Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: F2AgOkHS8a3XAnK2dIWl9x33jhFR69GrObiIjkJz81M=
Subject key identifier: 14:CC:DA:3E:44:8A:3E:95:3B:8F:5B:BC:BF:13:2F:2B:E3:D6:16:0A
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 0198819DFA68DBED8F6FB0BDE635D8A53926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0C61
Signing time: Wed 06 Aug 2025 23:01:10 +0000
Manifest this update: Wed 06 Aug 2025 23:01:10 +0000
Manifest next update: Thu 07 Aug 2025 23:01:10 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: a2kOeT6sep8uTJDUO49Mjv6M9wgsRRsVKncV9ozTmGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:fa:68:db:ed:8f:6f:b0:bd:e6:35:d8:a5:39:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Aug 6 23:01:10 2025 GMT
Not After : Aug 7 23:01:10 2025 GMT
Subject: CN=14ccda3e448a3e953b8f5bbcbf132f2be3d6160a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:b2:c6:78:cf:78:ee:81:b6:2d:94:bd:fc:
97:bf:a4:1b:0c:ad:f8:70:07:20:3e:bc:fc:8b:46:
6d:3f:c6:a2:7f:29:bd:0f:bb:17:8c:4f:64:ae:e2:
6d:fb:fc:f0:5f:a5:fb:78:ef:f0:8e:36:ef:11:3d:
08:bf:fd:a7:8b:7f:56:31:aa:95:13:df:04:9a:e7:
c9:7f:5d:59:61:b1:ed:00:60:4d:5f:12:ba:98:55:
3d:27:2d:47:54:1c:ce:f0:6c:79:bd:53:51:56:5c:
c9:8a:43:ac:40:12:37:28:6f:9f:da:21:9e:be:19:
82:5e:6e:98:9c:98:97:27:04:cf:6c:0b:ab:eb:09:
e7:9f:22:60:bf:29:9c:4b:ae:d4:60:a8:81:a4:b0:
8b:71:59:42:11:47:d4:9e:c0:ac:f8:af:a4:21:f1:
46:ad:2b:7f:83:c9:28:a8:36:03:80:4e:8d:74:95:
49:96:d9:12:aa:ef:bc:43:50:48:29:6d:fd:d0:4a:
87:f9:95:ce:bf:e5:3d:cd:c9:fc:e4:d8:c2:1f:e7:
39:2e:0c:37:c8:9d:23:a7:7d:71:ac:69:e3:9d:4d:
5b:bc:46:c1:a8:b5:02:5c:bf:a0:ee:ce:59:de:fc:
46:57:95:a2:da:e8:08:59:3d:64:57:60:7c:09:c2:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CC:DA:3E:44:8A:3E:95:3B:8F:5B:BC:BF:13:2F:2B:E3:D6:16:0A
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c9:fc:71:eb:80:67:ae:d7:c6:a9:f9:59:fb:67:81:fa:74:
3e:74:33:96:10:fa:8b:f0:6e:f6:f9:18:ab:f2:a1:64:91:f0:
0d:fb:47:c6:c2:90:43:81:7e:0d:65:e0:b4:44:2a:de:8c:0e:
d9:e5:22:f3:3f:16:4e:95:bd:41:1d:3c:35:12:81:25:03:30:
11:04:75:5a:b1:dd:07:b8:4c:bb:8f:68:25:cd:76:37:c7:6f:
61:9f:53:d7:44:6c:94:0a:b1:8d:a4:ac:78:45:07:48:88:3c:
f4:d3:30:c6:48:75:c6:0b:34:82:18:d7:25:9d:dc:db:7a:c2:
2b:12:92:e7:2d:06:c2:7b:01:10:41:de:d8:b4:58:e1:99:ed:
7c:af:75:cd:43:38:1e:d0:f2:5a:6d:79:bb:c1:14:a1:76:70:
17:08:05:61:6d:02:76:e0:6e:c7:bd:3d:db:60:1c:12:7c:fd:
18:16:bc:1b:f9:d3:a4:01:58:24:b1:6f:5e:2b:61:89:c8:38:
6b:dd:e6:59:b7:b2:04:0e:c6:76:4d:09:4e:af:49:08:66:23:
47:93:ba:89:d8:4e:e6:e4:c0:e2:93:de:a7:ca:57:84:e6:d6:
58:ec:62:b8:06:76:5f:a7:7e:a4:a9:fb:1b:a8:54:68:91:12:
0d:e6:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:28:06 2025 by rpki-client