Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: Cij2CeThXls86oc6U7mcmJA67XZPlWTGOztF2jgBCg4=
Subject key identifier: C5:A2:51:D6:71:1C:A9:28:89:74:BE:50:C9:3F:03:A3:06:01:8D:87
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 01984A0A4122C2B3EB14CEDFDB5D7BE2CF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 056B
Signing time: Sun 27 Jul 2025 04:00:42 +0000
Manifest this update: Sun 27 Jul 2025 04:00:42 +0000
Manifest next update: Mon 28 Jul 2025 04:00:42 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: 3yZ+5DeydTICowJxN4S+Q6MtCxXtk1c5nHQA2rKCHdc=)
2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:41:22:c2:b3:eb:14:ce:df:db:5d:7b:e2:cf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Jul 27 04:00:42 2025 GMT
Not After : Jul 28 04:00:42 2025 GMT
Subject: CN=c5a251d6711ca9288974be50c93f03a306018d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:74:e9:b1:8a:bd:1b:6d:e2:01:14:42:d7:
cc:76:36:0e:68:72:89:6c:a0:e1:28:77:ff:f9:0c:
99:66:a7:b7:03:be:90:b3:44:c1:ae:12:73:13:fe:
13:4c:ce:26:3f:03:85:ec:09:b0:e5:d7:fa:f6:6e:
21:9d:93:86:24:11:19:89:4a:cd:c4:33:c8:5a:02:
cf:69:23:e1:39:de:1e:b9:51:5e:33:8b:31:11:bf:
c5:cc:1f:54:53:77:0b:18:eb:44:76:22:b5:d9:9c:
f6:7e:e5:ad:5a:a5:26:93:44:e7:3f:d2:f7:68:39:
c5:08:79:77:a5:3d:22:cc:ac:11:12:8f:fa:41:43:
e4:fd:21:46:9d:4b:77:c9:b0:e5:5b:d9:cd:be:8b:
e9:ed:04:65:d3:a8:4e:f6:7e:a7:8c:a1:0c:70:40:
06:cd:35:ed:a7:e8:83:68:76:82:7c:1c:f6:86:0a:
e1:ea:97:eb:91:71:39:7c:d1:27:bf:f7:b0:6d:07:
51:ba:b1:b3:f1:9a:d1:b4:d9:fe:37:c3:15:25:67:
cd:6d:66:67:d4:f2:c1:8c:83:c0:c7:c5:07:6e:af:
1a:76:c5:43:f0:bb:3e:72:26:29:9a:50:53:ac:f0:
1c:d1:e8:55:e3:35:18:5e:02:d1:b5:78:17:0d:02:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A2:51:D6:71:1C:A9:28:89:74:BE:50:C9:3F:03:A3:06:01:8D:87
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:07:d5:d0:87:c7:3b:0e:55:04:22:0d:be:e1:f2:9b:e6:6c:
cb:36:ff:28:1a:2b:3d:28:2e:2f:a3:20:df:18:de:3f:bf:bc:
9d:f3:b2:3c:e1:74:19:6c:fd:fa:9e:d4:95:a7:0a:c9:e8:be:
c8:6e:d1:36:a9:10:63:e9:ad:24:15:98:13:43:a0:e9:98:bd:
1c:fc:61:82:0d:4a:54:a9:a4:f3:70:3d:6a:09:5b:a3:99:44:
ab:58:c4:e0:b8:c1:b3:63:a8:f5:dc:6b:e4:03:70:19:ef:d7:
b7:c4:41:32:0d:a8:06:ea:37:5a:ba:aa:61:05:ff:0f:cf:05:
22:71:ca:7d:0a:f4:f6:0b:db:87:09:3a:24:e5:65:2c:9a:67:
57:3e:4d:72:f3:db:38:5d:84:16:eb:ea:ff:1a:67:c6:b3:30:
d6:f9:01:21:19:c8:12:54:07:4e:6e:e4:ed:59:d5:94:47:c1:
15:e0:86:70:33:06:7c:06:26:1b:d3:40:fa:35:6d:48:cc:6e:
8c:9a:88:f6:58:95:d2:ea:a2:6b:0d:76:3c:8a:4c:bc:5b:32:
57:b1:1f:ac:dd:83:c9:de:06:01:d2:22:a7:b5:e0:09:b7:b1:
6c:3f:1d:15:77:c0:50:e8:ad:f0:bb:df:f6:7a:10:ca:b7:92:
76:5c:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:11 2025 by rpki-client