Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: tXnTCg41wHsHCIShgxyggOlpcK8GyOWGzUSz/vmYMdg=
Subject key identifier: 83:64:8F:B7:72:33:57:7D:CE:A4:52:DD:28:C9:24:A5:83:0D:B1:B4
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 0197C04942DC413C701E6C7B15E67580BBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 10:01:55 +0000
Manifest this update: Mon 30 Jun 2025 10:01:55 +0000
Manifest next update: Tue 01 Jul 2025 10:01:55 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: s2t/4MCNUI+LTOG/Iap8Wy/B2Me4l5I0cJR34CV9Tr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:42:dc:41:3c:70:1e:6c:7b:15:e6:75:80:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jun 30 10:01:55 2025 GMT
Not After : Jul 1 10:01:55 2025 GMT
Subject: CN=83648fb77233577dcea452dd28c924a5830db1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:09:26:12:c9:7e:8c:84:dc:f9:d3:c4:7a:
fb:49:f0:a6:c8:ca:70:65:1b:ce:24:80:25:88:b0:
0c:ba:44:7c:f2:06:d5:bf:0b:d4:a5:dc:7b:f0:d6:
f4:96:8e:61:19:3b:35:72:6b:96:89:dd:8a:c7:89:
7f:5d:5c:10:bb:ae:91:79:bd:e6:1b:0e:51:65:48:
ee:61:7d:ce:49:9e:75:74:ae:fe:33:63:a7:0b:84:
2b:00:93:7a:b8:3d:1b:03:52:c3:05:4e:e8:e1:4c:
a2:b8:4c:11:4d:3a:20:bc:19:67:80:c5:27:57:ea:
18:66:9e:78:ff:58:cb:41:6a:d6:0d:7a:f0:40:3b:
05:5a:bf:76:98:84:92:22:ea:21:0e:3c:cd:57:97:
6a:9f:a1:e7:3d:b1:ef:10:b0:85:d1:8d:42:2d:9e:
26:7c:ef:8a:85:c3:e9:29:0a:95:36:ee:19:14:1d:
92:2f:48:54:7e:60:69:e9:f9:39:ae:8c:18:a4:d2:
1c:a2:a0:6b:42:af:0b:fc:8d:d5:33:3d:7d:77:7f:
db:06:5e:33:48:cf:d0:d9:3c:d3:24:77:29:a6:7f:
99:19:fc:93:c4:da:76:0c:5e:7f:17:33:1e:a2:f4:
b1:d4:3a:74:01:5e:e1:04:9b:ec:f8:3f:d9:9a:17:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:8F:B7:72:33:57:7D:CE:A4:52:DD:28:C9:24:A5:83:0D:B1:B4
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:00:62:52:0a:f9:14:df:94:43:8b:be:d7:e1:27:d5:6c:2f:
a0:f0:34:d0:ca:c2:9a:14:64:22:fe:63:26:2a:6d:95:09:73:
04:26:27:59:6f:17:6b:79:08:94:cb:49:ca:0b:ab:b5:19:ad:
f5:e9:9d:d1:51:8a:6e:a1:1e:05:83:d7:30:98:10:88:29:88:
c4:1f:34:8d:9c:9f:74:29:10:60:3b:84:34:c8:0b:df:44:df:
3e:93:76:54:07:e8:be:a6:b6:21:3a:9f:8b:c0:de:ad:95:da:
8e:1c:4d:70:71:2f:bd:34:14:f5:6d:c6:29:ca:a9:85:19:c5:
48:f5:0e:89:9d:f2:61:4e:39:5e:d1:ce:22:0f:a0:fd:99:bc:
9d:4d:5a:58:44:17:11:4f:df:06:8f:bc:3d:7c:89:cd:c6:42:
18:fb:ce:82:d9:ce:11:2f:61:5b:51:04:c5:32:6e:d4:45:c7:
88:b1:75:31:0c:6e:bf:be:75:4e:ef:b8:17:cb:8e:45:26:6e:
31:36:1a:16:da:12:01:ff:12:2a:3d:3d:48:47:8f:f1:a6:83:
99:fa:b3:58:f0:20:50:f2:43:a3:a6:ea:cc:e5:0b:b7:bc:94:
06:c7:f7:a9:44:5c:47:b2:42:cf:0a:fb:aa:cc:ee:68:e1:7e:
3b:5d:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:26:48 2025 by rpki-client