Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: AYnCSEqWpv3XsZDjYUEctjAChlBLpv2Ok1fDlOAE8w8=
Subject key identifier: 4B:40:64:14:E8:1B:3E:68:FF:D1:BF:03:22:85:84:ED:00:27:7C:35
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 0197B821627DDAC6C740B62B5281275C379C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 20:01:24 +0000
Manifest this update: Sat 28 Jun 2025 20:01:24 +0000
Manifest next update: Sun 29 Jun 2025 20:01:24 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (hash: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: IhLYV/jYLnhKUcxnStGtqDdK51oyl0NHokQPvMTIRvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:62:7d:da:c6:c7:40:b6:2b:52:81:27:5c:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jun 28 20:01:24 2025 GMT
Not After : Jun 29 20:01:24 2025 GMT
Subject: CN=4b406414e81b3e68ffd1bf03228584ed00277c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:c2:f0:61:97:f0:3b:5e:40:b5:04:76:6c:
fa:0b:8f:5b:ec:78:66:18:88:bf:43:a6:25:68:ec:
61:ae:d1:8c:9a:18:da:c5:ac:89:83:d2:4c:4c:9f:
92:85:f7:ee:d8:27:44:a1:68:d7:dc:2b:b6:91:0f:
64:d5:c7:3b:c8:f8:da:71:e1:70:57:e3:b0:5d:cb:
b4:a3:6c:27:3b:0f:0d:77:51:8b:08:cd:f7:b7:34:
57:4b:30:6f:ca:b0:7d:fb:03:68:99:04:f8:76:83:
ac:d0:2c:e8:bd:97:12:26:31:19:a4:66:29:f9:0d:
7c:e7:99:86:87:02:c8:06:c8:bb:fc:59:45:eb:29:
6b:8f:3d:93:f3:7d:e0:54:ca:9d:6d:74:3a:ee:89:
63:c5:bc:a8:c3:1b:5d:1d:b2:98:b6:33:92:ee:46:
09:39:4c:fb:33:50:5a:db:75:b0:6c:e5:45:db:3e:
fc:e4:50:74:cd:a4:18:17:e6:b2:f3:0c:03:ea:82:
39:28:1c:4b:cb:05:80:8d:25:f3:b3:59:35:79:58:
e5:44:cb:91:6b:78:6e:c6:62:dc:18:d3:cf:d6:23:
87:e0:8a:14:5d:57:00:86:d6:cb:03:32:3c:eb:52:
18:be:37:43:7c:da:e0:19:13:bc:86:33:7d:40:ac:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:64:14:E8:1B:3E:68:FF:D1:BF:03:22:85:84:ED:00:27:7C:35
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:59:a3:f2:80:a8:32:7c:a6:d0:ff:ea:a9:48:20:a6:a8:12:
5f:5a:2b:7e:29:d6:31:de:f9:f3:f8:a4:ec:1c:1b:14:07:47:
5d:2e:3a:8d:47:8c:9f:d0:c8:93:89:d9:45:7a:cc:87:eb:f9:
51:ef:24:a9:70:2a:ea:15:94:3a:cb:0b:5e:b0:41:cf:33:c8:
42:bb:3d:86:62:ef:47:5c:af:b4:5e:2f:59:47:3c:f3:ba:eb:
03:90:21:f4:b2:88:b6:79:6f:20:97:ab:ae:88:56:45:fa:eb:
fd:38:9e:f8:32:4e:14:79:8b:91:de:4a:e4:a4:8e:1b:ef:b6:
fb:14:c7:5e:fb:fb:91:d4:78:35:82:93:fc:76:4d:b9:a3:48:
f5:16:23:10:75:53:6f:36:2a:3b:ed:6c:ee:fa:87:87:7f:53:
6f:b5:61:e6:b6:a2:57:87:25:91:16:bc:eb:58:1a:91:c6:a1:
13:1a:61:53:b5:c6:aa:00:e6:57:22:ff:a0:fe:b5:54:c1:1b:
92:7d:15:4d:3f:61:e4:ea:0c:83:16:99:55:49:64:0d:d8:3d:
59:f8:ee:7b:0e:dc:63:63:e9:23:7c:95:6d:92:ce:be:4f:ff:
4f:f8:c6:70:d9:e5:38:9c:6b:3e:59:42:81:fe:57:f7:e7:60:
26:17:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:27 2025 by rpki-client