Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: x44Nrlc29uw1bZKgdp4+pf7UAbE30DaCU0x8EWzqzm4=
Subject key identifier: 15:3E:5A:79:B7:C0:03:A2:33:71:20:9E:F4:D8:11:C4:23:FB:63:51
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 019844AC9E9191C8BDFD6757F3205C7F0836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 0452
Signing time: Sat 26 Jul 2025 03:00:20 +0000
Manifest this update: Sat 26 Jul 2025 03:00:20 +0000
Manifest next update: Sun 27 Jul 2025 03:00:20 +0000
Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: YVlcksr2koLpsl4ZkNZal5KbEk6HUrmfVna9xAsvB9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:9e:91:91:c8:bd:fd:67:57:f3:20:5c:7f:08:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: Jul 26 03:00:20 2025 GMT
Not After : Jul 27 03:00:20 2025 GMT
Subject: CN=153e5a79b7c003a23371209ef4d811c423fb6351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:8e:d1:2d:6b:4a:c3:87:29:bc:1f:3b:77:
cc:36:f7:41:c1:fa:86:76:a6:84:ec:3f:e6:76:2a:
f8:39:0c:d8:02:12:c2:96:4d:c6:0d:fb:84:e7:f3:
61:7f:af:3c:2d:15:e7:23:26:a7:69:70:fc:9e:63:
90:d2:86:57:e4:97:41:fd:ef:05:29:07:34:a7:95:
29:c0:08:ed:66:27:43:69:1d:a6:07:29:fe:12:e3:
3f:a8:6e:83:9b:d4:c8:9b:ca:7b:0c:3f:02:af:bd:
10:1d:36:46:53:59:50:f4:b7:7c:44:df:25:b0:2d:
18:ca:67:21:fd:98:6d:03:c7:84:d2:c2:a3:5f:c4:
75:62:e4:db:7f:4e:70:85:2c:74:23:9f:3a:4e:bc:
a5:1a:f2:e8:ae:ad:56:22:8d:43:0b:aa:1a:ec:25:
d3:1a:c5:12:34:5c:ff:93:bd:04:57:a6:5c:dd:67:
9f:77:43:09:8b:13:24:50:d7:ba:c4:0e:65:78:70:
be:48:13:09:c3:ec:a1:89:eb:06:59:b8:14:7e:89:
02:b7:d7:39:ea:59:a5:ce:30:f5:90:ba:f4:b1:4b:
76:d8:ef:5d:1e:ed:a0:6a:e3:85:3f:51:7a:0d:5f:
69:f3:ea:31:3a:05:81:f2:97:ea:2e:9f:06:57:bb:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3E:5A:79:B7:C0:03:A2:33:71:20:9E:F4:D8:11:C4:23:FB:63:51
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:70:80:53:06:73:e7:ea:a8:f5:23:eb:37:bf:17:e9:ba:0a:
79:97:56:f8:1b:82:33:f8:30:50:9f:c6:7d:59:a2:50:ec:e7:
f0:f2:60:43:b5:0f:0d:1c:23:7e:d2:dc:16:76:21:91:1b:75:
e4:aa:ff:b5:de:16:bd:19:8c:9d:6e:e0:5e:06:aa:06:15:a0:
b5:61:9d:d0:73:85:18:a6:54:f2:ef:d1:0a:73:f2:db:48:9f:
8a:d2:4b:09:9b:4e:b0:0d:54:b5:6d:bd:45:7d:72:df:17:76:
52:08:70:7d:60:cd:f1:45:a7:b4:6c:b9:9c:0a:51:65:bd:75:
fa:fe:a8:ad:2a:cb:4d:9c:54:a5:d1:cf:21:90:85:9e:e8:46:
55:96:ab:f5:a7:5a:c5:1c:f7:fa:5e:2b:44:79:01:a7:3b:23:
47:59:de:f8:ec:be:e1:fa:03:6e:f8:bc:92:7f:83:18:7c:a2:
19:bb:3c:e2:ee:1c:82:cc:c1:27:ad:25:de:5f:34:8c:ef:d7:
5c:eb:ec:44:98:8b:a1:ad:24:a9:d2:07:b2:63:d3:03:81:e9:
29:16:2d:ea:d9:83:57:4a:04:bd:5c:ad:2a:fd:60:45:3c:88:
2f:8a:21:4a:8e:3f:ca:0c:44:88:7e:8d:94:5f:5a:4b:93:18:
08:2b:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:32:12 2025 by rpki-client