Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
File: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft (raw, json)
Hash identifier: vSQvdvDV2I+lzvEoE8YJ6ROgmbgXgk/vczb3F7zXbQQ=
Subject key identifier: 25:AA:2B:EE:E1:D6:A7:8D:E8:EA:6F:4F:51:CA:B7:CC:05:8F:5D:C6
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 0197C236CFB50F43057968DDAC286131B09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
Manifest number: 15BE
Signing time: Mon 30 Jun 2025 19:01:01 +0000
Manifest this update: Mon 30 Jun 2025 19:01:01 +0000
Manifest next update: Tue 01 Jul 2025 19:01:01 +0000
Files and hashes: 1: 3Pz5apja5cKJYgXJqXnfQrYcWDc.roa (hash: tS0StXV35H98QzpAWS3J2vqaI9c0cKyaGDVnVfsQlWI=)
2: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl (hash: lc/jD0AS9JoImKsqbSvp45iWXDey4wAj6ikBBNhSw0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:36:cf:b5:0f:43:05:79:68:dd:ac:28:61:31:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Jun 30 19:01:01 2025 GMT
Not After : Jul 1 19:01:01 2025 GMT
Subject: CN=25aa2beee1d6a78de8ea6f4f51cab7cc058f5dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:84:c0:e5:b2:2b:d3:39:6e:b4:bc:45:42:
b0:df:52:74:68:4d:1e:8c:80:6a:18:bd:9e:7e:a2:
9e:11:8a:17:2e:eb:59:a8:bd:c8:09:ea:66:15:13:
0e:4e:23:cf:e9:3b:ca:84:03:35:ce:eb:8e:e6:59:
e3:eb:86:69:55:0b:59:72:95:95:a8:24:c4:df:11:
53:31:a7:73:dc:6d:db:9b:03:8a:43:cc:ab:47:5e:
58:a4:0c:b7:a7:2b:99:c2:d3:79:02:b8:bd:f5:51:
fa:74:b3:b4:a1:2e:9b:7f:26:cb:02:84:09:3e:a3:
bd:25:a7:af:2e:a0:f1:14:fd:20:e0:e2:03:b9:9a:
89:a4:d7:22:d8:6b:82:48:cc:ad:65:13:05:50:bb:
9b:2c:8d:17:4c:00:74:8e:75:d1:2a:b7:2e:7b:af:
1b:fb:d5:3d:29:fa:a8:8e:68:a9:82:c8:d7:9c:3a:
fa:81:40:2b:db:8f:b3:de:41:1f:10:ed:e6:0c:c9:
be:42:86:e6:c7:27:f0:8e:5d:43:5d:f5:0a:1e:05:
65:6e:d2:3a:fb:cf:d9:9f:df:38:8c:e4:75:8b:45:
84:ee:6a:43:90:b5:04:9e:0f:66:d9:0d:a7:8d:2b:
32:c3:1f:aa:90:36:4b:ea:e9:8e:f9:4e:b6:68:ca:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AA:2B:EE:E1:D6:A7:8D:E8:EA:6F:4F:51:CA:B7:CC:05:8F:5D:C6
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:ce:e2:0b:42:e8:5f:fd:ee:98:33:87:9e:2f:79:7f:e5:
a7:43:12:41:74:c0:b7:2b:e9:f0:4a:e8:b6:55:4c:6d:75:6c:
a3:85:e9:96:6c:6a:6b:a5:a6:5f:54:83:7f:bd:d4:a7:62:70:
44:9a:d9:0f:80:af:02:9b:b2:08:5a:0d:4d:d0:1f:c9:03:aa:
7d:98:19:32:5a:e3:2d:6e:d7:03:5e:ce:64:52:f3:74:ea:e7:
d2:f9:dc:cd:62:bb:3a:5e:b4:0c:a6:a0:41:c8:a8:68:2d:e5:
30:08:de:81:fc:b3:b4:f1:79:d2:82:d1:f6:e8:b4:e0:21:5c:
55:a8:f4:28:10:41:eb:2a:b7:92:cd:68:6f:ce:98:4a:52:fe:
3e:b4:7d:02:c0:1a:ef:93:a3:1e:0a:b0:ce:1b:a6:57:53:8c:
50:fe:7b:35:e8:43:7e:dd:3b:b1:38:63:32:75:d6:d0:b5:0e:
c8:9e:2e:18:e4:04:4f:d2:d4:00:f9:b0:21:d0:47:56:43:e6:
98:99:c7:00:65:98:a9:81:2c:73:01:98:27:0a:88:83:37:71:
b4:10:a2:53:78:d4:55:6d:e0:6f:c3:88:59:d8:c9:a7:99:45:
92:a0:b4:e8:e6:4a:c2:fc:c2:a4:af:ca:a2:92:e9:64:91:f4:
43:b7:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:02:28 2025 by rpki-client