Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: gdenr8JxpJ20m/hxVreZyMs5G45MnGUpNk6ofrgl+hE=
Subject key identifier: 4E:8E:48:84:8B:72:58:34:E7:79:47:54:4D:61:5D:32:9B:65:8B:77
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 0197C5015DB353A560829BF5EDA9C2786A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 08:01:30 +0000
Manifest this update: Tue 01 Jul 2025 08:01:30 +0000
Manifest next update: Wed 02 Jul 2025 08:01:30 +0000
Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: 2/gS3DbHBLtzunLghgej1XujIAp6c6i3AmlBU4/aE94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:5d:b3:53:a5:60:82:9b:f5:ed:a9:c2:78:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Jul 1 08:01:30 2025 GMT
Not After : Jul 2 08:01:30 2025 GMT
Subject: CN=4e8e48848b725834e77947544d615d329b658b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:09:4a:45:90:6b:d6:91:9a:94:ba:25:00:
29:61:b7:43:8a:c7:d6:dc:e9:a1:ea:fd:f2:1d:36:
e1:d1:de:44:b1:f7:eb:e9:d8:a5:7b:f1:f6:28:6b:
28:6f:58:72:09:ca:87:e9:99:25:de:31:d2:63:e4:
7a:21:2e:6a:48:1e:8b:e7:a4:10:6b:d9:fb:ad:0d:
be:72:34:47:24:5b:e6:69:d9:a3:a3:62:9d:26:53:
a6:89:85:2d:d2:40:29:d4:ff:9c:1e:19:79:4a:a4:
7a:10:56:ab:b5:52:78:f9:c8:45:2f:05:dc:08:fc:
a9:68:07:c4:5c:5a:e5:94:4e:2a:1c:6a:81:91:74:
39:8b:41:dd:89:49:22:cb:a5:dc:e8:5f:87:1a:02:
1b:4e:a2:8d:c9:99:22:e8:5d:12:3b:61:ea:cf:6e:
bf:28:b3:40:f2:81:23:0a:e4:da:fb:27:ef:79:7f:
a0:34:1a:6d:7f:42:f8:53:d8:e5:75:e4:59:b8:aa:
d8:01:0b:1c:82:00:c5:53:59:25:78:ff:66:dc:9f:
83:cc:4f:61:02:c9:6d:4f:5b:b1:a9:12:26:e6:94:
ef:0b:3b:7a:6c:6e:fe:c6:66:b6:12:48:40:f8:5b:
28:ce:91:95:dc:2a:50:77:e9:d1:90:d6:95:4b:08:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8E:48:84:8B:72:58:34:E7:79:47:54:4D:61:5D:32:9B:65:8B:77
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fe:c5:f6:b7:bb:21:f1:c9:a2:27:cd:51:04:b5:e4:dd:88:
c8:46:87:bd:c2:49:29:fa:69:fd:3f:ec:44:aa:00:4a:95:55:
ff:e3:02:6c:f7:a1:d2:8a:8b:fb:b1:b8:3a:83:db:e5:71:53:
3c:c7:bc:c6:1a:32:6a:40:c9:dd:9d:af:62:1e:d6:a3:bf:7b:
29:97:bc:b9:73:97:dc:ae:30:28:36:d8:a3:88:5d:75:f8:b3:
7e:5a:6b:0a:53:27:a8:55:34:a7:63:c6:0e:7e:37:2f:6a:41:
60:e7:d2:dd:a1:d0:1c:a0:68:62:60:80:88:98:b0:48:23:77:
e5:e3:e4:f4:49:51:69:22:d1:2f:ad:fa:75:04:a6:b8:07:4b:
cd:ee:81:52:59:f7:a6:86:79:4a:cc:bc:b9:8e:07:0e:91:f9:
2b:5b:b1:c0:c9:1b:fc:f5:47:72:07:a6:b2:bb:25:95:4e:f1:
18:be:b2:18:e5:2f:66:fa:b4:5d:db:7e:ee:4a:5f:40:8a:ff:
ff:09:58:b7:68:60:72:18:13:de:e1:85:f8:38:00:8a:f6:dc:
39:68:7b:d0:d3:8b:d2:4f:47:d3:00:9f:96:85:f4:27:f8:d1:
9f:0f:ec:4a:b1:82:bf:9e:6d:13:22:01:33:90:17:51:fa:67:
71:e9:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:53:01 2025 by rpki-client