Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: 8K416b66+t3p1wGRs+aBFVSwsPd2CUyDuvVjubzA2Fs=
Subject key identifier: FF:46:B3:28:FF:E9:90:03:D7:3A:F5:A8:36:5E:0A:1C:52:91:05:4F
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 0198451A51A24418C2A5EBE393F32F3C6FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 1344
Signing time: Sat 26 Jul 2025 05:00:09 +0000
Manifest this update: Sat 26 Jul 2025 05:00:09 +0000
Manifest next update: Sun 27 Jul 2025 05:00:09 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: jw5ytrktiuE05meJ/jRI7bWDP1Le9AcIYy6ib2R1LDU=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:51:a2:44:18:c2:a5:eb:e3:93:f3:2f:3c:6f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Jul 26 05:00:09 2025 GMT
Not After : Jul 27 05:00:09 2025 GMT
Subject: CN=ff46b328ffe99003d73af5a8365e0a1c5291054f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:ef:53:7b:06:9e:0d:7e:c5:58:e8:b4:cf:
8c:8e:d6:96:b3:d4:77:2e:4a:db:2d:78:8b:7c:c1:
9d:73:d5:6b:85:34:83:45:40:1c:77:50:18:4e:f0:
eb:8d:fc:59:fd:96:3a:77:2b:a6:4d:1e:46:1e:d8:
da:db:de:40:49:e1:c0:cf:68:86:15:20:0b:4d:b1:
47:06:1e:a0:0a:10:56:7e:74:7a:eb:33:b6:7a:74:
4e:ec:6b:fc:6a:f8:29:fe:a7:6b:9f:1c:aa:5c:76:
fe:83:f1:a2:c2:cc:bf:b1:54:19:03:61:49:e6:03:
cc:9f:b2:80:57:27:32:a1:e1:7c:29:a4:9d:c8:44:
8c:2c:60:65:a9:5a:f5:67:54:c0:6b:9f:74:33:9c:
a4:87:0b:b2:9a:8b:02:f9:c0:50:ef:d8:ee:13:62:
2e:80:f8:b8:0e:f3:6e:43:84:18:bf:3b:2f:88:89:
96:4b:ba:be:cc:fd:96:ef:17:94:91:ba:32:d6:87:
1f:b4:46:b1:ad:6e:97:35:d4:21:68:5b:15:7e:e4:
a8:19:4b:96:d7:13:3b:05:2d:0c:b0:f6:28:17:d0:
d9:c9:34:31:cb:fc:8c:42:dc:79:38:ad:17:f7:29:
1c:9b:c8:92:0e:c7:ce:bc:3b:59:09:5a:9e:4b:9a:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:46:B3:28:FF:E9:90:03:D7:3A:F5:A8:36:5E:0A:1C:52:91:05:4F
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:0b:bf:39:a0:00:c6:8d:8a:40:48:fa:9e:1d:8f:0e:f5:9a:
4c:fc:93:38:81:d9:b8:95:2a:ad:f7:d9:06:97:4a:20:2b:3c:
a7:e3:0c:03:e3:f5:db:23:be:1e:01:85:0b:04:5f:a9:25:ac:
45:47:d1:29:b1:9a:e9:04:82:48:49:7f:4a:97:a9:88:b9:79:
87:cc:f9:1c:c4:1c:a3:9f:cb:18:95:a1:92:db:f7:35:49:1a:
40:d3:5b:72:9b:80:5d:47:b4:2d:1a:d2:e6:36:36:73:ec:7b:
11:d7:a4:95:be:75:34:e0:77:f8:76:76:8c:f8:de:71:05:29:
1c:6c:3b:89:70:30:51:af:b4:97:ff:69:53:52:23:ff:b7:18:
5d:02:6b:e5:42:0c:62:8c:c6:fe:18:81:c5:81:d1:c9:ff:49:
a1:d6:11:3f:bf:7a:1d:86:4d:60:1f:ce:ba:19:d7:06:16:db:
17:d7:41:20:2e:61:96:af:89:f6:14:91:38:2d:98:88:e2:ff:
15:f0:03:d1:1e:0e:40:57:6c:ef:4b:9e:5a:04:f7:f8:c9:38:
32:38:d1:43:ef:12:de:73:ae:a3:83:35:53:75:83:43:5f:8b:
4e:9b:68:17:e4:97:85:44:d3:01:17:05:3f:57:ab:87:45:9c:
46:4a:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:03 2025 by rpki-client