R+FefQffl2/B70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:53:07:da:69:ff:da:e0:4c:5e:33:e2:de:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Jul 2 05:00:50 2025 GMT
Not After : Jul 3 05:00:50 2025 GMT
Subject: CN=5a1901cf377acb317293135e304abff6d592d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:45:9c:41:02:98:a7:f6:ae:fb:6b:b9:0a:
ff:9f:05:1b:3f:17:48:ac:b4:19:73:cc:37:67:29:
1e:2b:c7:f8:b4:fc:94:f8:4f:25:fb:a3:55:2e:a4:
af:e2:2f:4c:2a:bc:93:d7:bc:74:14:f7:e9:fc:cb:
94:52:6d:f6:27:b4:0c:c3:00:48:c8:a1:e4:45:d1:
a8:5f:64:3e:f7:00:32:75:c5:94:5e:82:47:88:d8:
b6:ba:2d:2e:11:b4:88:69:14:e0:f3:53:27:fd:2f:
85:70:99:7b:35:ff:48:9d:11:9c:ea:d8:ec:a2:d6:
61:84:47:04:1f:c2:3c:0c:56:bb:43:d3:fb:28:34:
94:2f:8f:87:19:dd:55:42:9d:a5:2b:47:d5:4c:88:
9a:36:48:de:85:b7:8a:f6:23:70:f1:1c:7c:3f:8b:
09:2f:9f:62:1d:8d:d4:dc:4f:3f:39:2a:54:31:db:
ba:33:98:91:1f:d3:2b:a1:a4:ac:97:4e:6e:ff:5b:
77:b2:14:32:6c:b7:ac:0a:49:47:88:18:4f:a9:2a:
9f:2b:1a:3a:15:c3:53:95:3e:c5:9b:d7:29:a1:7d:
a6:d4:45:1e:c3:49:4f:15:16:98:bc:6b:39:5e:2a:
f9:f8:4e:36:fb:8c:c3:a5:b0:8e:5f:e4:cd:ad:60:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:19:01:CF:37:7A:CB:31:72:93:13:5E:30:4A:BF:F6:D5:92:D4:90
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:68:6f:d3:98:53:1e:fc:66:47:71:98:26:6a:98:5e:9a:b9:
90:a7:50:ba:b4:ff:6b:ce:d5:82:14:7c:cb:b3:f1:e5:e4:d7:
d7:01:29:ca:27:57:fe:43:97:18:9e:20:c1:a9:04:bf:44:27:
d5:c8:b9:78:2b:db:ae:c1:3c:46:c5:d4:58:eb:c1:18:94:b6:
30:02:8a:4a:e5:0f:6e:15:62:b1:17:ac:96:ef:16:92:3c:ef:
f0:36:70:93:f7:98:a1:87:32:11:28:13:de:ed:54:eb:b5:19:
d9:e4:43:f6:38:c0:13:2d:ea:39:0f:34:b2:c7:83:1b:fc:50:
e9:bd:05:1a:ed:4e:c9:ac:8b:0a:78:6b:55:ae:18:9f:31:97:
72:46:32:f7:8c:31:71:45:12:6b:11:dc:44:af:ba:7e:1a:eb:
9f:60:0d:ac:3d:b7:58:bd:3a:60:6b:96:b1:44:5f:5c:6c:99:
e3:0e:0a:0d:ee:1b:b2:10:24:d1:f4:d3:75:48:20:51:be:3f:
ce:2c:a3:8d:f9:c6:67:26:de:c6:19:2d:78:ab:ba:f7:0b:bb:
69:65:af:52:d3:d7:76:80:7a:b3:dc:55:2f:85:45:d3:fd:c5:
6d:b1:96:72:fa:99:9e:e8:00:91:c1:a0:de:ce:13:be:b2:06:
de:b4:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:45:33 2025 by rpki-client