Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: jZbAhb9YakS64arK0H8a9bQa00USBUSaTJm/+NxN61w=
Subject key identifier: 29:99:AA:46:77:CE:EC:B5:BE:92:93:8B:85:B6:60:9A:6E:2D:0C:49
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 0197C3B7353CCE109B59DF60E608B3A5E39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0667
Signing time: Tue 01 Jul 2025 02:00:53 +0000
Manifest this update: Tue 01 Jul 2025 02:00:53 +0000
Manifest next update: Wed 02 Jul 2025 02:00:53 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: 0yb9Oyb5TYc7FNZaWQKKjAtgaQiYAeENQ/Kgzf4s9x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:35:3c:ce:10:9b:59:df:60:e6:08:b3:a5:e3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jul 1 02:00:53 2025 GMT
Not After : Jul 2 02:00:53 2025 GMT
Subject: CN=2999aa4677ceecb5be92938b85b6609a6e2d0c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:6d:ed:ef:12:5f:40:56:82:1d:88:0d:86:
3d:2d:c8:b4:73:06:3a:62:f4:52:93:2a:cc:24:7c:
fe:78:a4:69:4c:fa:bd:02:83:42:ef:18:5f:69:ea:
fe:7f:56:e3:f6:ae:dd:4d:ad:c5:0a:cc:e0:bf:a5:
57:b9:bd:fc:62:14:6a:72:cc:81:a2:cc:78:63:2a:
4b:b3:ea:5c:64:77:84:26:1f:ac:8a:1c:1a:a6:f4:
d5:17:ee:2d:67:7e:90:c9:d6:67:5f:39:20:6f:8d:
ef:0e:0c:89:23:04:67:7f:44:35:a9:66:ff:ad:cc:
1f:da:42:55:9e:a7:bf:9c:50:7d:78:ad:2e:58:c1:
f9:98:38:00:9a:be:86:a6:db:1f:34:ec:3c:c5:97:
77:cd:8e:fe:52:c7:33:12:73:f6:64:b6:04:f1:a1:
bb:5b:b3:d0:1f:4c:51:d5:0e:de:7c:ff:b2:44:8e:
53:28:15:8b:71:bb:bb:3d:3f:18:5d:e5:1e:6a:01:
27:e8:e4:bd:7d:b7:89:d9:64:71:5d:d6:78:70:77:
92:26:8d:64:16:b8:6c:8b:97:a2:05:60:33:fa:94:
00:12:19:7b:ab:df:3e:40:db:c3:b9:4f:c0:e7:81:
d3:fa:7d:84:1b:7c:dd:96:4f:b2:d8:d0:96:45:88:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:AA:46:77:CE:EC:B5:BE:92:93:8B:85:B6:60:9A:6E:2D:0C:49
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:82:e2:62:a9:1f:d0:13:b1:75:60:88:2c:ec:d9:28:81:
d0:70:7c:0f:0e:35:97:e0:dc:ea:0d:ae:82:9e:33:fb:38:a4:
3b:68:7b:1c:1c:37:c5:df:7a:f4:30:3a:b1:87:99:90:88:d2:
65:4d:02:73:4b:54:0c:92:05:be:00:5c:3c:2f:66:3a:4c:73:
d8:c9:6e:ff:60:21:63:8e:f7:a6:ee:17:cf:a0:ae:f0:73:52:
e3:4d:b5:10:d0:22:ca:c5:fa:cb:87:d9:15:8f:ba:48:39:de:
e4:ba:04:13:99:4a:3a:74:1c:bd:a4:68:93:05:0a:ef:b8:c5:
15:7d:ea:6c:d5:9a:d5:9e:61:e6:8d:4d:46:d5:ce:b8:3c:3a:
18:65:14:ed:92:5c:30:21:59:81:44:6b:d8:1b:f5:8a:96:a8:
ea:44:b2:1e:2c:be:43:aa:09:37:9b:24:bb:f8:3f:1e:8b:a2:
8b:49:e9:66:d9:c1:3c:11:70:ed:c8:1a:20:9e:c7:ae:ad:53:
68:fc:f4:5a:25:61:fd:44:fd:27:1a:6b:65:96:da:1b:56:47:
06:dc:1e:5e:3d:42:18:5e:e4:fe:2a:98:0f:fa:eb:65:48:14:
e7:da:d6:2b:98:99:3b:df:00:1a:8d:62:2d:f7:ad:af:5c:06:
42:f4:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:37:20 2025 by rpki-client