Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: pyRYZ9ZfCpSABzZYOtEBAA5AT+h0tdUN+fNKAnsT/xY=
Subject key identifier: 8B:B4:2B:10:08:CB:D5:A7:08:FC:5F:21:CD:81:AA:E2:F8:F5:85:A9
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 0198D661353B40FB7A4BCD76718D12C953E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: 1GOlf/jW+O2ekOYQG3ycuL8XyUyVjsGZZs4en7s2Fk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:35:3b:40:fb:7a:4b:cd:76:71:8d:12:c9:53:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=8bb42b1008cbd5a708fc5f21cd81aae2f8f585a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:28:70:58:e9:3e:d8:41:8c:d5:21:de:ff:
2e:8d:48:a0:aa:f6:29:af:10:4e:80:99:75:cb:b8:
05:ad:1c:72:ec:08:55:e0:ea:f7:be:62:f1:c9:b2:
d9:9c:d6:31:34:bb:00:5b:a8:24:78:0c:bf:5d:19:
76:40:34:1a:8d:77:10:f1:4d:22:e9:0c:ea:22:ec:
41:a4:1f:27:36:23:40:4e:ce:7b:8f:e6:11:b0:aa:
96:d4:34:5d:a4:bb:db:76:99:e3:55:01:b4:28:35:
d7:59:f3:e2:9a:22:f2:53:1c:69:f1:67:11:c7:4f:
55:6a:22:1d:12:87:b4:8e:4a:f8:7a:2e:f0:18:18:
b2:4b:c1:0a:2c:52:03:83:b7:73:d6:56:f4:fa:50:
b0:e5:a7:62:56:cb:64:a2:4e:3a:e8:f8:46:b3:b4:
52:70:81:81:79:b8:9c:0d:62:35:3f:ec:9f:8e:37:
6d:d3:17:63:27:6a:36:c9:4a:0f:fb:ad:9f:bc:e4:
d7:b4:e4:7b:fa:a1:b9:2c:96:22:60:aa:ad:37:b0:
7a:72:ea:e6:b3:a9:66:64:14:5e:10:e6:90:d4:7c:
59:7e:fc:60:5d:d9:d6:61:13:a0:7e:91:f4:9c:48:
c6:1e:ba:08:9b:aa:02:ef:6e:37:0b:09:9d:f8:d8:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B4:2B:10:08:CB:D5:A7:08:FC:5F:21:CD:81:AA:E2:F8:F5:85:A9
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:36:eb:9f:54:35:e5:80:d5:02:75:f4:b3:58:39:cd:a3:04:
b2:54:ee:65:0a:ce:76:38:74:bd:6a:d8:db:a6:ba:ee:1a:40:
56:61:56:e7:80:a6:2a:fc:a5:b6:be:92:49:52:cc:6d:f9:56:
28:c5:a8:e0:06:4d:86:39:d1:ea:80:0c:65:56:79:92:00:fa:
1c:cc:09:86:5b:6b:64:79:10:f5:e3:2e:11:01:6d:bd:07:89:
dc:4b:6d:bd:0c:92:33:35:7d:c3:3e:79:4c:2c:be:ec:cb:4c:
aa:c2:b5:52:48:12:f5:83:de:6b:b7:63:30:48:c2:01:7a:e1:
86:1e:d7:b3:2d:47:b5:e8:3c:99:1c:76:50:27:d9:9a:ee:fd:
3a:94:be:31:58:92:a6:62:a6:ad:bd:0b:a6:86:60:55:52:ca:
56:c2:93:db:0b:05:61:fa:0b:63:02:8c:7b:ca:65:ab:d6:62:
04:5c:66:66:38:c2:08:a3:76:b5:e4:c6:3f:ef:b3:c4:bd:69:
a7:46:b3:52:9f:91:69:c5:cb:2a:ac:1d:ff:76:a2:15:72:e7:
e1:fe:c7:ea:24:dd:a6:e1:70:cb:63:be:a4:e1:83:72:14:75:
d9:51:2b:e6:cc:69:03:2c:66:82:7c:2a:e8:df:1e:aa:80:31:
09:db:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:14 2025 by rpki-client