Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: 7bHMVyNmfHgqL0EtQx9sKKPuzjBKwJDFV2Z9j7B3ioE=
Subject key identifier: 05:E5:ED:CD:DE:88:4B:35:CB:BB:00:EE:9E:32:7C:D8:7B:52:5A:87
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 019893DB1890502EDACD102E0341AA58BB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 0BB5
Signing time: Sun 10 Aug 2025 12:01:06 +0000
Manifest this update: Sun 10 Aug 2025 12:01:06 +0000
Manifest next update: Mon 11 Aug 2025 12:01:06 +0000
Files and hashes: 1: eiXFhQbxCQpcEPNruQeHmSAD-Z0.roa (hash: MfMam3uqTveTnOv++uzEyTkwTSJ0lTcdAkWlcL+odNo=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: IvqzgN149W5SKPOMNfsl1cpZOctKITqO4Vl6ZsMYVgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:18:90:50:2e:da:cd:10:2e:03:41:aa:58:bb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Aug 10 12:01:06 2025 GMT
Not After : Aug 11 12:01:06 2025 GMT
Subject: CN=05e5edcdde884b35cbbb00ee9e327cd87b525a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:b2:37:7a:ed:ba:06:d3:78:86:3f:8a:9d:
06:01:b9:f4:c2:73:3b:12:56:8e:ba:ff:df:f6:23:
a5:a7:48:bb:2b:83:81:cd:46:00:1b:f1:73:97:c3:
a8:f4:31:32:41:50:bd:d4:b4:6d:ee:1d:cd:71:29:
a4:e1:c7:da:2a:53:ea:98:5a:a9:14:ac:9c:37:fa:
fc:dd:90:81:9d:c2:df:ef:e3:e8:e9:cf:86:d1:ff:
ca:ac:8a:a6:6c:e0:b5:9b:9e:fe:39:b1:6a:1d:8e:
64:45:a3:a9:c6:a5:ad:0f:bd:83:0b:08:d4:05:d3:
45:2c:68:7b:96:96:72:68:d8:3c:26:67:08:fb:69:
ec:cf:52:5d:26:f1:e7:a1:69:9e:f4:3d:70:93:c7:
99:6f:78:80:48:81:17:1f:ab:ae:49:ed:10:23:dc:
c0:79:7b:02:a2:40:af:1b:f8:b3:f0:6e:d3:2b:42:
03:96:6e:9d:c6:ee:9e:9d:62:d8:cc:a2:08:5b:34:
d8:af:9d:c6:a2:46:ef:32:16:de:2c:42:84:c9:68:
ab:01:01:ee:72:f1:fe:7b:98:bd:30:6a:a5:5a:a2:
f5:c4:80:3d:ee:99:22:a3:0f:a4:a8:b7:7c:77:86:
11:16:19:3e:92:0a:29:7b:08:ae:9c:80:4d:89:b4:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:ED:CD:DE:88:4B:35:CB:BB:00:EE:9E:32:7C:D8:7B:52:5A:87
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5c:15:41:d3:a7:07:1c:f9:83:eb:10:f2:cc:af:83:c9:0f:
e4:44:63:ed:7b:ad:1d:7d:e0:11:8f:42:9f:9b:f2:81:3c:ce:
43:24:8a:65:e8:1c:f8:99:47:db:ce:a8:52:57:68:58:36:18:
04:2e:ec:1f:0a:8c:02:f0:15:a3:a7:20:3e:d9:b2:8b:da:4e:
3c:01:a8:39:24:e7:cb:2a:f3:72:b8:d6:08:70:65:84:47:48:
43:62:9e:1f:c1:74:1c:65:7d:a9:d3:2f:ab:40:52:49:94:7a:
70:7b:b3:ea:49:5a:28:02:4a:fa:fc:b8:5d:86:4d:d2:90:4c:
16:90:39:94:95:2f:f0:81:99:88:d2:20:ef:54:95:98:cd:43:
3a:97:fd:7f:41:73:d8:cd:74:63:e5:04:f9:7c:fb:f7:89:b6:
08:6e:6d:66:ae:33:b2:f6:a2:e9:ca:10:7b:ec:03:37:1d:05:
28:2b:4c:99:49:1e:64:4f:16:6e:21:ea:15:68:cf:39:f6:24:
e4:a3:4e:79:bd:d2:50:b7:55:34:23:7b:7b:98:3c:d0:4d:4d:
62:01:d6:67:15:97:2d:d8:d4:9e:7e:46:12:d4:68:a0:04:79:
96:64:11:5b:27:ad:5c:22:91:cb:f7:f7:eb:82:d1:0f:8f:b8:
15:f4:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:26 2025 by rpki-client