Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: ULt4aWozsMPVfiKCvLYvINCplmFkF8bjipAmQY+w5XE=
Subject key identifier: 1E:F2:A9:32:46:AE:CC:7C:9C:2E:20:E3:26:C1:7A:DD:98:10:9A:C0
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 0197C9F1787EE22FD6BAF08790DF5AD51651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 07:02:14 +0000
Manifest this update: Wed 02 Jul 2025 07:02:14 +0000
Manifest next update: Thu 03 Jul 2025 07:02:14 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: yrHJM+MuLHptf7Zp5919HOfSvmxDwYMiJ5er4YA+Hrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:78:7e:e2:2f:d6:ba:f0:87:90:df:5a:d5:16:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Jul 2 07:02:14 2025 GMT
Not After : Jul 3 07:02:14 2025 GMT
Subject: CN=1ef2a93246aecc7c9c2e20e326c17add98109ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:0b:72:e9:4d:d2:a1:07:14:2e:1f:9b:1e:
c9:c1:17:8f:e5:05:2c:23:dd:89:34:78:35:12:8d:
fa:71:7c:22:5e:33:cc:e1:99:b9:15:61:71:25:60:
c3:60:41:00:a7:c6:a3:84:f1:a2:e6:84:51:c0:21:
3b:f0:33:9c:ea:b1:ad:0e:2b:c3:01:0f:fe:a9:69:
12:4a:f3:ab:5a:cf:6d:52:8b:b3:c4:b9:02:05:39:
41:8d:f1:52:7d:f2:74:c8:01:8b:e3:50:66:24:a8:
94:b6:f7:7d:ea:fd:a0:59:51:5f:b4:87:2a:91:3c:
22:a2:51:ce:58:63:cb:36:ba:10:42:12:0a:ef:e1:
2a:a7:7d:75:16:5e:7a:4a:4e:e4:9d:bd:46:c8:c6:
44:98:b2:db:ae:84:64:71:45:f6:fa:0a:b8:82:35:
31:2b:e1:6f:db:1d:31:72:9c:e3:b9:0e:c4:2e:e8:
69:b7:a1:fc:65:f0:6c:d6:0d:b7:8d:75:01:db:b4:
7b:c9:49:d2:75:34:c0:a3:dc:cc:0e:af:66:67:05:
7b:d4:75:16:a2:35:8d:f7:ba:3a:5a:b2:a6:2d:ba:
22:47:65:ab:29:ab:47:60:a6:42:d6:a2:7d:1a:7d:
48:72:ac:e8:39:53:a2:ce:55:06:b6:50:10:89:f0:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:A9:32:46:AE:CC:7C:9C:2E:20:E3:26:C1:7A:DD:98:10:9A:C0
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1d:c8:2a:14:2a:bf:1f:ad:26:95:85:22:a8:61:77:b1:8d:
d6:8f:f2:00:d1:a8:61:93:ba:a1:79:eb:4c:d8:af:e6:fd:e7:
e9:bb:b9:5d:1c:14:f0:f2:65:76:1e:96:65:c0:b8:6e:f3:18:
53:27:64:9d:68:a9:f8:26:7e:11:12:07:79:26:0f:27:2b:0a:
6d:3f:98:a7:c1:18:17:08:55:32:c8:0b:96:f3:d6:a8:ba:61:
ea:89:86:fe:77:04:5e:2a:5d:08:fc:46:b6:d3:13:ad:a9:a7:
8c:89:1b:aa:38:0c:07:ab:dc:55:f2:7e:43:51:a2:3a:db:1c:
b8:13:ba:fe:dc:5d:2b:56:1d:62:06:70:98:f5:5b:fd:7f:94:
bf:1b:1d:e1:8a:1c:95:64:34:c5:fa:6c:90:6f:35:9e:86:21:
e0:9d:b9:e5:41:0b:c2:46:d5:4f:4d:d6:24:50:ed:c3:d7:07:
4e:9b:08:5c:e4:52:43:d3:f1:71:cd:a7:08:3c:4f:c8:c2:af:
0a:e0:e7:e1:59:e6:bb:d7:1d:97:ef:11:81:80:21:d3:2a:3f:
34:1c:1d:dd:7d:8a:61:06:a8:17:42:75:ec:ba:ef:86:f9:d7:
b5:a1:d1:26:c1:78:2b:51:52:82:ed:87:f8:cf:6c:ef:25:82:
40:59:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:57:58 2025 by rpki-client