Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: GRnk6Vbw1m0e/3OyJEg9N9UjyHGWcWx+JfEjNjrZOE0=
Subject key identifier: 27:12:E8:6B:78:C7:31:F8:25:D0:E2:61:94:73:FA:A9:1F:2A:6B:C2
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 0197B6A2012AA694A3D5E4464159B3A8F3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 03EA
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: nGn_W0gSwBrRPKhat5R4cEQoqhY.roa (hash: XVU8sWeUw+6VazizBI8PMCmNF85+iRw+0SNowFdIf08=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: BNFRLrmEcFKtzQ6AAMI/scYr943KUnEiU4QULtv/zsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:01:2a:a6:94:a3:d5:e4:46:41:59:b3:a8:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=2712e86b78c731f825d0e2619473faa91f2a6bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:89:be:45:94:fe:a1:fd:12:59:86:fd:15:
37:2d:ea:2e:de:2d:e3:a5:a6:0c:1a:2d:b1:80:3b:
8e:89:2a:bd:fb:df:a7:f0:a7:96:d7:70:27:53:76:
f3:1d:cd:3f:34:eb:7d:47:2e:ec:28:c7:e0:34:13:
89:ee:1e:bb:3f:6a:04:06:0a:3c:ca:45:36:30:d3:
be:fa:dd:b1:a8:b7:94:15:11:13:4d:11:19:cf:dc:
ce:36:f6:65:f2:ea:a9:66:1d:6d:1c:2d:21:99:d6:
93:31:88:f5:78:1b:96:be:a1:3b:26:dd:57:1d:6b:
f7:f1:c4:66:b2:c4:fd:68:94:93:4d:0e:47:d7:fe:
93:8f:28:35:9e:62:4c:f2:0f:40:34:dc:81:5e:bd:
5a:36:b3:fc:55:04:e8:4a:d4:59:cb:c4:60:e2:67:
1a:38:a5:d0:45:cc:bc:ca:41:22:0e:81:f2:84:e3:
d3:1b:bf:7f:e6:9d:ab:66:17:70:82:30:20:39:2e:
a7:64:51:d2:06:26:a4:e0:f8:75:55:e7:37:17:5d:
02:21:66:4a:be:2b:ca:cd:db:ed:ae:56:20:1f:d9:
f3:f7:75:e3:c9:ad:a2:bf:08:10:32:89:fd:0e:60:
49:f6:b9:23:e7:81:24:52:d7:cc:f4:f4:72:88:06:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:E8:6B:78:C7:31:F8:25:D0:E2:61:94:73:FA:A9:1F:2A:6B:C2
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:be:94:ee:25:e1:21:80:fd:e9:6a:1f:a1:51:fc:0e:e9:88:
eb:f0:d9:12:07:6d:97:d2:a1:11:f6:a7:89:b9:b4:a0:ec:97:
06:71:89:1a:d1:3e:98:b4:6c:2f:c7:3b:ce:eb:f4:f9:e8:40:
7e:95:0e:95:8f:6a:52:78:de:28:09:ef:71:a7:46:de:1a:d3:
32:d7:02:49:1e:05:e0:b6:07:d6:53:40:6d:34:a9:5e:72:1d:
2b:75:76:98:52:10:d8:22:d5:fd:4f:52:af:1c:19:97:d3:69:
13:78:9e:12:a5:f0:57:ea:a3:c3:66:c2:3f:f8:0a:d8:1c:2e:
2e:1f:16:03:16:56:49:80:79:33:2a:2c:67:43:3c:8f:75:fc:
71:7c:e2:89:34:2d:6e:f5:b5:5d:50:bb:ac:74:e9:6e:4a:19:
c1:5b:23:7b:44:82:d5:b2:88:cf:29:35:83:fc:ba:d0:da:24:
d7:b4:bf:81:59:06:d0:50:7d:e1:f1:91:bc:8f:dc:f6:ee:ca:
88:42:26:cf:e4:26:63:4f:18:51:a2:13:72:75:49:3a:e9:b6:
c6:08:8c:0d:2e:e2:dc:58:e5:d3:4a:54:51:e6:d2:c3:15:7c:
6c:a4:03:ce:dd:8d:84:dc:4f:dc:a0:48:10:f4:23:83:27:72:
00:7b:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:51 2025 by rpki-client