Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: j5EJxV6MHCWE2WIKrY04HPGuKco87hP/CVuQDlMFmZU=
Subject key identifier: E3:26:F7:3A:DF:E8:BA:AA:3C:A1:3D:32:7D:B6:BF:CF:63:DD:6B:30
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 01977677BC97972619EC0F18395FC49EEE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0C7B
Signing time: Mon 16 Jun 2025 02:00:47 +0000
Manifest this update: Mon 16 Jun 2025 02:00:47 +0000
Manifest next update: Tue 17 Jun 2025 02:00:47 +0000
Files and hashes: 1: PaUzB8wgbbRsaVQjkghBHBx-i68.roa (hash: lFrqYnlO5yM3Jwu/7kIddY95Ktd00GHwSSlGhdD9Z3M=)
2: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (hash: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: RknXrG2CmWaFQUzEwAD5wrwadBQ2mtEoWVAj1amDJfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:bc:97:97:26:19:ec:0f:18:39:5f:c4:9e:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jun 16 02:00:47 2025 GMT
Not After : Jun 17 02:00:47 2025 GMT
Subject: CN=e326f73adfe8baaa3ca13d327db6bfcf63dd6b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:88:5f:54:59:bf:3b:53:81:74:ae:f1:ed:
2d:e7:5c:a7:b9:87:df:e2:fa:c6:85:22:92:a7:5d:
74:95:93:00:af:82:b3:0d:fc:44:50:22:05:a3:ac:
24:87:e6:81:f1:74:9a:fb:dd:20:e8:cd:9a:16:13:
9d:0a:d6:ce:8d:95:b6:16:cf:46:08:89:ee:7d:f5:
e7:5a:bf:cc:97:f2:d3:9e:bd:ba:79:d4:be:5d:1e:
87:aa:dd:22:56:99:ea:4c:e1:bc:bf:09:46:28:82:
ae:f2:4c:aa:e0:e7:1d:54:2c:3a:1c:c4:6f:25:16:
fa:65:0e:bd:03:fc:bf:9f:28:22:4d:ac:c8:62:26:
fa:12:15:ea:9d:19:fc:d3:61:04:b6:ab:ff:0a:3e:
a0:0f:ba:3c:63:e6:c1:6d:db:9c:dd:af:96:ac:27:
80:4d:84:40:72:ab:df:1e:78:db:3a:3e:88:08:29:
27:0d:53:70:08:5e:21:d6:ad:44:36:1d:65:c1:d6:
81:7d:51:98:3d:27:76:5d:61:5b:80:0a:df:c1:5e:
4a:a6:a2:84:d7:0c:e0:e8:6e:b1:01:65:82:1b:64:
c6:a9:ed:48:ee:cd:6f:25:9f:fa:9c:59:88:cd:7d:
dd:7b:99:3e:cf:d2:d3:49:0c:fc:4c:86:9c:82:a2:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:F7:3A:DF:E8:BA:AA:3C:A1:3D:32:7D:B6:BF:CF:63:DD:6B:30
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e9:e8:67:45:a7:f5:a6:0b:90:1d:3e:f1:38:5f:79:5d:7e:
ce:a1:f5:3b:0f:73:33:8e:ac:55:69:17:5d:7c:a6:11:48:c0:
5c:73:77:9d:57:b2:e8:5e:3a:33:07:8a:1e:17:0f:ca:6c:17:
59:4d:b3:45:15:b2:3d:0e:8a:6b:86:81:e0:0f:12:50:e1:94:
70:3a:ef:0a:94:29:1f:d0:c6:fb:4b:7a:90:3a:3e:cc:77:b4:
ff:d9:f3:69:09:25:57:98:70:69:d9:40:99:cf:8c:ed:0d:35:
58:5b:f1:d9:06:55:b0:ee:ab:95:5f:0f:3d:02:37:e3:f7:9d:
16:45:d3:71:51:6e:c5:ce:02:3d:a1:72:b5:9a:db:e5:f6:55:
e8:45:90:a5:48:47:d9:c3:93:15:a4:80:dd:a3:0a:1f:5a:c0:
06:cd:57:fb:e9:7e:34:06:da:d9:f5:5f:5d:bb:a1:0f:3c:8d:
b0:4a:d8:01:d4:f9:72:08:84:f2:10:6f:49:3a:f0:ca:2c:62:
0c:a5:73:0c:de:d4:79:bc:82:c0:2a:dd:76:45:ff:8e:c6:ba:
c6:81:87:6b:58:5d:e4:c9:c6:c9:e9:ae:f1:b7:c4:d5:a3:e9:
c8:0e:7d:30:49:95:9b:6e:cf:7e:b5:20:d7:7d:5d:f2:9f:24:
78:55:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:48 2025 by rpki-client