Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: 1y2R07O0RHjU/gVh30i0zsZY076VoVm4FTxqVoZrvGw=
Subject key identifier: D7:EE:59:65:8C:16:BA:EF:4B:66:BC:A8:C4:84:C2:0C:FB:19:A8:3C
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 0197CD28156CB4CAB403FC1959988C75D55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 22:00:45 +0000
Manifest this update: Wed 02 Jul 2025 22:00:45 +0000
Manifest next update: Thu 03 Jul 2025 22:00:45 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: uSYXhO7K90/NHQpRnIj8GEUkoQZTdGqMYfNTkjm1JbI=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:28:15:6c:b4:ca:b4:03:fc:19:59:98:8c:75:d5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jul 2 22:00:45 2025 GMT
Not After : Jul 3 22:00:45 2025 GMT
Subject: CN=d7ee59658c16baef4b66bca8c484c20cfb19a83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:ab:9e:70:7e:45:47:f2:7f:12:dc:1b:fc:
af:61:ea:8e:90:8d:7f:dd:7b:fd:21:da:52:fa:31:
2e:67:b6:c3:4d:70:cd:62:44:eb:c0:f2:a0:b5:a7:
6e:0f:12:1d:66:b6:38:0e:7f:d3:2c:f2:b0:9e:91:
8c:c3:5f:f5:f8:51:99:bb:ee:d1:95:9a:e6:88:1b:
a1:52:24:e4:4a:6e:f9:b9:e5:65:bd:9a:02:ae:57:
54:e3:39:a6:42:42:d4:41:e0:fe:27:05:94:65:4f:
d8:96:4b:b0:ee:2f:da:3f:a8:52:7e:9b:df:c3:79:
07:f3:69:f6:e7:fb:9f:91:9c:fb:c0:9b:e6:82:08:
da:39:ed:6f:78:db:97:99:14:51:23:f8:b2:b6:8e:
2a:b8:3c:88:c4:6b:04:ca:33:34:cd:af:db:a7:79:
6f:11:8c:ce:4c:10:d3:c6:37:46:03:21:93:8b:0d:
a1:d4:63:58:66:4e:f4:64:9d:e3:0c:1e:e1:c9:f6:
2e:9c:c7:73:f6:0b:ec:07:38:5f:66:e2:fe:25:27:
ab:14:2d:98:ad:b1:a8:03:6a:2f:18:0f:a5:5e:04:
5c:05:a6:f6:9e:cf:4a:49:f2:21:ce:53:55:35:43:
af:92:d9:5a:db:3d:a1:3e:97:f2:fb:0d:e7:92:9b:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EE:59:65:8C:16:BA:EF:4B:66:BC:A8:C4:84:C2:0C:FB:19:A8:3C
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:49:c9:10:f2:7e:72:e9:a0:e8:4d:3f:ce:6c:df:be:0f:10:
76:54:2b:4c:82:68:f2:7e:af:57:97:03:cf:cd:de:09:71:08:
1b:7c:c1:52:fd:b3:30:4f:91:41:d2:11:f7:1f:60:6c:05:ec:
06:fe:86:b4:f0:9f:23:70:28:e4:57:0b:17:b1:56:e3:66:30:
33:16:9e:4b:6b:83:6c:81:03:0d:12:82:84:53:7c:fb:6a:2c:
29:59:7b:21:ad:1c:67:b4:99:be:36:8d:74:6b:64:3b:b6:4e:
d1:cf:e8:17:22:ec:85:7a:39:d5:8a:6d:a1:db:8b:a3:03:f0:
b8:17:e6:6e:85:04:0c:94:47:4a:b8:34:cc:61:15:57:a2:34:
27:0b:4c:f0:aa:ef:95:32:8e:c9:06:39:39:bd:d9:99:f7:a8:
cb:4f:8f:33:af:69:07:c7:25:65:20:ba:71:fa:55:c0:f7:17:
3e:d1:27:d9:2e:f7:d5:4c:c9:e8:8f:ca:c4:84:86:8a:ec:3f:
8e:5e:e2:b3:f5:8c:f9:c3:53:b6:e6:45:df:51:bb:7d:95:1d:
99:21:f7:a0:25:73:5f:a0:1d:a0:7c:0f:61:9e:f2:02:20:0a:
46:70:f1:10:ad:aa:b2:3f:cf:cd:60:e3:6c:f1:d8:07:bf:7c:
a0:ae:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:08:27 2025 by rpki-client