Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: jYazXrucahFZ8qF51QEohC2g9+EfN8ZrEXHqdyvkiOE=
Subject key identifier: 1E:2C:F9:C6:F0:D6:92:7F:DB:85:71:05:79:5A:05:AF:7A:5E:1C:11
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 0198D66142DFF5D3C567310EC2FBF3E3EAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 030A
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: 1-mbK63EZxL8v4V6vFmj_lwXzRxM.roa (hash: JWU55a5ri6Rn4UB9DqsCMDblGiRbnZJJXlkoHYetX7A=)
2: tUPB9TmrvRG46ngHubaYKYvn04E.roa (hash: rsksbLJqTJnjomTHQ1GVXbsT6pXd/mYYQ2loIuCMTYg=)
3: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: UfGqYtahNboZdcyd6zHYuzhL1GhYXnqhqn1a86v46qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:42:df:f5:d3:c5:67:31:0e:c2:fb:f3:e3:ea:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=1e2cf9c6f0d6927fdb857105795a05af7a5e1c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:e6:fd:12:c5:e3:3a:a4:75:81:9b:25:7b:
8c:99:37:5c:22:9e:b3:7a:3b:39:cd:af:36:3e:b8:
90:32:2d:bd:ac:52:6d:2a:28:78:75:de:87:78:af:
fa:3a:99:b4:27:97:66:de:e6:65:06:47:b4:ba:ea:
64:e8:47:dc:34:7a:1e:42:4e:6e:05:12:cb:89:cd:
38:d2:dd:b7:48:db:af:a9:4f:0a:d7:4d:e2:df:9e:
56:d5:c5:1a:16:4e:80:fc:fa:46:32:2a:ab:d2:92:
19:b6:8f:4c:d2:36:ec:ae:59:b7:40:cf:e1:e5:83:
b9:93:62:df:48:d8:6f:51:c3:3d:c1:8e:1b:1e:83:
a3:b9:be:b3:26:c9:d7:f3:c4:57:a2:ea:73:19:3b:
23:1a:b7:3b:ef:9d:bc:6a:bd:e9:cf:ce:18:90:46:
16:d8:c1:e7:94:f5:dd:f3:fb:f1:5f:15:2b:3f:d5:
ee:3f:22:14:6e:78:de:e2:1b:7d:57:49:05:11:93:
97:d9:3f:fa:a9:9f:ca:a2:39:57:9e:32:52:2e:63:
60:e6:7d:9e:9b:b5:59:62:e8:ad:e8:de:77:26:93:
ff:b5:d4:8b:6e:14:76:a2:a4:b6:cc:83:53:a1:e3:
c7:b2:94:f7:bd:ac:52:ab:13:fc:03:3a:22:05:24:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:F9:C6:F0:D6:92:7F:DB:85:71:05:79:5A:05:AF:7A:5E:1C:11
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:0c:7a:2f:f2:0e:a2:91:99:34:f8:1b:8a:82:17:2e:63:
3d:72:45:60:9e:95:47:46:c8:5f:3d:af:51:3d:64:cd:2e:41:
7c:1e:45:5c:68:50:42:7e:37:b6:b1:73:0d:22:fe:7e:50:70:
01:bd:9d:cb:6c:a4:2d:5c:e7:93:f5:a6:9d:05:68:68:04:33:
95:cb:70:d9:7c:bc:7b:9a:92:2d:61:6c:41:dc:60:18:26:ce:
55:8a:55:e5:a4:3b:f3:75:19:a0:7a:3f:65:e8:24:c9:4f:b5:
73:ca:24:f3:7e:a0:b4:f3:20:69:fe:8f:aa:1e:a5:e3:6a:bf:
57:10:7d:ad:42:de:33:05:ed:1c:3c:9c:72:a4:d4:1a:09:13:
ca:0e:97:ef:b8:b9:c0:31:ca:a0:f5:37:66:f7:fe:00:72:54:
ce:8b:44:8e:a4:a9:e7:d9:e4:6d:13:2a:a1:2d:ea:6d:9c:61:
fc:fb:6d:97:67:90:14:a3:d9:da:3e:58:88:4d:65:09:63:62:
79:72:27:eb:86:1c:57:6b:f5:dd:71:5b:49:dc:8c:ff:3c:24:
2b:c3:64:b5:e4:8f:da:6f:fa:a9:cd:a7:9d:3e:aa:b6:a9:2a:
60:ca:24:13:19:b4:09:70:63:a4:c1:5d:3d:e6:5c:53:7b:e7:
6e:64:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:42 2025 by rpki-client