Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: Wb5/ot/IjRgTVu9mLcxFeC0vmkY2VJl/bG4c3WcSirU=
Subject key identifier: 74:8B:07:72:D8:D0:0C:60:2D:2B:9B:64:50:A4:D0:41:F3:82:3E:B8
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 01987D1C1609418076317C80F307057B6A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 1361
Signing time: Wed 06 Aug 2025 02:00:48 +0000
Manifest this update: Wed 06 Aug 2025 02:00:48 +0000
Manifest next update: Thu 07 Aug 2025 02:00:48 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: zHlnf3lr6VEMukDKfDNK5mq9EQ5pILPflgfqyY9fhMI=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:16:09:41:80:76:31:7c:80:f3:07:05:7b:6a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Aug 6 02:00:48 2025 GMT
Not After : Aug 7 02:00:48 2025 GMT
Subject: CN=748b0772d8d00c602d2b9b6450a4d041f3823eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:63:82:86:98:aa:21:cc:1a:21:3c:6e:08:
e9:64:85:cb:a5:b2:21:cd:5d:c0:be:bd:03:2b:99:
a2:5c:43:be:cc:38:7b:ac:b3:d8:4a:17:34:96:76:
0a:60:51:ca:f7:85:81:34:67:45:f5:5f:dc:e1:d7:
c7:07:08:a3:f7:62:40:04:25:c5:aa:87:18:7e:ea:
b3:ec:00:f1:a0:c0:ee:fa:ad:8b:d7:99:8a:06:f5:
aa:ab:c9:bd:be:5c:29:da:9d:0d:e6:e2:58:4a:da:
18:e9:f6:d9:26:d7:df:77:75:97:5b:17:b7:05:9f:
bc:21:4f:51:b9:81:e0:84:76:94:29:d0:bf:22:d5:
ba:43:4a:47:5a:d6:12:e2:53:61:b2:60:df:20:0f:
3c:74:ef:a5:f7:0a:27:b4:8e:29:1d:f5:15:a6:16:
56:14:23:4b:51:65:a5:22:83:00:17:e9:a1:6b:c0:
70:fd:a9:28:99:3b:62:f9:1d:22:56:92:fd:5c:f0:
41:99:cd:6c:eb:1f:58:7d:9e:0c:54:57:0b:e9:32:
b6:f6:8b:0c:93:a2:3c:cb:af:fe:eb:c4:35:c2:27:
c0:3c:9a:0b:fa:d9:62:fd:a7:e7:34:d1:ae:c7:2a:
49:95:17:91:d0:88:5f:4e:78:28:5c:fb:3d:39:8a:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8B:07:72:D8:D0:0C:60:2D:2B:9B:64:50:A4:D0:41:F3:82:3E:B8
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4c:e2:86:83:2f:9c:36:86:d5:78:a8:05:1b:03:c4:44:33:
c4:ef:e3:67:08:f1:91:0e:72:bb:fb:9d:48:85:68:a7:d9:1c:
8b:bc:93:a9:b2:1a:02:16:85:3d:39:51:44:00:ca:05:58:86:
ec:f5:26:5d:79:48:d2:ea:80:81:a9:39:4d:92:ef:a8:79:45:
ce:21:ef:03:2c:37:03:bc:0e:26:a2:04:98:e0:cf:83:b9:7e:
5c:2b:1e:d4:35:68:7d:35:1f:98:6d:8d:02:bd:53:9f:27:80:
30:a0:9d:c5:f6:52:cb:a5:13:62:2d:aa:33:fb:cc:6c:9f:30:
5a:24:fc:92:96:da:6b:b7:57:4a:18:e9:6a:31:ee:96:03:cd:
56:f8:be:71:10:6e:ca:44:ba:ce:b0:f9:29:f6:aa:73:e6:b3:
0d:11:55:a3:ed:3c:9b:2a:e9:bf:11:5f:bc:4d:56:8d:70:c9:
2b:78:0c:3c:ab:0c:31:46:7d:d1:57:40:f1:33:1c:b2:5d:dd:
42:0c:14:de:a3:78:4f:b1:3b:2a:65:db:86:63:53:9a:9d:c2:
d5:2d:09:f8:de:a2:05:c9:fe:89:84:75:00:87:32:21:75:c5:
5c:bd:21:58:95:b3:be:e9:64:47:64:66:13:04:ea:eb:9f:ab:
8a:e0:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:30:51 2025 by rpki-client