Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: gQujJV1njI6xv7t/6JOiHm7RemX/Y0mHEeEO9QtwQoQ=
Subject key identifier: E8:E6:03:56:C5:A4:BC:6E:D1:D7:B7:69:A6:78:8F:86:F4:BE:CC:8A
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019874504C6D4E5D9654D260FB410AA59141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0EA0
Signing time: Mon 04 Aug 2025 09:01:16 +0000
Manifest this update: Mon 04 Aug 2025 09:01:16 +0000
Manifest next update: Tue 05 Aug 2025 09:01:16 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: jmZ+lFnJ1fIOhQfrz/7ctygw+OAS66HM2nWQ52Af5aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:4c:6d:4e:5d:96:54:d2:60:fb:41:0a:a5:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Aug 4 09:01:16 2025 GMT
Not After : Aug 5 09:01:16 2025 GMT
Subject: CN=e8e60356c5a4bc6ed1d7b769a6788f86f4becc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:fc:00:d1:5a:16:d6:d0:d0:ee:67:85:6d:
fe:e5:69:8c:22:72:b2:8c:00:c3:41:34:b3:7f:a1:
5e:6a:f2:6c:c5:d6:b1:77:d2:f2:2d:75:39:0c:b1:
8b:ad:3e:91:3c:04:2d:76:38:a0:5c:cd:b9:5a:6d:
4d:7c:2c:bb:bc:55:93:15:88:4c:84:f5:05:bd:b5:
6f:38:ce:1e:d0:13:c7:ad:83:67:18:3b:21:dc:74:
15:08:6c:03:90:22:2e:3e:a2:1b:00:42:26:38:df:
4f:e2:61:93:57:6a:46:91:35:cd:5b:c8:0f:5d:f7:
17:5d:82:41:fd:d3:ea:6d:7b:0c:ac:20:10:94:f3:
e5:69:b6:71:f4:f0:74:d5:20:09:4d:a1:9b:ec:ee:
a3:c5:d6:ee:17:92:27:4f:26:9e:dd:a6:67:67:a6:
9c:df:60:5a:1f:68:9a:7b:99:83:13:a8:7b:f8:7f:
97:7e:38:71:17:0f:0d:d2:d5:07:a0:55:32:bd:5b:
62:d7:dc:a3:96:38:7d:bf:08:4b:ac:0d:69:af:51:
df:0f:91:e3:da:b9:f7:06:22:9c:0e:65:d9:32:0c:
42:07:f4:19:1d:40:db:4a:09:32:94:f7:5e:01:17:
37:cb:0c:52:62:ac:51:4e:de:ff:a0:f9:01:0a:28:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:03:56:C5:A4:BC:6E:D1:D7:B7:69:A6:78:8F:86:F4:BE:CC:8A
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:04:25:d1:ac:94:b9:0b:d1:08:43:a6:49:d9:18:92:75:78:
4b:2e:d2:55:54:e5:37:74:ee:f6:41:d7:9b:07:e5:e1:9f:1e:
88:c8:4d:17:70:94:d4:cc:7c:dc:e0:cb:b7:84:7e:37:eb:1c:
17:c8:83:41:d9:e2:a8:b4:e8:58:70:a6:ab:39:11:42:a0:ed:
8c:1b:2a:eb:ff:5b:b2:a2:b1:ae:55:f8:09:4a:c3:3c:48:21:
fc:4b:bc:71:27:16:15:1a:bf:4f:5c:c8:64:2b:2d:e0:8d:da:
8f:b3:45:ec:0a:6e:f4:f1:07:59:14:d4:f5:91:74:8f:51:17:
c2:16:cb:44:26:a8:5d:16:83:63:a3:84:67:db:c5:80:0c:bf:
72:e1:48:70:f6:ea:ff:eb:42:11:e2:6f:c0:e0:a2:69:38:45:
60:e9:93:12:3c:e3:21:40:24:ad:81:14:7f:46:f9:e3:fd:1c:
f8:bc:09:b7:79:8c:9f:18:d4:12:0d:a5:26:ad:7a:ba:ab:5e:
7c:01:ef:3a:11:eb:6e:a4:9d:3d:e6:a3:e8:81:44:5b:ac:61:
bc:85:44:0c:59:19:90:08:3c:cc:30:ff:13:df:4a:dc:5e:ce:
c6:fd:60:3a:65:c4:6a:be:6d:af:92:14:84:07:2b:32:a2:57:
11:dc:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:27 2025 by rpki-client