Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: mkZG+/1ecj5Ovx23rHYCt848VKWj209j/gP4GiL+f+4=
Subject key identifier: A5:8D:E5:D4:8E:AD:3B:C0:4B:D3:D5:35:A3:BD:10:B8:93:B5:26:E9
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 0198D5F18BA16C155498774E9D402DE59B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0955
Signing time: Sat 23 Aug 2025 08:00:33 +0000
Manifest this update: Sat 23 Aug 2025 08:00:33 +0000
Manifest next update: Sun 24 Aug 2025 08:00:33 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: YycVUWrmG1epskMuoFbHM2FN+HZMeQgqYVi4yHbeMgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8b:a1:6c:15:54:98:77:4e:9d:40:2d:e5:9b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Aug 23 08:00:33 2025 GMT
Not After : Aug 24 08:00:33 2025 GMT
Subject: CN=a58de5d48ead3bc04bd3d535a3bd10b893b526e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:82:1e:c0:4e:6d:33:22:e9:d0:0f:a6:d7:
4e:de:d7:b4:b8:3d:68:e2:0e:54:f0:b8:ea:e6:b4:
2a:78:a2:cf:06:b9:e1:84:cc:85:2a:96:42:d7:75:
51:63:39:2e:54:4b:40:a0:df:99:ed:54:95:bc:23:
47:81:40:b9:bd:97:b4:4f:af:d6:e1:0c:11:c8:da:
f9:a0:05:e7:6d:8c:23:33:b7:bb:ec:a2:cc:ac:49:
08:16:74:58:09:1c:94:27:bb:a9:b9:bf:8c:5a:15:
b1:f7:df:a3:83:07:4f:31:d5:7d:7b:42:a2:e2:bf:
f6:c8:5e:16:00:ad:a9:d8:7c:cc:ce:e6:f4:ec:f6:
e5:3a:6a:9e:b5:f2:94:83:07:be:c6:36:b7:c4:ed:
97:7a:9e:ae:9d:25:5a:60:4e:6c:cf:a2:35:07:12:
79:0f:17:7d:57:02:b3:04:32:82:9b:07:6c:91:da:
1a:a7:94:9a:36:44:7e:25:01:4e:e0:20:25:18:10:
fb:db:19:e4:0d:18:10:eb:9b:1a:65:d3:4e:36:ce:
fd:3f:0f:ce:48:53:cf:a0:8b:e8:97:0c:b7:69:13:
70:b8:14:1c:d6:02:3a:3f:01:b3:eb:05:d7:75:ac:
9a:2f:1e:94:90:aa:ca:3c:28:6b:0a:f5:c1:11:f9:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:E5:D4:8E:AD:3B:C0:4B:D3:D5:35:A3:BD:10:B8:93:B5:26:E9
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:be:eb:ae:d2:b2:c4:48:18:42:f3:cc:a0:b1:84:e4:78:36:
a4:1d:8c:27:e8:20:45:b8:5a:85:13:47:9f:bd:4b:52:0c:2b:
31:90:56:ad:d8:1b:3a:d8:c7:8c:41:b5:6b:b5:66:1d:65:b9:
9f:35:d7:07:03:39:75:2a:23:b3:fd:52:bf:93:45:f5:9d:51:
1a:05:72:f6:4a:21:d9:5e:d7:15:b7:6d:ce:0a:8e:67:4f:64:
0a:f0:25:23:ca:18:1f:03:a6:2e:23:e6:12:6f:3d:3c:c0:73:
1d:c1:e3:64:ed:42:a9:85:8d:3d:7d:75:c1:3c:b7:e1:4c:d2:
bf:b0:e5:44:54:4a:3f:1f:70:95:77:eb:b1:7c:f4:c9:0a:4b:
4a:67:5c:24:2f:58:c1:d1:ad:4d:a9:5d:d0:b7:38:96:ba:5f:
4e:41:e7:e8:ce:68:1f:8f:d7:38:82:0d:78:21:6b:01:6a:59:
74:c6:03:34:bd:4e:b2:e0:03:66:bd:24:ed:13:b0:d7:88:bb:
50:7c:ce:bb:6b:b1:75:15:d8:ed:f3:23:ab:aa:f5:28:b4:2e:
5e:bc:17:13:25:b8:07:64:65:8e:c3:cf:47:6b:58:e9:24:e1:
c4:04:00:49:a9:a8:71:2c:91:58:51:1d:05:a2:d7:d0:2a:ce:
3f:c4:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:31 2025 by rpki-client