Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: YXE5AYZJoJ/8XNvU33Es5rO7JnoDVoZnSNwp7GFcUHE=
Subject key identifier: E2:1E:42:97:00:94:56:75:36:0E:EB:0A:F4:9A:22:F9:AF:F4:05:AA
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019849669BBB53F99EE56DCCA9E263735B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 01:01:57 +0000
Manifest this update: Sun 27 Jul 2025 01:01:57 +0000
Manifest next update: Mon 28 Jul 2025 01:01:57 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: sU2IUVD2PG+JQI/AIT6Pt+QuVlrFJ8/WWDfQDiuP5qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9b:bb:53:f9:9e:e5:6d:cc:a9:e2:63:73:5b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jul 27 01:01:57 2025 GMT
Not After : Jul 28 01:01:57 2025 GMT
Subject: CN=e21e429700945675360eeb0af49a22f9aff405aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:c1:2d:bb:13:34:b3:cf:ac:46:dd:d6:5a:
2d:0a:45:be:bd:7c:35:64:78:f4:b9:4d:45:05:0e:
47:02:ee:6c:52:a3:db:d4:2d:75:d5:fb:34:ba:f2:
ed:31:c7:03:99:bd:09:40:42:21:c4:dc:5c:4a:6c:
39:13:79:f6:16:a6:7f:28:f2:27:dc:ac:c6:e1:89:
5b:49:82:3b:04:06:6f:81:40:4e:af:a3:ec:99:b2:
a9:aa:06:1e:9b:f9:4e:90:a5:92:c6:bd:59:d2:83:
19:fa:81:59:d6:4d:ad:de:ee:2f:94:66:e7:df:a8:
fc:3f:7b:34:a8:ed:5b:eb:b0:81:da:17:c2:0b:aa:
64:f7:df:6a:c1:aa:3e:66:7b:af:d8:46:dd:30:fb:
2c:f2:f5:2e:43:0e:5c:b4:ae:92:64:90:3a:e5:17:
0c:4a:0f:f2:a0:51:09:c4:0e:29:07:9e:90:18:93:
19:46:db:89:09:70:0d:fd:53:6d:94:9d:c6:b6:07:
b4:4a:93:79:1a:70:3f:1e:c3:ed:21:e2:1d:78:eb:
59:bf:9e:14:3a:bf:ae:60:e2:d7:57:1b:40:27:50:
ef:57:bd:cb:b0:f6:b2:00:fc:65:cf:03:82:0a:43:
72:14:66:3d:b6:42:52:b1:28:0e:6e:c5:da:08:9a:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1E:42:97:00:94:56:75:36:0E:EB:0A:F4:9A:22:F9:AF:F4:05:AA
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bf:25:73:dd:a7:48:a1:70:df:9e:9c:d1:96:9a:ea:fe:f1:
f8:c3:85:06:ba:c7:5e:01:7b:63:84:ec:f8:6e:b4:73:e9:91:
8a:b3:11:a7:b4:c2:ac:da:aa:3b:72:2d:43:7d:53:8c:e6:2a:
ca:d9:1f:e9:b0:aa:cf:90:f3:ad:92:70:5a:b7:35:ac:30:00:
d9:b0:65:0b:d1:dd:83:52:0e:79:ed:bb:2d:b2:d6:06:94:68:
48:09:73:3f:0a:df:b4:b5:52:99:c8:8d:f1:e6:0a:a4:b9:0c:
0b:80:8c:1c:3d:b5:31:a5:d3:e4:7e:6f:9e:ee:48:02:0b:b5:
da:9f:fa:ff:ed:48:42:6f:98:e0:f2:b1:99:0b:c5:3f:bd:e5:
69:71:84:a8:d9:d8:f5:fa:50:6b:3d:17:af:84:b6:c2:a8:da:
d9:46:2f:d1:e9:2b:60:03:d3:cf:8d:b9:34:b8:60:f1:2f:3f:
1a:3d:a3:60:2e:eb:06:b9:e4:0c:39:0a:f3:21:c3:28:78:a6:
53:c4:d5:cf:a6:0e:ea:77:24:9c:91:f5:46:5f:f3:35:78:36:
08:b5:aa:b6:2f:cf:b7:39:0b:20:17:d2:32:9b:c4:1e:03:64:
44:60:77:ae:6b:c2:56:f4:f6:fe:ca:23:e7:94:80:3a:bd:fa:
57:a0:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:37 2025 by rpki-client