Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: lhonZsMAPZKjZR30YBYdr3cBmeWQygidheSUZVOKGxA=
Subject key identifier: BD:2C:F5:0D:90:86:8B:A9:A7:18:0C:4E:B7:DE:BD:E3:2D:1E:E3:43
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 01984DB0506AA11711A391E71A50592E4792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 05EC
Signing time: Sun 27 Jul 2025 21:00:57 +0000
Manifest this update: Sun 27 Jul 2025 21:00:57 +0000
Manifest next update: Mon 28 Jul 2025 21:00:57 +0000
Files and hashes: 1: HQp_yUg92FF87DlWPtvQf8oIbtU.roa (hash: WdzVBva5nz5iKOf23yLPoQ+M9QxUiJxb8xYxHWes+RI=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: 6R2Xluu2ufCWT6R87DDppsO+J5yMdHhFnSMi8rOgqFs=)
3: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:b0:50:6a:a1:17:11:a3:91:e7:1a:50:59:2e:47:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Jul 27 21:00:57 2025 GMT
Not After : Jul 28 21:00:57 2025 GMT
Subject: CN=bd2cf50d90868ba9a7180c4eb7debde32d1ee343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:04:e7:b5:50:11:d2:d3:71:ec:0f:36:b2:
71:bc:a8:8c:2d:a7:c2:13:b1:42:fb:fd:7a:e8:9b:
7d:60:e9:88:71:f8:6d:7c:37:92:32:3d:a3:7d:18:
8d:a6:77:84:7a:ab:80:44:2f:ef:44:d3:fb:97:05:
11:8f:bc:e9:74:08:a4:81:75:67:b9:4d:62:c7:50:
0c:3f:7b:ed:b2:4f:0e:7e:b9:62:e9:cb:27:f8:98:
a7:d9:dc:65:eb:9c:d8:0e:0a:20:1c:69:0d:40:0e:
c4:00:6a:17:2c:23:e6:1b:bd:12:0d:22:1d:7a:fb:
6e:57:d5:6b:fe:61:9e:88:23:b2:08:48:3d:86:68:
0f:5a:50:a1:b8:76:16:cc:5e:a3:90:ae:3f:66:67:
8d:c8:d5:c0:3a:32:b5:50:45:19:de:a6:d3:7b:04:
d2:49:97:b8:77:03:e4:81:82:e1:a7:e4:c3:d1:ad:
be:d4:67:51:5a:4c:b0:bc:43:df:ee:da:6f:ce:47:
a8:1e:62:d5:07:ea:42:1f:79:ba:7a:b8:27:fe:15:
7e:ef:ee:26:59:71:82:d2:89:58:81:63:92:f5:c3:
8f:86:91:df:c3:b0:1b:95:12:67:cc:0e:1b:9c:dd:
9b:19:5a:d4:1f:40:7f:cf:ab:8b:23:20:f8:29:c1:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2C:F5:0D:90:86:8B:A9:A7:18:0C:4E:B7:DE:BD:E3:2D:1E:E3:43
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:de:1b:be:2d:34:99:e3:3c:b0:84:6a:3e:4a:d7:68:9b:b5:
4f:23:d0:da:00:0a:29:fd:41:30:8c:b1:b4:29:04:e0:f6:05:
2f:7a:bf:cc:9e:db:8f:3d:13:a4:9a:69:ab:4d:fe:9e:a6:da:
ae:52:3d:00:60:37:76:89:2d:7e:48:b5:a9:e0:54:f6:e1:5d:
ef:0e:d2:b9:e0:b7:93:de:b6:2e:09:03:54:f6:c9:4f:1c:97:
66:c3:89:1e:8e:67:b0:0e:a4:9d:68:fa:c8:48:74:f7:c6:45:
5a:42:22:a8:19:99:54:05:95:24:4f:5f:29:27:96:50:31:31:
7f:09:c6:2d:82:6d:63:05:b9:87:37:3c:a4:50:ad:a0:27:08:
f1:94:7e:2a:61:da:c8:eb:9b:e3:d2:09:c9:a4:f3:e5:d4:5d:
de:f8:7d:c5:b2:5c:68:0c:b8:ee:fe:a1:f3:60:ae:87:22:a4:
2c:41:29:06:e2:a3:f8:cc:62:da:a6:e6:4f:4b:41:47:6d:31:
7f:97:06:44:98:34:4e:ab:58:88:6d:f8:be:65:a5:56:00:3f:
09:08:48:8e:d3:03:2b:9e:d2:65:6d:89:40:25:26:e7:ac:b3:
fb:01:38:c6:d7:b1:c4:5c:aa:58:05:fe:89:82:72:4e:69:c3:
0a:17:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:28:05 2025 by rpki-client