Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File: lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier: vnudzSbuLfzHEHgjOAty632+x5A5wDvYF9I3mWVJoeU=
Subject key identifier: 87:0A:16:7A:3A:12:7E:0A:E5:F8:06:F1:FE:D8:2D:5A:CD:00:86:83
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 0197C6B8904D60B2D40DFB1C7811FC1D9B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number: 1421
Signing time: Tue 01 Jul 2025 16:01:13 +0000
Manifest this update: Tue 01 Jul 2025 16:01:13 +0000
Manifest next update: Wed 02 Jul 2025 16:01:13 +0000
Files and hashes: 1: 3srpGduL_zOjHqnp8WJJguH4g-0.roa (hash: 0YdFBJ148GiXs/92XtOcHZ9J9KnY83sjjDOEJj+352E=)
2: 84Pxk_QK5F5c0pwgTDFWtDT7vwU.roa (hash: c1siOGR8KUDdej1OO9Qc6j+ELIH1wDjJz2kkSXEbu4c=)
3: 8kHzjF6JFCHpsRwergAzR6Hl5jY.roa (hash: mffmLDMT2QFZfhtMRkhlhhueq/UkFuS4pA75sqzvXFs=)
4: F89bS7qNe1rnaq_S9GGqTSzrLTM.roa (hash: l3wobnBJMDC08NMZEcgpSqpNWZr9JHGOo3k9DjoFPHM=)
5: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: 7ZM2kUZ7YkCBXMYny7nLMklrbe553FmTn35nen++qUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:b8:90:4d:60:b2:d4:0d:fb:1c:78:11:fc:1d:9b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jul 1 16:01:13 2025 GMT
Not After : Jul 2 16:01:13 2025 GMT
Subject: CN=870a167a3a127e0ae5f806f1fed82d5acd008683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:8c:a7:33:b2:56:a2:e7:8a:65:6a:fc:d8:
2b:86:e7:b3:d2:dc:a6:16:ca:08:eb:ae:27:e7:a3:
3e:a9:7c:ff:8a:fa:32:74:d9:ab:8c:64:31:42:f2:
c5:4a:e9:a6:24:af:9f:c1:7e:ae:f8:b6:0e:27:a1:
95:b1:3f:73:d1:57:3f:a2:c7:e9:a6:98:e3:d4:ae:
16:71:38:23:61:a6:63:6e:ef:4f:89:1c:c1:5d:97:
16:9a:cf:fb:54:e6:b2:45:0a:45:ca:15:90:c7:1c:
80:89:b9:74:29:66:ff:fb:cb:05:13:7a:27:68:8d:
0f:5b:8b:bd:46:1f:41:5e:83:db:31:6e:6f:fd:04:
d0:34:34:18:e1:14:47:a0:40:32:8a:cb:73:91:52:
6c:c1:d0:f6:62:23:4f:f4:bf:73:58:fc:5b:de:89:
81:7d:88:96:e2:91:88:6c:e1:04:f7:22:2d:cc:29:
a5:e9:c2:60:9c:de:13:9f:48:12:e5:01:94:6f:e8:
b5:71:7f:2d:e8:68:19:8d:67:0b:f9:b1:8e:12:64:
97:98:15:0e:d7:f2:ff:20:cd:4d:85:e7:89:8a:6e:
8e:55:c2:a8:ec:2a:0a:4c:4a:6b:62:fd:0b:17:c1:
6f:8e:23:1a:c5:59:79:27:6a:aa:6a:80:3a:de:99:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0A:16:7A:3A:12:7E:0A:E5:F8:06:F1:FE:D8:2D:5A:CD:00:86:83
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:98:9c:ba:cf:16:26:d8:ad:28:36:59:9c:f1:59:6a:50:2d:
d2:a1:f2:11:ca:44:f4:3f:8e:52:45:a4:99:12:6e:d5:37:b8:
dd:5f:a2:b7:0b:06:f3:50:bc:7f:99:e7:f3:07:14:a7:dc:a4:
58:a4:4a:89:eb:c9:22:6b:43:1e:4f:86:5d:00:68:92:b7:32:
c3:cc:6d:b2:2d:50:ea:bb:3b:5f:0e:9b:b1:0d:49:bc:0a:51:
1f:77:d3:b9:26:8c:d3:e4:51:58:5c:c2:4e:74:b5:26:da:bd:
30:98:82:27:d3:0f:d0:1c:fa:4c:2a:47:71:95:ec:d8:e2:1b:
d4:2e:ab:52:d0:fd:12:13:c7:af:9e:4b:b9:69:3b:64:66:a0:
4d:55:06:af:d2:75:3e:b6:b5:12:42:57:9e:76:d6:ae:44:73:
b6:26:e2:82:6a:6a:62:4a:22:0f:64:f0:d1:8d:f7:7f:7d:25:
7d:b7:da:b1:c1:1a:5f:fd:51:01:9e:01:f5:88:e7:24:a7:16:
3a:15:1e:6c:8f:f4:c4:06:89:26:6a:62:c7:e1:b7:f6:12:69:
20:49:9f:4a:90:e5:98:f3:93:99:ec:0a:93:6e:ab:60:3b:f6:
e2:87:47:ed:d0:37:d6:c9:79:d0:c7:1e:88:a2:cd:a3:97:11:
27:00:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:21:48 2025 by rpki-client