Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: i8DBIr7jvZtZJXRi7DNWcjGHr/qGmehOX31bPCAjXTE=
Subject key identifier: C6:37:44:8A:1F:45:F6:CF:83:40:D7:DB:08:46:DD:EF:B1:8C:99:F6
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 0197CC158CCD43332799E0B2EC917F18A853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 1552
Signing time: Wed 02 Jul 2025 17:00:53 +0000
Manifest this update: Wed 02 Jul 2025 17:00:53 +0000
Manifest next update: Thu 03 Jul 2025 17:00:53 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: RMqvdJjVIYW/YvdOFkUWena8NS4xO59uzUeILC2qcDk=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:8c:cd:43:33:27:99:e0:b2:ec:91:7f:18:a8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Jul 2 17:00:53 2025 GMT
Not After : Jul 3 17:00:53 2025 GMT
Subject: CN=c637448a1f45f6cf8340d7db0846ddefb18c99f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:ff:ba:84:c0:dd:04:93:61:61:ff:7d:3b:
06:c8:4c:32:29:ed:e0:73:32:f4:61:52:f9:59:aa:
61:c4:48:61:cb:36:a7:f2:17:5e:74:ad:14:3a:dc:
80:68:bc:9d:bb:10:82:61:3b:03:73:9a:59:d9:f5:
17:02:42:e7:46:bf:f8:ca:eb:ec:ad:1a:44:86:50:
55:72:5d:6f:21:63:4e:45:b9:72:bf:18:46:e5:1c:
30:ee:ec:aa:f1:85:74:47:15:78:f3:0b:e8:cc:76:
54:4e:bf:f4:05:d8:53:a8:88:fa:b7:69:27:4f:fa:
cf:63:49:c2:df:be:18:01:df:3b:76:c5:3c:92:49:
c7:79:87:df:d8:5b:8e:43:90:6b:b4:f5:88:97:13:
60:88:ed:91:6c:35:be:fc:51:ca:ad:e9:96:2e:40:
c7:29:28:6b:88:fe:e1:93:2f:b8:5c:58:6e:a1:88:
b3:eb:59:a9:62:ec:af:1b:54:90:6d:1b:c2:7a:7e:
9b:cf:25:8c:59:fc:79:26:99:61:b9:e5:d8:87:57:
2a:41:6c:78:97:ae:86:28:8d:9d:62:bc:cb:b9:3e:
23:0c:11:f3:b2:a3:4a:e6:90:b8:cf:8b:c9:0a:99:
9a:fa:b6:84:70:cc:49:b3:6f:01:9e:98:e7:de:16:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:44:8A:1F:45:F6:CF:83:40:D7:DB:08:46:DD:EF:B1:8C:99:F6
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b6:ad:59:ca:ba:e8:f7:96:8c:51:69:c8:8f:3c:06:de:8a:
04:03:17:a7:bc:7a:de:a2:f4:36:ec:07:fb:8f:87:db:02:be:
bb:87:cc:c4:0e:2b:ef:9e:6b:10:3f:61:85:74:ea:ce:a4:c2:
97:da:65:30:4d:8d:7b:9c:b9:27:7c:6a:50:41:c5:cc:9f:cd:
33:ff:a6:4b:f7:fc:92:2a:f6:ee:3a:49:c3:18:36:fb:fa:62:
29:27:19:7f:34:a4:83:3c:67:b8:df:e1:2a:fa:b2:b2:c3:87:
43:55:98:8d:6f:76:77:39:10:dd:24:c5:9e:b4:65:95:43:d7:
c6:64:a1:cf:23:9d:d7:62:6d:cc:8c:67:78:3a:61:fe:54:8d:
22:b7:02:7c:85:f5:84:10:9a:f6:7b:a6:82:59:1e:fc:4b:00:
81:ec:65:c0:69:1c:97:4e:5c:e8:6f:ae:92:0e:46:3a:47:f5:
ea:74:44:0b:a4:ed:56:20:5e:73:1e:3f:01:df:3e:54:e6:99:
60:b6:7f:f0:4c:78:2c:fa:da:b6:1f:74:f9:f4:bd:e7:8e:ae:
d4:90:bc:5a:73:b3:af:c9:80:d7:86:a8:9e:ca:bc:ba:6b:b5:
8f:bf:21:8f:a2:59:c9:73:a1:a6:35:31:a6:a2:d6:44:5c:98:
f6:b4:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:33:32 2025 by rpki-client