Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: VquP4XUZbCEKm49RVygMfg6rn83rzGxt5GyebXWgkU0=
Subject key identifier: 4E:DA:FF:62:55:8A:D7:EB:FF:CD:7A:83:EE:DB:53:5D:8B:85:29:E0
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 0197BAB47A97175BC89D857CA134CFAA1AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 08:01:19 +0000
Manifest this update: Sun 29 Jun 2025 08:01:19 +0000
Manifest next update: Mon 30 Jun 2025 08:01:19 +0000
Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: 15cAvNwLZfTi5sSTwdvydzL2EfRu3l4nSyGhsFQ5uco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:7a:97:17:5b:c8:9d:85:7c:a1:34:cf:aa:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Jun 29 08:01:19 2025 GMT
Not After : Jun 30 08:01:19 2025 GMT
Subject: CN=4edaff62558ad7ebffcd7a83eedb535d8b8529e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:5a:df:bb:82:23:a7:31:b5:1d:19:4e:00:
83:e5:d0:0b:b3:e9:55:2a:07:a5:1c:67:8d:c4:5a:
6e:38:d9:c5:69:b5:09:5e:c1:a6:6b:81:ad:fd:96:
c0:8c:07:eb:61:87:0b:73:64:fe:58:78:f2:3c:5a:
c6:29:20:e2:9c:be:bd:d4:dc:f2:ac:56:e9:d8:19:
61:b2:6e:3f:9e:76:5e:e2:d8:6d:53:60:40:8f:70:
8e:07:2a:9a:6d:b6:d5:91:96:b8:7a:f9:e0:23:4d:
fb:d4:1f:cf:6a:3a:66:1a:a0:05:9e:59:cc:57:d7:
c4:e0:ba:7e:6f:1e:ae:2c:7b:76:55:5d:52:c1:ff:
09:7d:1d:a7:c4:31:e8:dc:4a:30:51:a2:e7:fc:f0:
dc:95:b4:4f:e7:4b:9f:8c:6f:51:eb:a7:e2:b7:7d:
98:3d:6e:2c:de:57:61:c1:f7:1e:ff:9a:7a:70:c0:
e8:38:5c:d8:e6:8e:f8:82:eb:df:a6:bc:fc:d7:f3:
97:8e:a8:51:54:19:93:55:c3:71:20:5e:b8:2c:2d:
d9:db:f6:f6:15:1b:80:9f:ee:59:fe:e5:ee:ed:3f:
8b:b6:23:b4:48:30:6a:77:e1:45:97:4c:4a:7f:ef:
44:39:5d:b7:d6:ea:c8:b5:59:2f:e6:32:47:45:07:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DA:FF:62:55:8A:D7:EB:FF:CD:7A:83:EE:DB:53:5D:8B:85:29:E0
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:a3:32:9c:79:08:b9:b5:19:7f:9e:c1:22:52:44:c8:56:
42:24:b9:42:91:d7:35:d3:26:87:cc:90:c1:77:d6:a3:f7:aa:
a5:2c:5e:3d:8f:c6:b3:74:5d:7a:a0:38:3a:d2:2f:be:76:af:
49:af:fc:33:83:82:d4:8d:4e:16:1a:38:60:df:ee:bd:a4:41:
2f:ba:a7:1a:b2:80:5a:b1:34:2d:f4:52:08:5f:3c:ea:77:a0:
c1:5d:3c:a8:7a:92:e9:83:b5:aa:89:8d:fd:89:26:9c:02:26:
12:5c:41:37:e2:d5:6b:f7:65:ea:cf:a3:98:dd:0b:e3:3b:df:
13:0a:c7:45:ad:b9:63:36:4a:32:bc:de:43:27:5e:8f:4a:6c:
ce:1b:c2:09:2d:f0:3a:e7:b9:db:1e:cc:39:1b:08:e5:ea:e4:
2a:43:1f:b8:48:de:84:eb:d3:78:c2:d0:98:c2:25:e5:21:97:
25:d3:b9:1c:e5:42:8a:99:c3:19:d4:00:7d:60:6d:35:19:d5:
5d:ed:14:1f:e2:d7:1f:a3:de:75:87:80:81:3d:dd:45:5a:6a:
39:37:49:2c:7a:56:99:55:12:b5:f8:04:3b:56:cc:66:4d:ab:
d2:89:51:f0:fa:04:3a:b2:c8:5c:69:19:6e:53:1f:26:75:98:
17:d0:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:26:23 2025 by rpki-client