Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: IFpo6SA+P1ES21fprthD3UjBWoNdaLZs+L3I/vXS6ls=
Subject key identifier: 29:53:F9:96:03:57:C1:3B:1A:A2:AF:05:8E:F5:F3:D5:00:97:D4:F7
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0197B7B31E7D51AC86EA422105EF847ED7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0F55
Signing time: Sat 28 Jun 2025 18:00:58 +0000
Manifest this update: Sat 28 Jun 2025 18:00:58 +0000
Manifest next update: Sun 29 Jun 2025 18:00:58 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: PaAVR9t1F/zVfyDyukYlsj0daINJSyQXY26adQQEg9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1e:7d:51:ac:86:ea:42:21:05:ef:84:7e:d7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jun 28 18:00:58 2025 GMT
Not After : Jun 29 18:00:58 2025 GMT
Subject: CN=2953f9960357c13b1aa2af058ef5f3d50097d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:04:9f:78:71:71:a9:e6:0f:77:13:5b:46:
63:d5:fa:da:99:e8:72:f5:68:58:83:2b:94:53:05:
4e:bc:f6:48:f1:b0:24:a4:36:ee:d7:e7:0b:12:34:
f1:6d:56:4b:5f:93:96:11:c4:15:d4:b4:e6:10:8c:
9e:26:d0:e6:a9:60:ed:db:d3:74:0a:cb:e0:4b:b9:
2e:7c:06:b5:aa:c9:53:01:57:c1:c7:ad:0c:2b:f9:
7b:f8:b7:cb:28:30:66:dd:c7:83:76:fe:d1:6f:9f:
e1:53:4e:95:cd:de:2f:b2:03:03:a6:24:84:9c:bd:
b9:8b:ea:de:09:16:f8:f2:4b:1c:c8:13:d2:7f:7c:
1f:fd:00:3d:38:0a:6d:82:57:d9:c5:98:90:9e:ab:
d1:67:fa:31:92:97:57:00:ea:22:2f:fd:f0:a2:e4:
88:b8:4f:3d:d4:14:32:ee:d7:ab:5e:bb:e1:ab:58:
d0:64:88:86:17:62:74:3e:39:4e:e0:2b:1f:c8:90:
0a:f8:96:16:06:0a:86:c4:10:26:eb:63:ca:99:ba:
b9:2f:5b:ad:09:7a:95:d4:9c:f8:58:83:ff:c0:1c:
c2:65:67:17:4b:8e:43:97:1c:72:50:97:a0:54:ee:
80:79:b2:a1:16:00:20:25:68:b4:a2:23:2c:87:4b:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:F9:96:03:57:C1:3B:1A:A2:AF:05:8E:F5:F3:D5:00:97:D4:F7
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:5e:b9:80:73:50:ed:c1:59:56:74:b6:a3:01:de:c0:3b:
b1:29:80:ab:7a:40:99:b6:5c:7e:e3:58:25:66:b6:f2:d2:90:
0b:d9:97:85:13:40:d8:78:db:a7:ad:b3:a8:69:6f:49:7b:a9:
52:18:1f:de:e6:12:08:cd:4e:e2:ca:71:f2:a5:aa:2a:57:23:
ee:93:72:1d:19:63:35:0c:3b:8c:c4:6e:42:29:13:8e:30:81:
5d:44:f6:c5:f9:1b:3d:5e:23:f8:db:2d:de:c0:7f:2d:ca:1e:
fe:dc:a9:9e:43:5d:b2:62:0e:de:7a:ed:a3:d7:40:9c:5f:fc:
4e:bf:1c:55:d4:bd:ea:80:89:62:a0:51:e6:06:14:15:17:fc:
ac:16:ed:ff:84:b4:af:e2:5e:b2:b5:d9:5c:99:66:0c:f3:40:
b0:36:22:45:7a:2e:a7:de:4c:2e:9d:ef:a6:36:e2:27:3d:5a:
4f:54:f5:3b:bd:15:1b:e0:98:8e:9f:ef:04:c8:e4:8c:0d:4f:
f6:10:b5:a4:40:2d:04:c8:f8:c1:4a:c2:31:e7:82:4b:3e:3d:
21:77:10:78:76:f7:7e:db:32:b4:e2:1d:33:d4:90:6f:38:16:
1f:48:a8:40:7e:7b:f8:87:22:4c:9b:3b:a5:01:0e:f1:85:f5:
00:8e:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:54 2025 by rpki-client