Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
File: yCyAAaF2QraVYsY6xYkg2jYPFU8.mft (raw, json)
Hash identifier: hIUz8alrRLHjATPLASd1+lcMnusxFDNUVvPAfcsL0TM=
Subject key identifier: DA:C9:66:33:8F:F5:D0:96:58:2A:33:CD:7C:C1:FA:5C:0B:77:1A:B2
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Certificate issuer: /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial: 0197C1926A40BDDEFB3F46741C102105620F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 16:01:27 +0000
Manifest this update: Mon 30 Jun 2025 16:01:27 +0000
Manifest next update: Tue 01 Jul 2025 16:01:27 +0000
Files and hashes: 1: 1QZVcXytUuxqM1PLlTk73xY8pDU.roa (hash: oWmFEOAWi7NkKA3U3ke7LKelHFeRhHAmJaVgP86H32g=)
2: yCyAAaF2QraVYsY6xYkg2jYPFU8.crl (hash: 0LaW3k2DOndjggf1b81xrskVjbJxWa/ikuFX2C1aAC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:6a:40:bd:de:fb:3f:46:74:1c:10:21:05:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
Validity
Not Before: Jun 30 16:01:27 2025 GMT
Not After : Jul 1 16:01:27 2025 GMT
Subject: CN=dac966338ff5d096582a33cd7cc1fa5c0b771ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:94:61:0b:11:56:2d:d1:26:00:1f:0b:81:
71:7a:b1:0b:d9:06:33:00:35:3e:7e:cc:60:70:1f:
a9:b9:c7:3b:53:76:b3:a9:20:41:09:da:75:fc:18:
ea:c9:9b:4c:2c:72:99:e7:59:4b:52:ad:00:8a:d8:
70:75:05:35:a6:d7:a1:01:e1:19:99:e4:87:57:fa:
2a:66:34:39:99:74:73:7e:a0:07:f8:37:de:49:54:
72:32:da:fd:ad:4f:2d:2f:7f:14:fe:1c:75:98:38:
c3:7c:5b:42:b2:0a:5a:5e:11:e0:3a:7c:d4:66:6f:
14:43:5e:80:6c:0c:09:14:94:dc:11:0f:9d:92:a6:
d5:83:15:2a:b7:86:7e:1a:99:ce:87:1a:89:53:20:
b0:d9:a5:33:d5:11:53:de:1f:cb:8f:5f:50:34:38:
5b:a6:78:bf:87:7e:6a:2d:f1:26:82:7c:c2:ec:b8:
53:11:41:1a:84:04:c5:4c:ff:cb:70:3d:d2:c6:40:
75:2d:85:af:ac:84:14:0c:24:e9:ec:de:5a:3f:ee:
18:de:89:2a:8e:e0:51:2a:6b:d3:ac:e6:64:60:9e:
b0:35:db:b2:c0:ca:f7:c4:b8:b4:98:e0:24:6f:59:
9e:ae:b8:b3:3d:dd:6d:1a:5c:2d:8c:44:40:52:0a:
1b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:66:33:8F:F5:D0:96:58:2A:33:CD:7C:C1:FA:5C:0B:77:1A:B2
X509v3 Authority Key Identifier:
keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:aa:cd:c6:d2:e5:54:64:b0:6b:f6:ac:81:37:51:39:3c:
c8:d3:a8:a4:82:1e:97:46:f5:7e:c7:12:5c:8d:5d:bb:85:cc:
2b:6e:30:f3:29:86:1a:81:06:9e:98:01:c4:c1:ec:85:87:16:
66:23:1f:fb:64:1a:e9:8f:47:ce:06:2d:c4:3d:a5:aa:99:10:
86:9c:91:5f:78:5b:63:eb:c4:3f:09:2b:92:46:46:eb:7a:a1:
55:aa:34:71:5c:93:79:11:13:00:d3:06:b8:1d:23:d0:39:18:
a9:fe:82:53:e1:60:86:15:1e:cf:ff:be:a9:1d:dc:0b:70:f1:
ff:32:4b:78:cc:41:20:e8:71:e4:bf:6b:06:0d:9e:a4:f2:8f:
90:7f:48:7b:f6:06:3e:73:c7:f6:34:f5:6d:13:31:e3:f0:d0:
29:08:6f:39:0d:29:4f:20:d0:4d:61:2e:74:ed:99:c9:e5:cd:
91:05:cd:29:db:ca:08:6d:a5:c6:a4:c0:62:47:fd:4a:d3:8e:
80:65:ec:2b:a0:be:99:5b:3f:0e:ed:38:de:c9:57:08:7a:1f:
7f:52:cd:af:60:55:07:ce:88:b2:c4:a8:af:ad:ad:e6:69:1e:
a8:09:4e:6e:b3:db:fa:b7:9d:d4:67:2a:dd:bf:8a:7e:13:eb:
51:06:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:24:51 2025 by rpki-client