Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: jwyjK5m7mTWz37euJiKvT+kMWbwkQ+bduH8kdo9Bq1s=
Subject key identifier: 39:A7:E0:D9:10:77:93:F8:7A:C8:E8:BD:9A:F3:B6:95:4B:94:6E:AA
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 0198548D80B3D7D990226826795B736CE2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 06B2
Signing time: Tue 29 Jul 2025 05:00:16 +0000
Manifest this update: Tue 29 Jul 2025 05:00:16 +0000
Manifest next update: Wed 30 Jul 2025 05:00:16 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: RXPt+VYqgnfuluAQzFMW+Oxe3GiTNIyxE0mPUc4zfVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:80:b3:d7:d9:90:22:68:26:79:5b:73:6c:e2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jul 29 05:00:16 2025 GMT
Not After : Jul 30 05:00:16 2025 GMT
Subject: CN=39a7e0d9107793f87ac8e8bd9af3b6954b946eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:51:8d:bf:9a:b2:e9:ba:20:05:97:17:f2:3b:
79:46:ae:87:32:b6:70:ce:ca:d3:c2:ae:2c:3b:50:
2c:30:89:79:9c:76:2a:71:7d:42:e2:cf:e5:75:da:
e9:5d:57:09:bb:f2:b9:cf:f7:72:41:5c:bf:31:e4:
ea:a0:db:8d:89:a4:34:37:44:a4:e2:11:66:ee:4f:
ee:85:2a:c8:02:1e:71:93:54:28:2f:8e:f8:e4:b4:
a4:92:4f:6a:ea:a2:5a:ec:0d:43:e5:c7:38:85:59:
cf:ce:7f:d7:e6:db:33:d5:74:1f:5f:4a:2f:1a:03:
e8:6d:84:f0:5f:11:c1:6a:c2:46:25:31:c5:dc:2b:
57:4c:1f:19:44:65:08:4e:8d:fb:d6:ec:b1:bd:60:
82:ba:b9:25:be:57:35:16:80:bf:96:85:a9:d2:a1:
ac:53:b8:c3:23:82:d3:ba:e3:93:01:16:82:3b:80:
e1:a3:bd:37:f0:a6:4a:3c:28:a8:a6:2a:46:c3:f1:
d2:58:94:49:45:44:18:4f:27:40:27:8d:9c:9d:8e:
c0:0e:f1:7d:eb:85:b1:55:35:d8:ee:d1:72:5d:ab:
ed:a5:c0:d1:0c:4a:55:47:9f:dd:b1:ff:40:fd:fa:
4c:9d:df:57:87:e8:f8:e6:ce:14:18:09:2a:de:01:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:E0:D9:10:77:93:F8:7A:C8:E8:BD:9A:F3:B6:95:4B:94:6E:AA
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:04:26:14:51:a4:3a:c9:39:a7:8c:33:25:c4:b4:b2:19:9f:
a6:98:9d:93:5d:fa:92:5f:9f:ea:0d:2f:67:ac:a5:0b:b6:e3:
a5:d5:e7:b2:d0:a4:ba:6a:5f:92:ad:7f:c5:83:02:27:9e:d1:
c3:78:bf:42:94:31:d5:8d:ef:19:52:85:cf:e3:91:b2:74:48:
44:d8:2c:71:a9:06:bf:50:9f:e5:72:1f:19:73:ce:b9:c9:3b:
32:52:b1:ce:bf:f1:de:58:98:89:25:8f:6e:cc:0f:63:8d:b0:
75:9f:9e:35:b7:0e:4e:5b:66:4b:49:bc:63:97:b4:79:b6:ca:
57:94:64:f9:24:0b:58:fa:45:f4:82:19:d6:72:1f:92:a7:a4:
e6:77:b8:15:56:73:c1:66:f1:1f:aa:aa:62:e1:95:eb:42:ff:
03:08:af:af:8a:bd:b1:5d:af:40:82:60:43:6d:f2:d1:ff:a4:
6d:ee:78:94:3e:ed:df:77:91:d8:39:dc:11:b0:c1:0a:13:7f:
8f:7d:c6:95:98:34:30:7a:40:3b:12:79:7e:30:f1:e4:a5:19:
22:99:41:fc:4e:96:d2:36:2a:96:fe:ec:02:8e:3b:51:b7:fb:
a4:84:51:a7:d7:e5:d2:23:c6:94:10:3b:cc:0e:1b:b9:ba:d6:
32:21:5e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:07:00 2025 by rpki-client