Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: /zU1Zq0fSIThqL0dvVwhYOC3xQxwamqFnxidtZ96S3c=
Subject key identifier: E9:06:77:A7:6C:6B:6A:9F:E8:2E:A5:00:CA:0A:5C:33:59:C2:4F:35
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 01987D1BFAC40D3A1E723C73959A7E0BA39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0D03
Signing time: Wed 06 Aug 2025 02:00:42 +0000
Manifest this update: Wed 06 Aug 2025 02:00:42 +0000
Manifest next update: Thu 07 Aug 2025 02:00:42 +0000
Files and hashes: 1: PaUzB8wgbbRsaVQjkghBHBx-i68.roa (hash: lFrqYnlO5yM3Jwu/7kIddY95Ktd00GHwSSlGhdD9Z3M=)
2: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (hash: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: AjNB/HiD5lSW+UUVzkIaNplNEF82O7uuXwxAW9qBz5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1b:fa:c4:0d:3a:1e:72:3c:73:95:9a:7e:0b:a3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Aug 6 02:00:42 2025 GMT
Not After : Aug 7 02:00:42 2025 GMT
Subject: CN=e90677a76c6b6a9fe82ea500ca0a5c3359c24f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:49:e0:ac:2e:be:ae:ec:b9:a6:24:70:05:
2a:b3:fb:4b:f1:cd:d5:ec:e1:69:8d:a0:b5:4e:16:
b9:ed:be:8a:40:2e:1b:d4:ec:8b:c0:9d:e6:e6:0f:
11:e8:1b:96:d9:64:5c:4a:a4:90:a2:c2:ad:2e:ca:
c3:f6:8e:65:cf:27:88:32:71:1f:26:92:57:2b:15:
09:5c:04:5a:92:22:c6:ce:47:40:45:65:65:10:48:
fa:70:20:ea:c7:c6:07:4d:e4:87:73:d6:a0:36:8e:
f3:9a:68:99:5a:41:b8:3e:81:dd:cb:3b:bd:05:6c:
e2:a1:b1:d4:3c:95:4b:e9:42:18:8d:bb:92:9c:e1:
7a:a8:f3:fd:90:64:11:fd:6f:91:1c:30:f6:07:5b:
74:c4:d9:d6:c0:2f:13:f7:24:6b:4c:b0:de:9e:20:
db:bd:f1:1b:48:69:39:59:78:e4:6d:96:95:e2:d8:
da:05:c6:57:4c:95:77:8d:97:46:5e:61:dc:b0:02:
95:ec:70:a2:8d:ed:0e:90:fc:e3:db:03:81:dc:18:
ea:62:8d:6b:e5:02:b7:7e:df:ed:ef:87:dc:60:63:
00:f1:7d:c6:69:5d:26:79:ce:07:7c:d3:9d:bd:b2:
5d:b4:36:62:dd:6d:32:71:64:60:78:27:67:e9:94:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:77:A7:6C:6B:6A:9F:E8:2E:A5:00:CA:0A:5C:33:59:C2:4F:35
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:80:64:a8:91:d0:4b:1a:ed:cd:d3:fa:f5:bc:4e:a2:b0:ba:
ab:95:0f:1a:0f:44:dc:fc:52:ad:97:e6:a6:fd:e0:40:b9:e5:
06:09:af:02:e6:0a:1e:7b:c0:c1:48:2e:68:da:ae:a4:dd:0f:
e4:bd:c7:7d:3d:d0:c4:52:de:15:f6:d7:8c:bb:46:c2:ee:0c:
14:8e:35:91:8f:0e:22:52:27:7b:86:02:60:3a:65:82:a5:81:
d8:3d:2a:f9:a1:c3:48:de:3b:df:10:7f:2b:8e:09:79:59:2d:
fc:98:14:bb:20:6c:72:cc:22:09:5f:77:fb:19:aa:a8:da:92:
86:f5:94:1b:02:f1:fc:6b:a2:4b:fb:6a:0e:97:01:5e:45:1d:
8a:d3:87:fb:0c:27:da:0a:89:35:df:6b:ed:03:29:e1:18:d1:
b3:76:67:0f:9e:f8:cc:bd:86:3b:30:9b:4c:e1:0a:20:80:23:
78:45:a4:4c:8b:9e:8e:70:c2:2b:24:1c:82:47:2b:12:b6:cb:
ba:88:36:24:c2:c2:2e:bd:4e:98:2a:9f:0d:34:27:37:ef:98:
cc:2e:06:4b:61:4d:5b:b4:43:7a:bc:11:71:f6:a4:2f:77:bf:
78:54:56:39:de:04:f0:5d:36:88:bc:a6:dc:dd:52:90:80:92:
8e:fc:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:40 2025 by rpki-client