Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: wzTF8qgNmG14bWEmtQzxkS8YYvlaSzVMlReWAaV2e1I=
Subject key identifier: EB:A1:6D:C2:F9:A2:4A:EA:54:AD:F1:58:2D:C4:DB:88:EC:12:14:39
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 01992CD94D9368B4A7023C06C4ACD4DD557A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 13BC
Signing time: Tue 09 Sep 2025 05:01:02 +0000
Manifest this update: Tue 09 Sep 2025 05:01:02 +0000
Manifest next update: Wed 10 Sep 2025 05:01:02 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: ek0Luv2OYJkQdnnI0XP0fIc3mXdUnj/dGtQc8l6h5X8=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:4d:93:68:b4:a7:02:3c:06:c4:ac:d4:dd:55:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Sep 9 05:01:02 2025 GMT
Not After : Sep 10 05:01:02 2025 GMT
Subject: CN=eba16dc2f9a24aea54adf1582dc4db88ec121439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:b7:69:42:94:4c:65:57:28:68:ff:15:76:
32:66:92:a3:eb:f1:ce:0f:9f:18:89:b4:0b:ed:ce:
d0:58:01:bd:f5:cd:87:38:03:e4:2c:9d:88:0b:4d:
67:73:dd:d1:dd:ff:29:e1:25:92:f6:34:32:dd:b9:
4b:18:9e:bc:a0:87:d4:e5:09:d8:45:d5:2d:9a:07:
a5:ce:8c:8c:a7:31:e4:b6:b1:64:87:68:c5:fa:18:
ba:93:c2:fc:a5:08:dc:de:d6:f0:ee:a9:0e:5f:af:
2b:f4:b6:63:ac:51:52:0c:e7:12:c7:cb:15:8e:93:
3d:1e:13:1b:62:28:6c:c0:66:88:15:c9:09:5e:7e:
3b:4d:57:c2:75:e6:46:56:a6:91:50:9c:9e:1c:56:
20:e8:d7:c3:ad:8b:a9:5a:0e:7a:57:d9:3e:a6:86:
7f:62:4c:c9:fb:c8:c5:5d:93:54:96:90:a9:21:80:
ff:5f:d9:26:db:76:b9:5a:ec:05:c9:c8:f3:cd:9b:
11:a3:0f:87:75:fd:f6:48:a5:08:6d:3c:6e:09:25:
93:ac:c5:6d:dc:93:e4:37:f0:33:95:63:36:83:99:
69:fe:56:bc:7c:c5:f0:96:08:9c:2a:60:fb:c1:be:
d2:0b:ee:6b:26:ec:56:17:2a:18:0d:3b:51:57:8d:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:6D:C2:F9:A2:4A:EA:54:AD:F1:58:2D:C4:DB:88:EC:12:14:39
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1d:0b:44:eb:c0:2f:e5:59:42:43:1f:b3:9a:05:dd:1e:1f:
e3:c7:38:00:85:96:dc:68:ee:63:f6:9d:eb:4c:4f:d3:e8:bd:
81:8e:e4:10:77:7b:5d:43:5a:ec:e1:35:9f:7d:65:55:bb:93:
49:dc:de:a6:df:ac:0f:73:ad:27:87:3c:de:77:14:cc:e7:70:
53:19:b6:71:dd:39:25:76:86:69:2e:a5:d5:50:cb:b9:18:11:
12:be:93:46:39:5c:22:59:56:cc:d8:78:0f:cf:83:f0:42:06:
68:62:d3:8f:1c:08:79:00:d0:e2:23:0f:32:3f:0d:79:21:e1:
6b:88:34:2d:50:b9:bd:23:84:eb:51:a1:fd:16:43:72:fd:a1:
0c:44:8c:4c:a3:0b:ee:5a:df:a7:d5:81:e6:50:ac:a6:2e:2f:
c0:a9:8a:a7:71:04:b9:db:95:73:79:ae:2d:8d:99:55:09:df:
c2:08:c9:91:77:a7:80:50:fb:f7:61:c0:b2:8e:b8:e2:8d:92:
43:5e:2e:69:39:92:e5:dd:a6:02:b2:b6:d7:a3:17:fa:06:02:
09:17:3e:50:a9:a9:bc:04:3d:d7:74:a8:0b:59:13:74:9b:d1:
5e:0c:00:a4:66:8c:27:1d:1f:dc:6a:bc:a3:39:ed:a0:77:5a:
19:87:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:55:31 2025 by rpki-client