Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: oTybwGnETCIx9HZai9NSomTrhvXRoVBBS6erK9+fhOw=
Subject key identifier: 27:5F:EF:0A:E6:1E:03:60:02:FA:52:58:41:3D:43:CA:E8:D1:A3:CA
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 019848F7172E21EDB204E401062BD1865AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 03E3
Signing time: Sat 26 Jul 2025 23:00:09 +0000
Manifest this update: Sat 26 Jul 2025 23:00:09 +0000
Manifest next update: Sun 27 Jul 2025 23:00:09 +0000
Files and hashes: 1: OpWpWHElMT6Em0cb46EU4-eZHBM.roa (hash: UkmgnvSBtnTTqSpYqYCCjTjePdoSg2sK2f+rfkHw/HY=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: gbyfwpYM1Gw6dD31CsXBnPetg1ovh4AhXt6IBslkrXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:17:2e:21:ed:b2:04:e4:01:06:2b:d1:86:5a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Jul 26 23:00:09 2025 GMT
Not After : Jul 27 23:00:09 2025 GMT
Subject: CN=275fef0ae61e036002fa5258413d43cae8d1a3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:ee:04:ea:af:57:b0:07:be:b0:75:32:bc:
86:b2:df:43:c8:68:3f:00:81:01:1d:d5:95:6f:ac:
d9:da:b1:bd:f3:67:a8:40:c3:ee:94:8a:95:4f:3d:
e3:42:a2:b1:cb:af:d4:ac:14:16:f4:53:de:be:d6:
58:bd:29:42:9d:4e:ef:fb:27:60:8b:58:5a:0a:08:
d9:8f:cb:bb:13:7e:90:83:6d:72:07:5f:3f:99:ff:
21:70:90:b9:e3:9e:55:b6:34:60:15:aa:ed:b7:61:
f0:f1:0e:7c:e9:b9:f5:d1:43:9f:bb:9d:52:9f:cc:
00:71:89:68:f6:ff:b1:b8:18:46:06:e7:80:93:92:
0e:c2:f0:38:6a:6e:8e:08:f8:00:5b:16:fe:51:ac:
d5:44:24:b9:42:7f:2e:32:3f:a2:12:be:04:96:60:
71:20:05:89:7d:7a:c3:66:20:d1:34:14:cb:46:a9:
e4:71:cb:c2:41:76:0c:a4:13:68:e9:10:38:d0:e3:
c0:e7:58:b1:c7:d9:ef:fe:bf:8f:4e:24:15:62:64:
1f:f1:e1:7c:c2:9c:2f:6b:ae:04:53:e8:53:1e:6c:
7f:81:86:b9:cb:7f:ff:ab:d8:0e:42:c9:19:40:d6:
8c:bf:d6:f2:95:6a:db:dc:c7:ff:24:cf:94:4e:6f:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:EF:0A:E6:1E:03:60:02:FA:52:58:41:3D:43:CA:E8:D1:A3:CA
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:aa:37:f9:da:04:75:ed:b9:84:f8:a9:9f:dd:a4:6c:9b:0d:
1a:40:c5:37:cb:4d:93:95:29:48:7b:dd:54:92:70:7e:71:0c:
a9:c1:3f:05:b8:f0:3b:a5:80:21:c1:a6:4c:be:e3:42:ce:36:
60:17:a2:a1:dc:7a:ba:44:21:d9:c8:52:72:6e:fa:79:96:31:
a3:01:39:7e:b0:b9:3a:d8:35:3e:21:ee:fe:92:78:7f:d5:d9:
54:2d:c9:00:a0:cf:e4:16:a9:4a:63:1f:ef:36:c7:fd:f4:19:
37:96:9c:29:be:50:e0:70:d7:7c:2c:9e:2b:87:f5:58:12:5b:
36:47:dc:2f:ca:59:9e:13:7b:2d:78:b1:3c:99:91:7f:88:d9:
1a:66:4e:40:67:90:71:c7:62:57:b8:5f:46:27:f9:15:b8:cf:
23:6d:af:ae:8c:f6:73:8d:fa:0b:29:4d:b9:81:99:6c:9b:34:
61:3c:15:06:f2:a3:77:bd:86:c5:44:35:f3:ad:1e:46:9d:9c:
e4:da:4e:92:29:4a:f5:c5:fb:35:3a:63:3f:1d:bb:dc:48:48:
c7:65:a0:1d:b3:80:f0:2d:14:1f:a8:69:86:45:1e:08:33:12:
52:51:cc:e1:54:c6:1b:0f:22:dd:00:8f:91:af:bf:1d:ff:59:
24:3e:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:46:54 2025 by rpki-client