Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: D2ek6o0lK0I/oQ03FRMrxfI56kVmZdlvs7/g0aeMflk=
Subject key identifier: EE:78:BA:4E:3F:6E:D2:E9:7F:D4:91:58:B2:81:4E:DC:2F:7E:5A:FF
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 0198733D23A20CD6B507A771CB3B9444F977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 0F67
Signing time: Mon 04 Aug 2025 04:00:43 +0000
Manifest this update: Mon 04 Aug 2025 04:00:43 +0000
Manifest next update: Tue 05 Aug 2025 04:00:43 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: fiAvhYdM5HgYrA2aZpjUejztjWRws0gjvTXNSilrVIE=)
2: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (hash: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:23:a2:0c:d6:b5:07:a7:71:cb:3b:94:44:f9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Aug 4 04:00:43 2025 GMT
Not After : Aug 5 04:00:43 2025 GMT
Subject: CN=ee78ba4e3f6ed2e97fd49158b2814edc2f7e5aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:3c:79:cc:27:ad:0f:04:a1:3c:98:47:eb:
d9:bf:47:03:ac:24:07:f3:96:5d:4f:89:81:6a:fe:
4c:ac:7d:47:16:7f:90:ff:a9:e3:43:0c:75:95:32:
9b:b6:1e:39:a7:55:17:2c:92:13:3d:65:94:e5:1a:
a8:ab:0d:f3:ba:b8:26:49:4a:0e:b0:85:5d:f3:30:
5f:1a:53:09:33:5c:22:82:8e:f2:f3:ab:4b:3f:e5:
0d:94:64:27:08:a9:82:c5:0e:e0:d9:ae:89:5d:e5:
05:62:9b:9c:7e:b3:3d:49:12:ee:7c:62:86:22:f1:
3e:05:1b:fa:ec:69:68:3a:06:8d:f7:d7:13:f4:ff:
4f:9b:41:97:1e:37:d9:80:95:62:45:26:1b:d0:d9:
8f:75:95:2f:70:34:1e:0f:39:53:a6:33:31:41:f2:
d4:1c:98:18:e8:c4:ef:ed:f9:00:93:ca:24:b8:21:
83:53:a3:54:e0:74:3f:18:c5:b5:d7:2c:fa:d1:e7:
30:2a:0d:c6:b6:7b:63:9e:3a:2a:6c:3f:f7:59:5a:
4c:8b:7d:7a:b7:d7:a3:1a:dd:17:be:be:37:95:2f:
16:1f:a5:bc:0a:8a:53:fd:a9:78:60:9e:a2:a0:08:
6b:bb:90:de:39:9a:46:0b:23:f2:98:de:49:a4:b4:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:78:BA:4E:3F:6E:D2:E9:7F:D4:91:58:B2:81:4E:DC:2F:7E:5A:FF
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d0:8d:ff:14:fd:bc:26:ce:ef:f1:87:38:8c:32:86:a7:92:
2b:36:de:9a:33:d7:ef:d4:6b:4c:57:20:15:a7:85:dd:4c:b1:
fe:cb:6a:7f:34:97:7e:0c:d8:b3:93:d6:6a:26:bc:3d:78:14:
c1:29:81:26:af:19:e1:c6:bd:69:1a:d4:ef:29:a0:a6:57:04:
9f:40:c0:47:c2:66:6b:94:99:64:ca:86:d1:df:ce:76:92:be:
fe:29:51:89:e8:2a:73:da:1c:18:e1:9d:53:bd:a4:fc:a5:55:
c7:82:5f:bc:38:34:15:aa:fd:c3:8b:38:3f:81:dc:49:c1:04:
b3:fe:44:65:57:b5:de:85:95:41:71:db:17:7e:59:ff:1c:69:
8f:2a:d6:55:12:c6:c5:85:14:ee:c3:d6:47:8b:63:cb:21:74:
0e:62:3c:69:48:07:20:19:6e:d2:5b:4e:cc:37:4c:f8:75:80:
05:19:4f:c1:09:87:ef:81:4f:82:07:dd:07:d6:2d:83:c5:a7:
ad:5f:8f:f3:92:d1:14:3e:7f:4e:0a:3c:4a:c2:8c:0b:25:58:
9a:05:9f:69:ba:d3:a8:db:72:37:15:df:b5:2e:d8:03:96:e0:
19:63:66:18:78:7b:b2:51:b8:c8:5e:ea:32:5a:6d:54:bd:0f:
ad:13:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:31 2025 by rpki-client