Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: TRYpqq/oEDvJjNsLk071DQC05mkD2cJeBVkgm+fUAQQ=
Subject key identifier: 05:D0:D4:97:13:0A:E8:04:0C:10:7A:AA:43:01:09:ED:F7:86:5C:5B
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 0198481B922210F605A3DC5B499BAB9AAFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 19:00:23 +0000
Manifest this update: Sat 26 Jul 2025 19:00:23 +0000
Manifest next update: Sun 27 Jul 2025 19:00:23 +0000
Files and hashes: 1: UvHXXFoVL7W8kRf_CmjRtC48uH4.roa (hash: E8q/i3b6Anio6852XqG98vgAFVWa9Xn560kQh/u0aSY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: GsgDjqPSsTZUaNBEUb19V8Gbg77O3SNi0Ohg+s7yerc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:92:22:10:f6:05:a3:dc:5b:49:9b:ab:9a:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Jul 26 19:00:23 2025 GMT
Not After : Jul 27 19:00:23 2025 GMT
Subject: CN=05d0d497130ae8040c107aaa430109edf7865c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:8c:3b:29:fd:33:23:52:a3:47:b3:2b:d8:
59:19:25:49:74:20:1e:15:68:ac:cc:f9:c9:ab:e9:
df:f1:26:5b:72:54:36:f0:f6:3c:00:14:52:8b:71:
67:3b:b7:5d:03:ff:63:cf:98:44:78:90:13:5a:16:
e4:92:11:a6:88:10:57:cb:9a:8f:19:81:d5:9d:1c:
1b:fa:d1:f5:43:e9:35:b5:2c:b2:2e:5e:ff:c9:a9:
27:c5:33:fb:c3:2d:9a:1d:dc:2f:23:da:53:60:74:
31:33:5d:b9:0b:42:65:9f:40:2e:ee:86:80:d2:70:
e9:fe:91:80:0d:a0:54:ee:92:84:43:31:95:b7:e2:
05:0f:02:97:6c:ce:53:d9:de:fb:d7:75:ba:c9:d1:
04:6e:8d:89:bb:5f:f6:74:64:38:fd:37:c5:2e:16:
eb:7a:59:34:14:7f:ed:88:91:1f:cb:4f:fd:c0:bc:
9e:67:e1:c9:6f:c7:c3:e8:d9:08:ad:cf:53:29:e2:
45:15:ad:b2:2e:88:19:8d:6a:84:8f:6a:bf:d5:9a:
89:3b:8d:41:a4:e7:12:4e:50:9a:c6:1a:66:10:89:
a2:f1:04:ef:0f:e0:4e:8a:37:96:1c:c2:3c:cc:8a:
1a:79:61:57:07:f2:07:a0:fe:1d:9c:63:19:2e:39:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D0:D4:97:13:0A:E8:04:0C:10:7A:AA:43:01:09:ED:F7:86:5C:5B
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:46:f2:72:5e:e2:f8:7d:4d:79:cf:d9:a4:f7:d2:7a:9b:
92:bd:fc:74:8d:1b:5b:fe:61:92:7f:22:aa:1f:0e:6d:8a:3d:
d6:09:06:2e:b5:08:3a:d8:32:ed:63:94:5f:01:97:8a:e7:aa:
ed:f6:d9:19:07:23:dc:4e:06:9a:c9:29:e8:7e:0c:05:10:f8:
bd:53:e8:46:cb:91:34:2e:01:d3:5f:76:c6:df:8e:0b:5b:a9:
9d:b7:11:61:86:c1:92:74:f9:79:c9:35:1e:23:50:25:0a:fc:
38:1b:4f:a9:eb:69:a1:9d:56:bf:6a:96:c8:f7:f9:68:b6:4f:
f4:ae:a6:c6:a6:4c:b6:fe:af:93:34:9d:f1:76:e0:94:89:f5:
30:91:76:28:c9:27:06:5e:53:e4:43:9b:b2:77:46:58:ea:d5:
a5:fd:5a:13:43:f3:00:b8:09:19:a6:6a:b2:d6:b5:e1:5d:c8:
77:d4:f0:b3:58:14:d7:e3:45:04:d8:25:13:0b:ce:00:f6:b5:
fe:eb:3b:a0:09:af:26:c4:a8:0b:de:12:25:d3:48:60:1b:51:
61:66:45:e1:92:cd:3c:81:25:ff:b7:1f:dd:01:5d:8a:b7:ab:
f1:e9:7d:ba:35:4d:92:1f:fc:cd:dc:95:e5:8a:a2:6e:e3:6a:
c6:1c:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:58 2025 by rpki-client