Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier: IRj2BoRdHG4tgdzxQA7OiHEabvMjBDNFlcUahaMK5hY=
Subject key identifier: 87:87:D2:02:01:A1:C4:D2:F5:47:CB:A4:C9:34:BB:D2:C3:E0:E3:81
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019879E4633C09A165C91E50910804875E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number: 0187
Signing time: Tue 05 Aug 2025 11:01:07 +0000
Manifest this update: Tue 05 Aug 2025 11:01:07 +0000
Manifest next update: Wed 06 Aug 2025 11:01:07 +0000
Files and hashes: 1: DIvBgZwS0Tso3aVf8EICkFleMLM.roa (hash: uFxBmENfxdwwVihL06QRGFulr8RLsRLP+PeZmW4yvHM=)
2: ciHagOHLSoKpc1FusaVxL3_Ptq8.roa (hash: qVZyRrrycJITJq8e+Oqg9n1s/m1DGfbQ92cmAOV1Z5A=)
3: hebYL6M-z610FLivX7dM3OowSRU.roa (hash: IcjCerJ7GmqoXjZHtfS/CxBpCm6nwEU8LVGTcI76v2s=)
4: xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa (hash: hoQlQ49AMRXyr8IYH6xHVURJ84d0LGLOqucCIHUfGFM=)
5: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: R+uZN7VCSXcrHkzO+4eSgvSLmoArD1aSMLfgvAlFnBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:63:3c:09:a1:65:c9:1e:50:91:08:04:87:5e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Aug 5 11:01:07 2025 GMT
Not After : Aug 6 11:01:07 2025 GMT
Subject: CN=8787d20201a1c4d2f547cba4c934bbd2c3e0e381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:8c:3f:4b:ad:df:16:41:14:83:42:3c:71:
29:7d:65:46:e9:54:5b:a8:ff:88:67:01:77:3d:36:
01:db:14:bd:96:d0:5a:c5:16:14:bd:6d:aa:8c:a8:
f1:2f:8e:d3:0a:45:79:b9:da:66:20:93:23:85:81:
f6:36:61:a1:d2:e7:93:81:bc:42:cb:12:3f:ff:9c:
33:3a:f9:e7:c4:d9:52:98:c4:df:86:f4:73:68:b1:
b7:00:ba:c5:ec:f5:4c:16:8b:26:05:6e:81:8c:05:
bd:ec:4f:37:0a:22:77:25:9b:64:19:ab:79:bb:53:
63:c9:d3:65:c9:6e:89:89:30:0e:11:07:88:94:65:
92:81:a5:c2:b7:fe:34:42:73:6f:13:6e:ab:b7:ca:
88:35:c2:9f:cc:1a:5b:87:d1:d2:04:df:77:5a:5a:
2d:fd:c5:3c:78:76:4a:73:7a:33:76:87:4b:25:c4:
d7:f1:ea:89:49:8e:49:85:2a:d5:51:1e:0c:64:57:
35:4a:24:a2:c3:8b:7a:af:fb:74:61:c6:fd:0a:db:
60:96:82:73:c9:d5:ad:8f:6c:b5:ba:8f:6f:5c:a5:
24:9f:47:16:f7:44:31:51:8a:be:ad:16:03:17:b1:
95:81:e0:3f:7f:1b:2e:46:db:60:98:74:78:16:1d:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:87:D2:02:01:A1:C4:D2:F5:47:CB:A4:C9:34:BB:D2:C3:E0:E3:81
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c1:9c:28:ed:cc:c4:fd:2b:01:be:76:d2:97:1e:e0:6c:f6:
21:ed:00:04:c7:1d:a9:a3:fb:62:36:54:f4:0c:82:01:9e:c6:
1a:f9:47:d9:27:71:87:be:b4:25:f8:82:c1:12:b2:0d:a9:63:
66:44:22:cb:0f:49:8d:50:c8:14:55:6b:dd:e3:d7:b9:00:e3:
fd:91:f3:04:ce:89:7e:99:77:5a:d9:8f:28:10:e6:83:6b:f6:
50:4a:75:a2:66:a7:5f:82:b9:0f:e4:57:ef:ca:9d:af:3a:00:
a8:68:6d:6e:1e:91:a8:88:68:73:20:86:92:1d:f9:a5:75:33:
87:d3:6f:d1:79:69:bb:a2:40:01:29:36:13:18:a9:36:c9:cb:
19:d7:2b:f6:f2:1f:1d:3f:f0:73:02:2e:3c:5b:00:53:bb:4f:
a0:af:93:17:32:f8:0c:29:f1:e5:00:b5:1d:21:ae:78:6f:68:
b3:53:31:8e:f2:03:1e:54:df:ad:58:6b:84:02:d6:aa:14:4d:
a2:f4:bc:35:4a:bc:dd:b6:15:74:22:79:02:23:32:85:79:b4:
5e:f2:2a:2e:ba:a4:79:bb:3b:f9:4c:f6:8f:ea:8b:c2:0c:29:
c5:0b:1e:51:22:a8:cf:0b:ab:a5:15:68:72:6f:43:3f:e9:e2:
21:e7:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:19:47 2025 by rpki-client