Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: vxECMBtE5V15inBLDgbZpilNueZ2RCLgqudTDKAJ+hM=
Subject key identifier: E4:80:F8:75:0F:FC:85:B4:E6:7D:5B:F5:59:16:12:E5:EF:11:8D:C6
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 019745C295E41343CABBACF4AE779E2AE69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 03CE
Signing time: Fri 06 Jun 2025 15:01:09 +0000
Manifest this update: Fri 06 Jun 2025 15:01:09 +0000
Manifest next update: Sat 07 Jun 2025 15:01:09 +0000
Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: o4cS6YeVmJXzuSs3R+3Y0nlo11oEuIfYAaCghTXAt9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:95:e4:13:43:ca:bb:ac:f4:ae:77:9e:2a:e6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: Jun 6 15:01:09 2025 GMT
Not After : Jun 7 15:01:09 2025 GMT
Subject: CN=e480f8750ffc85b4e67d5bf5591612e5ef118dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:a7:a8:a2:93:10:cf:95:17:fa:13:d2:93:
af:41:71:d9:eb:23:79:f1:8e:cf:da:5e:c2:d9:e3:
cf:40:cc:cc:06:03:04:7d:71:4d:7c:e7:2f:bc:5c:
3a:5d:a6:71:6c:e4:03:8a:0c:a0:b9:87:cb:43:45:
cf:71:cc:a3:31:0c:00:0b:70:9a:b3:f0:4f:26:b2:
5d:e1:20:2d:16:69:30:72:98:85:0e:3c:f8:ac:3e:
d1:81:04:bf:21:80:92:db:a5:eb:31:0f:d4:7b:df:
9a:2e:4f:8b:db:91:1d:c1:01:21:d3:b6:92:aa:3b:
e0:5b:a0:55:43:b8:f5:22:1b:db:71:4b:6a:bf:bb:
eb:e5:b7:af:e2:66:80:82:f8:f2:f6:98:7c:9f:df:
80:f6:79:59:93:e7:25:d8:a6:b9:5f:73:2a:5f:74:
77:bf:87:a8:f2:88:b5:83:84:92:a8:e1:6c:b2:f1:
95:b3:83:0f:d7:de:5e:66:eb:21:48:39:3a:eb:e8:
b6:b0:d2:09:6d:f3:4e:f1:ce:f4:f7:2a:e1:d3:af:
13:e2:4e:e6:d8:56:e3:c1:44:cb:15:e5:2b:7a:2a:
05:41:42:b9:30:ca:d7:cd:96:5f:09:f1:6e:aa:d4:
29:af:7f:a0:6c:f3:fb:92:52:c2:66:a3:17:4e:03:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:F8:75:0F:FC:85:B4:E6:7D:5B:F5:59:16:12:E5:EF:11:8D:C6
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:10:16:81:48:d0:57:37:d7:b2:5e:c1:47:0b:b4:92:ea:64:
d4:d0:43:25:3c:31:6a:7a:30:ed:45:db:2c:c4:47:fd:a9:32:
e9:af:5d:27:d4:34:f8:58:06:f8:fd:66:1c:42:27:3b:8e:23:
ff:1f:0c:ac:7e:c5:40:73:4f:8f:ae:a0:0c:7b:d7:56:c9:2e:
7a:65:25:9c:20:40:1a:d0:6b:c4:a3:0b:54:0c:37:3d:65:be:
76:c6:55:38:f1:57:0c:d4:47:b8:cf:69:9e:4f:8a:c6:70:48:
9e:f7:d8:cf:02:ae:a2:a9:4e:00:57:40:da:2b:18:f7:99:16:
a2:21:f5:60:00:4b:10:19:31:16:cb:ac:25:be:e9:d6:f6:ad:
0b:cf:b2:e4:7a:aa:38:ac:e3:b8:2b:30:ae:52:90:77:18:ac:
5c:9d:d5:c6:1b:68:d2:95:21:16:0e:b7:d7:76:28:d4:9c:f8:
10:5f:25:3f:8d:d2:de:55:8d:b1:ab:33:4d:f9:33:41:57:0a:
49:4f:31:43:b4:af:60:3d:a4:d9:2d:a4:9f:ae:2c:4b:4b:93:
7c:94:29:b0:2d:7d:bd:2f:1a:29:66:76:ce:d4:11:0d:a0:dd:
b7:b4:9c:a6:24:e1:dd:fe:8c:72:77:1a:79:16:89:dd:01:57:
ea:7a:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:07 2025 by rpki-client