Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: hSBjApBbw5Co9PxdTfDF/79ZtcoSSCEZiQhsq8NR+ZM=
Subject key identifier: AC:C7:F4:0D:64:AE:39:CC:BE:35:D0:3D:4B:3C:C9:10:C2:52:FF:29
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 0197C56F28C115EFCF148332A9966B09F770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 1551
Signing time: Tue 01 Jul 2025 10:01:25 +0000
Manifest this update: Tue 01 Jul 2025 10:01:25 +0000
Manifest next update: Wed 02 Jul 2025 10:01:25 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: X97WT/WWMVLKnGZPEbJyKLm7HFvr3ONrNkGoGVErNuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:28:c1:15:ef:cf:14:83:32:a9:96:6b:09:f7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Jul 1 10:01:25 2025 GMT
Not After : Jul 2 10:01:25 2025 GMT
Subject: CN=acc7f40d64ae39ccbe35d03d4b3cc910c252ff29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:da:ed:7d:da:1b:04:3b:db:b7:44:42:81:
7d:b6:f7:bb:c1:ba:4c:f0:7e:42:04:ea:1b:83:b6:
18:2e:a0:fd:63:b4:29:3b:d3:a0:49:c5:d0:5e:23:
61:53:21:69:50:d7:b6:a2:b8:29:74:2d:02:03:2d:
b6:cd:d0:18:0d:55:59:29:9b:32:e5:95:9e:4d:c9:
50:0d:60:9d:aa:17:be:8c:c2:11:52:c3:c5:3b:bb:
cd:10:78:b4:48:4e:03:1a:39:ba:ff:3d:e8:b0:a4:
85:25:7d:64:c1:10:7c:da:40:2e:0b:5f:2c:f5:1f:
35:79:fc:dc:2f:ef:9a:82:15:6c:87:1d:d3:22:86:
ea:fc:51:48:77:bb:7b:e7:c7:66:da:3a:4a:af:7d:
75:d0:e8:98:66:29:3c:8a:79:12:f0:e4:f2:89:84:
cd:45:ee:41:d7:05:b7:38:93:0d:a3:36:f4:f1:0a:
a4:75:3f:3c:58:41:c8:c3:5c:ec:05:a0:ce:73:41:
4d:66:6d:ce:85:dc:ac:a5:4e:02:9f:f5:c9:f7:a3:
b3:98:59:0a:f5:e9:d6:f7:20:af:00:16:27:4a:b7:
06:e0:ed:ce:2b:cc:85:40:41:99:f1:87:67:96:83:
d2:fa:2e:b7:47:79:b8:a3:c8:57:47:6a:0b:e5:59:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:F4:0D:64:AE:39:CC:BE:35:D0:3D:4B:3C:C9:10:C2:52:FF:29
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:08:11:da:da:fd:6f:f5:d5:6c:62:0c:52:cd:f1:17:57:fd:
41:5e:3b:2b:e8:16:e2:ca:99:59:dd:19:c5:0f:93:48:29:ef:
c4:17:be:46:96:f3:c8:20:65:17:24:d7:7e:f5:ae:1d:79:a5:
fc:26:c4:27:14:07:79:b3:25:ec:26:fb:b5:65:83:f1:0a:16:
6e:fc:d0:22:da:34:f0:93:36:ae:ad:4a:3a:35:e0:2d:7c:e8:
07:98:1b:4d:74:f7:c6:9f:3f:26:b2:e3:1c:ac:0c:61:99:d0:
2f:2c:19:a2:c0:50:2e:bc:3d:7d:10:bb:86:a5:04:94:e8:9d:
6f:df:87:4a:02:ee:e8:01:da:22:d9:7e:ec:b4:dd:8a:d0:c1:
26:af:e8:4b:0b:3b:8d:44:64:1b:7d:5a:33:5a:49:78:28:24:
d0:56:a2:c5:91:b4:8a:6d:0e:1b:c1:0d:f4:ec:05:eb:5b:01:
f3:6e:0d:97:4b:04:95:b1:09:b2:70:9d:9c:3e:d5:20:9e:06:
f8:b6:f2:c1:f8:cf:3f:26:9f:a5:79:1e:b9:98:ad:cb:f0:b2:
8a:5d:ca:62:5c:c6:c9:65:e3:f1:a8:0f:ee:05:25:e2:1e:a4:
03:8c:de:1b:60:6c:94:15:43:c2:53:7a:01:21:e0:fd:36:c4:
d5:e7:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:11:24 2025 by rpki-client