Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: VQs0VEYoMe1B09aF7OyYSDPFUyO6lya5eZ+If55QEbM=
Subject key identifier: 58:2B:A6:75:60:C0:72:CF:63:62:C1:19:9D:CD:DB:6D:4E:43:25:64
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 0198499C205FFBD235A2EBDB4DBFE5092411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 08E0
Signing time: Sun 27 Jul 2025 02:00:24 +0000
Manifest this update: Sun 27 Jul 2025 02:00:24 +0000
Manifest next update: Mon 28 Jul 2025 02:00:24 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: Fe45qBcavxDKd2/NiOVpIzVslFwQCgz2GynWtm67bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:20:5f:fb:d2:35:a2:eb:db:4d:bf:e5:09:24:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Jul 27 02:00:24 2025 GMT
Not After : Jul 28 02:00:24 2025 GMT
Subject: CN=582ba67560c072cf6362c1199dcddb6d4e432564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:f3:d7:0d:29:0a:ae:08:f1:c8:d9:a0:52:
39:b4:6d:0f:88:66:d6:44:28:61:f0:fc:a6:96:0a:
51:76:be:e1:14:55:57:c3:89:a6:bf:4a:5a:c2:fd:
6a:90:58:5f:dc:05:bb:1d:6b:d7:27:ea:d7:a7:95:
36:e2:2c:6a:7f:cb:b3:38:49:ca:45:8e:57:10:c3:
30:b2:4e:ad:12:66:bf:f8:60:de:7c:59:50:d7:00:
ef:3c:05:29:51:a6:17:a8:b2:04:41:26:83:59:53:
56:76:fa:0c:96:83:ae:f4:e9:6f:fd:9d:01:0a:36:
4d:2e:f1:7f:81:37:9a:c2:b3:d6:46:a5:99:c5:64:
4c:94:20:3b:35:41:80:a0:85:21:99:6e:be:95:28:
ff:b3:3c:ae:30:af:d4:2d:a3:5c:55:76:8e:ca:0f:
5b:c2:16:d1:56:69:a8:36:a3:00:e5:ce:12:b9:71:
db:4d:ab:2e:6d:50:8e:9e:19:66:e3:66:d8:21:cc:
ca:b0:e6:ab:ec:4c:09:df:09:90:ed:9c:62:67:42:
dc:61:59:3a:1b:a9:a1:a8:f3:f7:78:a6:80:65:a2:
e2:00:3f:04:c9:fc:1c:1c:70:88:4e:06:df:2b:e3:
0e:4c:ac:de:2d:0d:56:72:41:d0:c4:e6:c6:23:32:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:A6:75:60:C0:72:CF:63:62:C1:19:9D:CD:DB:6D:4E:43:25:64
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:42:28:90:17:54:17:07:15:d5:78:e8:bb:5c:36:e1:21:c1:
76:b1:8a:c8:e2:9a:22:51:d9:9f:9b:e1:9b:c5:44:0b:12:62:
8b:55:83:4c:64:c0:a0:91:40:be:ec:88:ab:30:74:c2:88:45:
29:f6:1a:7d:0f:eb:01:ad:1b:8c:93:a1:9f:f6:75:d5:8f:32:
1a:fc:82:85:1f:93:06:58:81:1c:63:c6:2d:29:10:cf:75:28:
7c:85:05:b5:1f:b4:db:34:b8:cc:6e:67:df:1a:c4:ec:6a:22:
b0:13:59:67:0a:a9:90:be:09:d7:60:cb:0a:7c:ba:cb:f9:2a:
12:dd:58:c3:d0:70:b9:ef:d3:09:e1:1d:cd:3e:8b:87:50:f6:
f6:65:90:2c:15:7e:a6:04:b3:06:53:ec:59:91:ae:9c:c4:8a:
f7:4b:4e:7c:31:ca:a4:80:71:65:11:7f:ba:29:d4:80:3a:b1:
fd:16:cb:0e:42:8e:d4:51:73:f8:b0:5b:6b:34:9d:5c:21:86:
d7:c1:98:31:e6:7f:5e:df:cf:4b:6d:3d:92:68:b8:51:ac:b2:
e7:8d:bd:7c:d3:b7:d2:6e:71:85:13:41:14:fb:e5:10:13:21:
64:30:af:43:70:da:88:03:02:69:30:fe:60:4d:0c:bf:6d:15:
d3:9d:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:53 2025 by rpki-client