Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: pzSO0T0peEC8rRBQcrABRUDHYW9/VIwuF1s8cRXcpYc=
Subject key identifier: A7:9E:33:98:4A:B2:B6:67:0B:47:52:DC:FE:A3:6E:E5:25:E6:CD:9C
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 0197D217F9059D5C0DCE07EF075DDD078F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 15C4
Signing time: Thu 03 Jul 2025 21:01:15 +0000
Manifest this update: Thu 03 Jul 2025 21:01:15 +0000
Manifest next update: Fri 04 Jul 2025 21:01:15 +0000
Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: VDonnRnQ+nsp3o+JRbg/fhLKpEf9jCTxZF8HXfVQuks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:17:f9:05:9d:5c:0d:ce:07:ef:07:5d:dd:07:8f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Jul 3 21:01:15 2025 GMT
Not After : Jul 4 21:01:15 2025 GMT
Subject: CN=a79e33984ab2b6670b4752dcfea36ee525e6cd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:a1:51:6d:c5:7a:ef:2e:04:d2:6c:c9:2a:
b6:64:21:b3:f6:a7:cc:09:ec:33:e1:c1:bb:d6:e6:
f5:16:7f:af:98:f2:cf:4f:99:4f:cd:81:52:21:24:
52:2a:10:bd:ef:a1:8e:1d:3c:d6:83:66:33:fe:fe:
4f:07:69:5f:9e:46:ff:1b:f8:a7:3c:50:5f:5b:e8:
b7:2e:0c:f5:5b:c7:4b:37:13:cc:43:52:d3:1e:f2:
8e:66:31:7b:d7:05:b5:cc:65:cb:9c:98:4b:46:08:
68:3e:36:17:de:65:01:9f:02:bc:b0:c3:32:66:2f:
48:dc:2a:2d:90:ab:0c:8d:b3:65:3d:30:26:29:0c:
a5:6f:36:e4:6f:20:01:f2:f8:15:57:af:e5:5c:a8:
ef:7d:74:6a:6e:db:8b:6d:ce:d4:76:a7:48:83:96:
ea:4e:88:c2:54:09:44:c8:2e:f2:87:8e:09:f6:b2:
94:2f:db:16:99:10:8c:ef:35:f1:7f:45:ba:07:c3:
5a:a5:c8:22:55:fb:ef:36:a7:6d:a1:b8:d2:42:9c:
db:a2:61:54:75:8f:2c:81:14:fa:af:85:bc:a1:5f:
d5:e3:e2:93:ab:47:c5:97:3a:5f:18:31:a8:36:b3:
d7:9d:07:55:b8:89:0b:f5:22:e7:05:ac:b0:75:34:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9E:33:98:4A:B2:B6:67:0B:47:52:DC:FE:A3:6E:E5:25:E6:CD:9C
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:48:0a:01:18:91:78:16:80:db:1d:6e:cb:0c:07:e4:3f:49:
72:30:0c:a9:d0:31:95:e1:3f:b1:90:f4:ba:4c:e6:89:6e:d5:
34:3c:ca:95:93:c6:f2:6d:c7:02:76:0b:3b:bc:de:40:1e:35:
96:17:7f:35:9e:fe:32:9a:01:bb:bd:10:0f:91:e0:27:2d:6b:
8c:b1:c5:90:1f:4d:20:e7:68:32:a7:ee:d9:7b:84:a5:85:62:
a2:a9:ce:b5:b0:0f:02:75:8d:b3:89:23:89:f6:8d:ad:6e:11:
29:02:13:3e:60:c3:5f:35:40:ec:0d:ba:1f:46:36:89:05:42:
ee:16:c4:90:da:c6:da:48:c8:5c:92:e8:01:e6:24:6c:ad:c8:
47:2e:85:91:98:9b:30:9a:a4:86:5b:39:72:73:50:f6:df:f5:
f5:bb:b6:88:b2:94:45:bd:04:f5:1b:9d:c7:ee:0d:18:e7:59:
f7:34:95:11:39:2b:e7:44:63:70:15:b1:3c:5e:33:49:92:7f:
7e:3a:3c:c4:6f:76:8e:e8:78:c9:ee:e6:66:69:18:d2:de:e1:
e4:ff:56:2c:60:62:b4:b9:b8:f1:c5:71:13:f3:c3:e7:9c:91:
57:30:8b:0a:33:5d:d7:41:2d:93:a2:7c:bb:ac:be:c3:e8:80:
70:3d:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:52:45 2025 by rpki-client