Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: ULDMuX7KV4lqWOfAILU86TIkNsGxOOf+EgozVAJShZ4=
Subject key identifier: B7:BE:D7:BD:63:CE:2F:A1:4B:61:07:32:B1:09:86:BF:D2:BD:ED:64
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019847ADE95447ECE02FEAD8045C312E4D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0C43
Signing time: Sat 26 Jul 2025 17:00:36 +0000
Manifest this update: Sat 26 Jul 2025 17:00:36 +0000
Manifest next update: Sun 27 Jul 2025 17:00:36 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: AlIBN/WL5syOTEiXnbF47Byj2esE9CmUR9N/Gv0ovx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:e9:54:47:ec:e0:2f:ea:d8:04:5c:31:2e:4d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Jul 26 17:00:36 2025 GMT
Not After : Jul 27 17:00:36 2025 GMT
Subject: CN=b7bed7bd63ce2fa14b610732b10986bfd2bded64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:45:08:70:98:10:b6:5a:c2:3e:a5:be:51:
d7:67:b2:69:27:86:5b:78:94:0f:db:e7:ce:d4:01:
eb:70:f2:da:e1:fe:66:9f:c2:a4:fb:83:1f:4c:41:
63:97:46:60:07:fd:f4:05:b3:77:dc:26:3a:11:3e:
73:6c:40:98:d0:60:19:a2:33:87:60:4a:8e:5e:8f:
d5:86:9f:5d:d0:91:12:30:7c:49:fd:6e:e1:a0:cd:
a7:75:63:21:eb:b3:96:76:ed:c8:5f:98:25:a9:87:
36:08:d1:3d:97:8b:62:88:ed:56:7c:8f:f9:ef:26:
b9:bc:4a:2f:1e:0b:24:30:c8:fc:0d:db:80:40:d4:
56:41:70:10:a9:59:ad:33:4f:b4:c8:75:ad:2e:0d:
36:ad:18:11:d1:ba:d0:ad:fa:1e:82:0e:8c:28:93:
f3:42:2c:de:04:ca:53:4c:01:d1:d0:27:68:6e:ea:
6b:34:fd:2a:89:9f:d4:7d:6d:eb:5b:89:b7:06:9b:
4a:58:4b:cd:15:ba:89:02:02:5a:b0:f2:dd:df:8d:
6f:41:63:43:05:79:b3:ae:32:ed:4b:d9:8e:35:73:
ea:ea:62:17:6c:1a:c5:3f:df:1f:eb:82:41:12:f9:
5d:5b:f5:12:4d:e0:89:91:51:05:9f:6f:94:b0:f9:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:D7:BD:63:CE:2F:A1:4B:61:07:32:B1:09:86:BF:D2:BD:ED:64
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:16:0a:6a:4b:a0:cb:57:2b:4e:83:9f:5c:62:3a:85:d0:ea:
e1:dd:3d:d3:b7:04:37:4b:65:3d:a4:f2:c5:fc:bb:39:0b:b4:
2d:b2:5a:2a:be:d3:01:05:5f:5c:4e:0a:f1:dc:5f:75:2d:8f:
de:ec:db:f1:83:5d:a2:bf:46:72:4c:69:f3:12:d7:95:4c:ee:
3d:b0:a4:56:fc:e7:96:5d:7a:f1:3f:a2:6f:91:0f:cc:ab:f5:
f7:cf:55:02:76:c6:88:9c:ae:98:37:85:0c:4d:3a:9c:f5:5b:
6f:3d:f0:71:3a:1e:cc:fd:04:b2:db:9f:62:df:21:03:d4:78:
dc:50:7a:7e:18:de:9b:bc:2d:c8:28:10:33:75:7e:35:be:62:
3c:78:92:61:9b:dd:65:0b:25:4b:b3:9a:39:02:24:b6:f7:da:
ac:1b:a6:33:34:58:56:df:a4:51:d7:be:6d:c5:6e:0f:26:4f:
fb:9e:ce:c4:8c:4f:eb:fb:14:0c:ea:e5:9d:a6:f7:94:36:6f:
ff:b7:74:f5:ca:40:c2:70:c3:ec:b5:60:f8:2c:ba:fb:c8:42:
c6:83:21:25:71:7a:8b:7e:55:c2:d7:4c:76:99:32:37:13:e5:
74:2a:d7:5c:a5:0a:e6:a9:63:fb:10:36:ec:68:f3:55:10:e1:
6b:8c:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:11 2025 by rpki-client