Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: dq5QhMbdOYHPH9fY1VZaav+Y9bpuaS+Efwsp2l5dEBI=
Subject key identifier: 67:6D:05:34:DF:A0:3C:A1:68:4F:2F:43:EE:EA:2C:B1:0F:F4:06:D2
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 01984C65F6F759EEF29D19FEB37C86E18415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 05A5
Signing time: Sun 27 Jul 2025 15:00:07 +0000
Manifest this update: Sun 27 Jul 2025 15:00:07 +0000
Manifest next update: Mon 28 Jul 2025 15:00:07 +0000
Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: JirjS4OWlMKeL2nQiEYn6CFPeXmkHaD9Vj5bbqMn5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:65:f6:f7:59:ee:f2:9d:19:fe:b3:7c:86:e1:84:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Jul 27 15:00:07 2025 GMT
Not After : Jul 28 15:00:07 2025 GMT
Subject: CN=676d0534dfa03ca1684f2f43eeea2cb10ff406d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:a4:88:de:2e:48:4a:ea:25:54:14:9f:3d:
9b:41:e3:54:b2:88:8e:5f:2f:a6:2c:24:17:d2:e1:
52:ad:86:08:95:b1:c2:f7:45:c2:fd:54:4d:89:7a:
84:b5:6a:f6:c3:b1:be:01:69:8b:b1:47:89:4f:5d:
76:a5:f1:ff:a1:ad:e9:c6:a7:20:a4:b8:40:8b:5d:
0d:b6:86:18:32:2d:73:5e:05:ce:a0:31:1c:8f:50:
ec:c8:9c:2a:19:0e:50:66:37:2f:d4:17:fa:33:6a:
65:9b:7d:0a:86:a5:40:99:22:1e:ab:18:ea:11:a6:
84:fb:f0:ca:af:21:2d:8f:93:71:39:6a:23:7d:18:
2c:1a:88:e0:06:04:41:61:9d:9c:db:cc:e2:4c:7f:
e6:e1:d6:fc:13:c8:b9:dd:d4:fd:1e:58:76:70:a1:
1c:38:79:61:ae:ef:d3:b0:eb:73:82:a6:a2:3a:b3:
fa:39:d1:50:7a:d3:94:05:c2:44:f7:6d:19:d6:30:
e5:0a:db:a5:3f:c1:82:64:38:34:48:7f:0f:5d:1a:
b1:64:95:64:9e:3f:d8:5d:73:2b:82:9f:74:d5:a2:
44:77:69:0f:60:8e:7b:e4:d1:4e:b1:8e:cc:15:5f:
79:dd:3e:c1:e0:0b:50:12:bc:90:d1:fd:62:de:4f:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:05:34:DF:A0:3C:A1:68:4F:2F:43:EE:EA:2C:B1:0F:F4:06:D2
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ab:3f:23:d2:10:6d:3e:cc:dd:a3:a1:a7:b7:c9:04:c4:e9:
55:15:64:e2:bc:c1:61:08:f4:f4:e6:fe:a3:aa:62:7d:c1:bd:
6d:a1:20:bf:7e:4b:8b:5a:73:2b:70:f2:5f:5b:21:4f:94:51:
91:6e:42:dd:d3:17:ac:79:6f:05:1a:71:31:b6:43:b0:af:78:
1a:ce:d8:35:14:37:65:3d:33:5c:6f:89:6a:1e:c3:4a:1c:67:
01:5c:79:df:65:38:49:e6:f7:ec:53:87:93:1f:14:5f:fc:63:
2e:a1:94:db:e5:55:8b:1b:de:c6:32:1e:39:ce:57:46:f7:22:
08:73:bd:1e:c4:92:17:d0:a2:eb:ba:0f:80:6a:0b:cd:1f:b3:
05:40:00:13:e7:b5:69:9d:61:15:2d:cd:f7:70:de:cd:6e:b6:
2a:58:86:7b:cb:a6:3b:2d:0c:12:d7:b0:04:62:a7:6f:0d:92:
8c:e6:94:e4:91:43:9a:2c:34:c9:49:1b:9b:9c:e6:92:06:e5:
9c:e1:c2:ad:50:b6:0f:62:e3:99:f6:42:ce:15:23:b0:0d:07:
62:aa:5f:0f:57:1c:e8:87:4c:d6:4b:6c:0d:3a:04:f9:a5:b3:
b4:a6:54:60:74:e9:bc:c9:a2:2d:fe:e2:15:06:fb:69:30:54:
a2:0c:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:16:53 2025 by rpki-client