Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: eNLP2TF2c9DWMo3SpU4Bn+sTvnhpbWCR9gTfdwodQzg=
Subject key identifier: 76:CF:FB:15:94:C3:71:59:6D:B3:54:6B:E4:B0:36:65:53:68:A1:12
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 01984A77B9E0710AADE7BC3C5BF25D29701E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0FA1
Signing time: Sun 27 Jul 2025 06:00:16 +0000
Manifest this update: Sun 27 Jul 2025 06:00:16 +0000
Manifest next update: Mon 28 Jul 2025 06:00:16 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: sMR84aQaF5/miCCnkSzwhdIh+4BMF0H2vJ+GIjEz0bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:b9:e0:71:0a:ad:e7:bc:3c:5b:f2:5d:29:70:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jul 27 06:00:16 2025 GMT
Not After : Jul 28 06:00:16 2025 GMT
Subject: CN=76cffb1594c371596db3546be4b036655368a112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:83:4e:47:31:1b:8b:35:2c:b7:41:89:85:
c5:e2:9e:d5:ca:bf:77:ec:8d:bf:03:a7:98:c4:d7:
91:03:34:91:8e:97:cb:ff:f2:e5:5d:4c:5a:33:a5:
3c:17:29:e1:a6:f9:f0:d1:3a:3e:a9:6d:93:85:6f:
5c:1e:40:5e:05:ad:ed:14:9d:67:ec:b6:b4:7c:de:
4a:b7:15:f8:81:e6:be:25:4d:17:4c:2d:ab:3b:2e:
09:c1:35:a9:af:53:12:72:27:2a:e9:51:7d:4d:51:
6f:2d:b7:79:b0:41:c0:53:15:97:b8:60:c5:4a:b1:
98:bb:3d:e4:93:1d:cd:d6:45:19:e4:d1:f9:8b:5b:
16:16:64:53:6b:04:a4:82:b5:31:ee:ad:b9:76:c1:
fc:ef:3b:6b:9c:94:77:da:d1:26:16:af:b4:ed:b7:
af:ad:60:0b:2a:13:8f:d5:ab:cd:d9:b0:29:f1:9a:
07:5a:08:bf:02:1c:16:a6:c2:af:59:77:34:1e:63:
c4:98:0e:da:bd:b7:17:c9:1b:3b:33:74:bd:b2:28:
2e:bc:d9:88:bd:12:e5:b4:9b:cf:21:e2:23:c3:1b:
9f:80:0a:33:c6:d1:c3:aa:47:d3:ba:93:d9:63:fe:
dd:62:00:2a:bd:c7:29:46:56:0e:b1:94:e9:44:e7:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CF:FB:15:94:C3:71:59:6D:B3:54:6B:E4:B0:36:65:53:68:A1:12
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:90:ef:f9:4d:18:cb:1b:b3:16:5e:40:43:73:d9:f5:fa:a5:
82:b4:f8:5f:d3:a8:89:d3:1a:77:cc:ec:f5:a5:8b:1a:de:04:
6a:8e:ca:b2:1e:e8:ed:64:e0:43:c2:97:a7:be:76:bf:17:b7:
94:b5:b9:7c:aa:9a:23:92:65:b3:b6:66:21:d1:20:e4:b2:f7:
fb:73:91:54:85:15:8e:60:96:98:82:7c:90:f6:bf:a9:56:1c:
59:fa:79:2a:cc:90:3b:fc:c6:11:fd:5c:62:e3:66:82:6e:49:
21:3f:a0:ac:2f:67:dd:c9:ec:35:89:0a:15:ab:78:a4:2e:65:
e1:87:09:da:a6:89:84:8d:38:f0:fc:b4:09:a6:43:ae:03:78:
a1:8d:a7:dd:2e:66:86:81:8c:c2:28:8a:c8:be:eb:fc:88:60:
ee:a2:48:2f:5b:60:66:f5:6a:4a:d4:62:d9:7e:20:d7:8f:10:
32:e7:bf:e1:bc:8c:65:de:dd:05:2a:87:27:3a:b0:2e:92:84:
72:4e:8f:e3:df:44:05:83:c2:d7:3d:b0:35:65:3d:88:ba:21:
3a:45:b2:e0:26:4e:2b:50:e0:50:42:16:3c:87:69:59:4e:7f:
fa:3f:9f:e2:71:c7:b9:58:e0:7d:13:d1:e7:db:a4:58:33:78:
a0:73:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:58 2025 by rpki-client