Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: Iy9epxKVy5bMnOAfv47/qO1D52VEmLczoPxTX0/qAY8=
Subject key identifier: 5B:FA:D9:92:85:76:C3:1B:73:CB:13:21:3D:A1:F2:ED:E7:21:9A:1B
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 01984A77C326D66FD65CDF9B0D95C3B5F877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 0541
Signing time: Sun 27 Jul 2025 06:00:19 +0000
Manifest this update: Sun 27 Jul 2025 06:00:19 +0000
Manifest next update: Mon 28 Jul 2025 06:00:19 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: sVXwwOEyQB1hMSjlZm1gC6kE5yRpruPbcd5sqUVmH0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c3:26:d6:6f:d6:5c:df:9b:0d:95:c3:b5:f8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Jul 27 06:00:19 2025 GMT
Not After : Jul 28 06:00:19 2025 GMT
Subject: CN=5bfad9928576c31b73cb13213da1f2ede7219a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:10:ec:0f:5e:c0:85:a0:1c:ad:4d:b6:c9:
f0:57:bc:ea:a6:be:f4:98:38:55:14:64:b8:b4:cc:
10:10:f2:ad:a5:1f:15:be:66:8f:07:3e:da:7e:f1:
de:7d:61:a7:07:5f:ff:ed:29:b0:41:14:ae:6b:3e:
ef:01:71:12:29:38:7d:a8:97:31:7e:59:da:0f:0d:
c2:97:49:c5:56:dc:a7:3d:fd:9d:f6:3b:3e:91:10:
9d:a7:21:67:c6:54:db:15:62:48:66:eb:f7:05:17:
e7:17:53:c3:a8:14:1a:17:63:96:8c:bf:47:22:ce:
51:75:5f:2e:c9:d0:88:38:39:b6:3d:89:a7:dd:19:
b6:62:64:52:03:b5:d0:0f:5d:9c:18:35:f7:5d:4a:
53:7a:c8:d6:2c:eb:9f:2b:85:7b:7b:38:bb:65:32:
1f:f0:30:78:3c:1f:1d:7a:ab:f6:47:1e:8a:cf:3b:
e4:9d:eb:89:3c:50:77:1a:66:33:85:eb:d2:f1:2e:
d0:34:02:58:69:e1:56:c9:e2:23:00:cd:05:b9:63:
d6:d2:5c:ed:85:ff:11:b1:a4:76:5b:41:4b:42:ef:
d6:fe:63:ce:25:32:a4:f9:b9:b9:31:10:10:1b:46:
c0:9c:51:f9:fa:b8:ef:25:02:44:ff:06:27:81:a8:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FA:D9:92:85:76:C3:1B:73:CB:13:21:3D:A1:F2:ED:E7:21:9A:1B
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8b:89:e8:3a:40:1a:e6:03:08:2f:e8:4e:22:85:13:cc:b2:
41:76:8d:93:cf:03:0a:a6:99:1a:f3:79:5d:a0:0f:5f:61:e8:
71:ad:4f:4e:82:ad:88:1b:b4:a3:31:47:51:cc:f6:5e:f2:b0:
2a:bb:0f:66:53:c9:5d:bb:2f:9d:07:54:1e:55:3a:6e:c3:bb:
2b:93:fe:9b:af:79:3d:44:c8:9e:21:0c:e4:5a:e7:0b:72:8a:
aa:53:c7:04:50:8d:85:af:8a:61:5a:60:df:c6:f5:d0:3e:49:
a2:0c:47:3a:f9:c9:02:2b:77:e1:72:68:53:07:59:6f:bc:27:
86:dc:54:4a:a6:52:86:34:52:ad:5a:44:d5:d6:16:6c:e9:08:
3b:8c:7a:90:52:5f:bc:52:4a:bd:4f:b7:19:63:d1:3b:6f:43:
a3:9f:d9:c8:eb:91:48:27:6d:8f:2a:3c:1b:21:85:be:a1:fa:
3d:e4:61:6f:91:7d:34:54:bd:79:d0:93:51:91:38:de:3d:09:
5d:6f:bc:38:d4:4f:e4:3f:c1:c9:6e:73:d1:e1:04:7c:35:75:
46:7f:5b:3e:46:1b:57:7f:04:04:bd:43:7a:71:e2:f7:25:3a:
2c:a9:2a:53:dc:eb:9a:4b:57:df:eb:f4:3c:eb:33:1b:db:c8:
63:0a:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:38 2025 by rpki-client