Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: J/sC7eGIoIhOUUItQ64YQlRY3EyIJi7/Z4egBz44miE=
Subject key identifier: 45:0E:9E:4E:0A:69:7E:98:F8:DA:C1:23:19:85:57:3A:A9:88:AE:C1
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 0198D65F59509455B0DD0206A94CD27F1D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: tQtXFvz2KwXoQEF9RjfZPBOn6d4ckHRwhENSjM82Rn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:59:50:94:55:b0:dd:02:06:a9:4c:d2:7f:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=450e9e4e0a697e98f8dac1231985573aa988aec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:7c:2b:9c:73:88:39:0f:40:28:60:9a:a1:
7f:89:bf:f1:b0:98:f2:19:3a:84:33:fc:e7:62:4b:
3d:4a:62:ac:df:35:25:4c:24:34:62:bf:82:70:a3:
c6:48:74:25:8b:f0:b6:d1:9a:d2:95:a5:d7:b9:a7:
e6:ba:47:34:8e:87:12:75:2e:a3:66:43:12:61:f1:
e0:56:22:05:49:8e:6c:c7:af:a2:f4:d9:eb:74:e7:
f2:1c:dc:a4:b7:e2:9d:00:65:d8:ce:7b:b3:6c:cb:
69:b5:a3:bd:5e:89:cc:7d:91:87:9c:b8:ee:17:79:
ac:7f:5f:74:de:3a:38:4c:a7:ae:71:41:b9:be:3d:
93:41:5e:56:39:27:11:eb:49:46:99:68:bc:fb:57:
c4:b5:86:56:a7:1b:3b:0d:de:3b:e8:d0:9d:ef:bb:
56:ca:3f:82:b0:01:3f:b9:0f:c4:88:c6:8f:40:0e:
7d:ee:c2:bd:ba:e8:14:e5:c9:df:0e:89:90:fb:f7:
23:bf:57:0b:ec:71:29:76:a1:f9:f4:8d:e0:5b:d2:
4a:6a:11:b9:52:ba:59:5f:56:ab:9a:ed:ec:6c:a4:
6b:f5:55:07:d3:ff:f1:10:14:40:63:c9:6f:33:d9:
61:15:dc:2a:f0:0b:2d:89:5f:82:1c:b9:9f:7e:46:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0E:9E:4E:0A:69:7E:98:F8:DA:C1:23:19:85:57:3A:A9:88:AE:C1
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:83:92:6a:c4:d7:03:5f:24:ad:21:d5:e6:cd:47:d7:d0:ae:
8e:86:8a:7e:a8:cc:aa:1c:22:28:7d:11:26:f1:a0:fa:14:4f:
fe:7e:04:53:86:2e:65:48:8f:95:d5:88:38:e8:45:85:6c:46:
51:10:5e:64:96:9a:27:c0:cb:0c:2c:66:f9:07:b0:b6:8c:90:
be:2e:f3:6b:b5:01:2a:ea:d4:0e:ce:c5:11:30:45:28:e9:b6:
70:5e:5b:ad:73:27:7d:a8:a3:2a:d6:65:99:42:08:82:e1:de:
4f:85:bb:16:2c:62:76:15:cb:69:64:5d:94:47:bb:15:9e:5e:
ec:ca:d2:9f:f7:9c:11:a4:cd:7b:17:3e:68:77:48:c9:ec:73:
52:87:c8:19:18:47:72:f7:49:3d:9b:94:d0:fc:a8:01:9d:7f:
63:31:ff:46:da:69:86:8b:b7:5e:1b:f6:6c:1a:af:6e:e0:71:
16:c9:54:0c:32:e5:f5:ac:73:16:9c:fa:d6:0f:f2:68:ea:9c:
1d:2b:53:9e:e6:00:b1:2b:14:0e:5f:d8:56:76:da:83:68:7a:
e3:53:20:75:84:61:49:8b:ae:47:53:98:4f:e1:f3:5f:45:85:
2d:7a:ee:a0:42:48:08:cd:99:04:22:8f:5b:fe:62:90:39:5a:
ca:b3:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:42:04 2025 by rpki-client