Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: 0J6L403ih2QPIme5aYP5fyqSKRJoUegz7rH8Iqaiavk=
Subject key identifier: EE:78:50:59:45:7B:A8:85:B9:83:D4:B8:BD:32:CE:D9:68:9B:56:C5
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 01985BD9B0F48A3A48524FF95EB6E3365B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 130C
Signing time: Wed 30 Jul 2025 15:00:49 +0000
Manifest this update: Wed 30 Jul 2025 15:00:49 +0000
Manifest next update: Thu 31 Jul 2025 15:00:49 +0000
Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: t5yGLmmB4olFNgP/kOtzAmH8lRWLCCWAh0yJFcxkfnQ=)
2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:d9:b0:f4:8a:3a:48:52:4f:f9:5e:b6:e3:36:5b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Jul 30 15:00:49 2025 GMT
Not After : Jul 31 15:00:49 2025 GMT
Subject: CN=ee785059457ba885b983d4b8bd32ced9689b56c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:61:d9:c9:ac:13:69:c1:22:03:fe:0c:e2:
2f:02:18:f5:70:a4:6f:e5:75:ec:a4:ca:bd:e4:ce:
73:35:63:fb:b8:6a:f9:a1:ba:d1:65:52:dd:69:6d:
8d:ce:97:f8:d7:8b:cf:d6:c3:6c:37:49:b7:10:b7:
06:60:cf:7a:0e:4c:98:28:fd:9a:95:b0:77:fb:be:
7f:64:a2:e0:c3:9f:f7:43:2c:e5:9f:2f:92:3b:c2:
96:90:d8:0b:0f:e8:a6:78:19:95:14:20:7c:a8:54:
ee:90:49:72:c2:28:53:0b:6b:52:e8:03:95:36:b4:
26:63:4a:ca:9e:7b:16:63:07:4a:5f:09:4f:64:85:
9f:3b:3a:a4:23:a1:a0:f1:f4:03:8d:29:5f:af:88:
e0:ab:16:d8:3e:8a:b1:3e:5d:ed:01:b0:b6:a2:54:
ce:7e:56:90:75:24:22:c9:94:0d:72:f0:05:5e:c1:
ae:52:c4:14:01:3c:32:92:3a:42:0b:93:67:96:08:
7b:e9:67:c4:80:98:66:9e:dd:b9:92:60:6a:5b:54:
12:7a:1d:f2:12:27:5e:74:06:54:cd:4b:4c:53:84:
d5:81:4d:b1:a3:a8:b9:77:b5:e6:1d:72:c8:65:0d:
b6:52:3a:94:89:87:f7:e1:fc:7d:d2:7e:05:ba:72:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:78:50:59:45:7B:A8:85:B9:83:D4:B8:BD:32:CE:D9:68:9B:56:C5
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cc:3e:f1:ee:81:6a:c0:ce:d7:9b:5a:a6:04:3b:8e:f3:7a:
a0:71:2a:04:6c:2a:3d:37:1f:4e:9b:ab:15:82:a7:95:fe:ab:
53:50:36:df:79:bd:54:d3:96:dd:12:7a:2f:41:b2:28:08:03:
67:6b:35:e0:e8:ee:9a:83:e6:e5:01:a8:7c:65:23:0b:c6:be:
a7:a1:77:08:e1:d0:5c:df:e9:73:be:73:e1:e1:ef:8b:10:15:
d1:e3:67:cf:af:ac:65:22:60:d3:f7:94:63:60:27:8a:56:39:
1c:d0:b3:c4:eb:7a:91:d7:44:ec:2b:47:c9:89:89:0e:62:e9:
f2:de:36:ff:ec:01:8b:e2:0d:56:b4:63:e9:c4:94:b2:61:42:
ec:7b:00:85:bb:e8:25:aa:8c:84:8a:f3:d0:6e:81:62:43:8f:
c7:7d:2c:e8:f4:a8:5f:02:e9:98:10:fe:95:dd:4d:7c:30:c9:
ca:2c:65:0a:c6:4f:f6:e3:c4:a7:30:a4:1f:b6:54:60:e8:a5:
8f:11:43:f7:21:1d:46:71:d6:bf:07:b6:32:83:8c:06:9d:ed:
00:c4:8c:d5:8d:ca:d0:80:c7:f7:8b:24:75:2b:19:11:9e:f4:
96:8d:3d:76:bf:33:77:5c:7f:34:32:09:71:0b:82:49:9b:95:
a6:01:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:15:56 2025 by rpki-client