Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: A7mY2shh7H7WYNZoHPLj+BGBp9U9Mmm3hbr/ydVtgLM=
Subject key identifier: D7:4C:6B:FE:B7:25:2D:61:07:58:47:2C:D3:4F:C2:0E:45:7B:5B:55
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 0197C45C664861214F13C9389E503AAC4D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 15DC
Signing time: Tue 01 Jul 2025 05:01:19 +0000
Manifest this update: Tue 01 Jul 2025 05:01:19 +0000
Manifest next update: Wed 02 Jul 2025 05:01:19 +0000
Files and hashes: 1: BiH4T1QItrDeKmbSQQD10MbyJM0.roa (hash: 1DccZm+wbtnRwvwFHLQW36Ec7g4Qt5rsBnmXwCd1CCk=)
2: lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa (hash: 7pNuzEMq5SGi7oY7hUTVuLhRAftrVbTi7LJ5DaYy2Z4=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: 0QEFe7nBtVchh7f2rIx48Y7UZ8jLcJEKSmLEfDTeiaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:66:48:61:21:4f:13:c9:38:9e:50:3a:ac:4d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Jul 1 05:01:19 2025 GMT
Not After : Jul 2 05:01:19 2025 GMT
Subject: CN=d74c6bfeb7252d610758472cd34fc20e457b5b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:9e:8d:5e:ca:c5:5b:18:5e:07:aa:e3:ee:
a9:12:bd:ae:65:15:84:0a:04:d0:67:ae:98:aa:c1:
a8:f3:09:dc:1c:66:39:5f:31:bb:26:f6:bf:77:25:
e8:58:d0:95:4b:83:6e:3b:f2:7b:8e:55:4b:2f:57:
10:df:a2:30:0d:19:5c:ea:82:d0:52:2c:cc:85:09:
3d:b4:c6:0c:9a:8c:2f:44:47:de:a8:9c:13:de:5d:
ea:8b:bd:4d:f3:02:23:8a:40:2b:5b:56:f5:5d:27:
47:b9:3a:5b:74:a5:d4:ae:0d:72:b5:74:bb:0a:0b:
84:49:03:dd:87:3f:c1:0a:aa:75:db:00:6b:32:20:
94:2c:f8:40:5d:87:fc:cd:6b:f0:bb:91:b8:1a:7f:
18:6e:f8:a0:34:e8:21:c1:ba:8f:6d:37:96:65:b0:
3b:72:59:5f:7b:3d:c2:1c:b8:15:66:6a:46:62:d6:
12:f5:64:36:78:50:31:13:4e:4b:9a:b1:b5:f1:f5:
ae:f7:55:17:c1:43:ad:99:1d:57:ed:5f:03:48:12:
5c:84:75:c2:99:f2:02:8d:d7:80:fa:e2:aa:4f:cc:
f3:f0:b6:fe:d7:67:ca:d9:ba:28:0f:50:ca:bd:28:
f8:c5:ea:1e:a2:eb:86:37:4e:76:f3:3c:45:d5:42:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:6B:FE:B7:25:2D:61:07:58:47:2C:D3:4F:C2:0E:45:7B:5B:55
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b7:59:54:2e:64:b9:ac:83:ce:4e:17:48:8a:f9:2e:5d:fb:
80:c4:ad:af:7e:98:de:7c:92:c8:b3:6b:1e:ad:b3:15:f1:cf:
f0:8d:fa:c6:e0:5a:c9:3d:d3:0b:c4:83:45:00:d4:e8:8c:13:
95:16:21:28:d2:e8:65:4d:41:a4:1d:5a:8a:b3:33:e3:99:51:
5a:c0:2d:5c:dc:33:ea:53:0c:d5:3c:7b:ff:12:ba:05:96:f1:
ac:e0:16:75:b0:12:dd:ad:48:21:38:9d:66:03:83:0b:ea:2a:
19:91:bb:c4:ad:4b:64:98:94:a3:fb:45:2d:4e:ed:87:4c:7d:
05:27:7c:a2:7b:09:0a:b9:16:0c:a8:d1:4f:d3:fc:91:06:ca:
b1:b0:4d:d7:3b:c3:b6:18:5e:db:7b:3a:be:8d:29:60:32:97:
ef:49:6e:b2:b6:0d:6e:7f:c1:c0:76:32:2a:ae:24:1c:46:7d:
02:93:0e:f5:d5:7e:58:9d:15:de:0d:33:5e:bc:0d:52:98:c9:
37:e1:de:01:d7:b1:cd:49:cd:11:1c:57:0b:96:8f:b0:9e:29:
0a:3b:fd:8f:20:72:f9:20:01:89:4d:e9:67:66:b1:b5:0f:87:
a0:ab:33:14:0e:a2:57:48:74:cd:b2:98:e1:e5:50:53:7c:b1:
38:b0:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:38:30 2025 by rpki-client