Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: Wv12+NZS/CccCMQQMfXWboPxCnarGU7OyIwFkb07MC0=
Subject key identifier: EC:DE:B4:1A:74:B5:F3:94:2D:B1:C7:84:61:7F:CC:53:86:DA:C2:40
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 01983615F5705E6C6F6C4143FEACE878B8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 126A
Signing time: Wed 23 Jul 2025 07:01:05 +0000
Manifest this update: Wed 23 Jul 2025 07:01:05 +0000
Manifest next update: Thu 24 Jul 2025 07:01:05 +0000
Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=)
2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: QZG0ajwa2va9gmYXBB7F5m6PaOiYrJWQypcelHLZfH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:15:f5:70:5e:6c:6f:6c:41:43:fe:ac:e8:78:b8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Jul 23 07:01:05 2025 GMT
Not After : Jul 24 07:01:05 2025 GMT
Subject: CN=ecdeb41a74b5f3942db1c784617fcc5386dac240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:b2:5b:fe:36:ec:50:69:b4:70:59:04:e8:
ea:d3:34:75:07:12:4c:41:53:0b:49:29:e3:00:f0:
10:5c:78:33:3d:da:19:e0:c3:a5:0d:ea:52:d3:ef:
59:c0:41:fd:25:9f:de:80:1a:49:98:5e:07:bc:00:
5d:a6:2c:3e:5b:c6:56:f2:34:e6:7e:46:60:93:f6:
b0:d1:11:00:df:72:ef:98:54:97:68:ae:05:a7:66:
1b:3b:c1:b0:f9:f2:8b:91:c6:69:2f:c9:79:49:33:
77:ea:38:66:da:cd:30:d0:95:fc:44:a7:f7:cd:8d:
22:a6:21:ba:24:ff:df:e9:a7:40:b9:93:cb:91:52:
55:e8:4b:a9:b1:f3:5f:dc:d0:3c:1c:3e:d8:b4:65:
6e:8d:8d:c0:78:a5:45:0c:07:8d:1d:d9:cf:78:fa:
ef:2c:bc:9a:74:7b:db:75:41:04:58:84:27:c3:b1:
fd:79:53:ef:db:67:a6:e1:51:e8:fc:ae:50:b6:ba:
35:d3:06:8a:fa:c3:39:3c:45:8e:22:34:27:a6:8c:
ad:77:0a:eb:b6:97:b0:93:3b:c1:76:18:8f:c1:3d:
19:bc:6a:7a:c4:1f:ff:cc:f3:be:47:3c:b2:e4:ae:
53:6e:2c:c3:5c:28:b2:0d:48:26:c3:d2:35:43:1f:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DE:B4:1A:74:B5:F3:94:2D:B1:C7:84:61:7F:CC:53:86:DA:C2:40
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e4:a1:64:81:e2:4b:48:30:0f:e1:09:d9:8c:29:81:8e:45:
27:2a:c7:83:8e:27:1e:09:1e:cb:60:20:f5:f4:b8:5c:a6:cf:
cc:0c:f7:91:44:8f:85:0c:16:3c:5d:7d:4f:6f:e0:74:6b:2f:
6a:6d:e2:6f:f8:e1:d7:f2:44:2a:3e:57:2f:fa:10:9e:90:18:
76:ca:f7:aa:d5:52:62:a8:6d:5e:ff:bb:3a:eb:db:e5:92:56:
ee:fd:28:3d:96:ea:96:1f:23:9d:65:a6:e7:f4:84:91:65:ab:
bc:e9:40:87:89:79:b4:f1:6c:a3:4b:32:79:13:a4:99:50:59:
2d:35:bb:23:2e:ea:20:4c:2f:02:95:51:1e:ad:ae:a3:7d:76:
65:4e:ec:cd:0d:0c:a9:95:87:a9:5b:7b:43:03:77:70:ad:79:
1c:1f:bc:45:89:87:bb:87:29:f8:72:44:d4:01:e4:d5:e7:0a:
ad:b8:57:03:4f:ed:79:c7:f6:be:b4:9e:6c:b6:67:47:6a:23:
3e:57:29:b5:66:32:91:dc:6a:87:09:c7:e9:6d:2c:43:3c:74:
94:0c:ab:3b:1c:3e:0e:28:61:3c:51:22:00:b9:65:66:77:28:
d7:f5:e9:c0:e9:34:86:cd:82:e0:5d:dd:73:d5:50:be:9e:b3:
b2:b3:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:12:44 2025 by rpki-client