Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: mDDEMrYvd3/iIJ4st/o+ZXn4fES2o5Ef9LAKQzr/H2Q=
Subject key identifier: E9:62:B4:57:A2:03:BC:CB:FC:58:5A:BE:07:18:5B:3B:37:1C:45:EC
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 0198D404581F42D82B5CD64BDC7C3EC12EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 042B
Signing time: Fri 22 Aug 2025 23:01:51 +0000
Manifest this update: Fri 22 Aug 2025 23:01:51 +0000
Manifest next update: Sat 23 Aug 2025 23:01:51 +0000
Files and hashes: 1: OpWpWHElMT6Em0cb46EU4-eZHBM.roa (hash: UkmgnvSBtnTTqSpYqYCCjTjePdoSg2sK2f+rfkHw/HY=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: kxP2qvcDt06CMUAwkyaMLvygh6h45kVp3FVwLYR0jrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:58:1f:42:d8:2b:5c:d6:4b:dc:7c:3e:c1:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Aug 22 23:01:51 2025 GMT
Not After : Aug 23 23:01:51 2025 GMT
Subject: CN=e962b457a203bccbfc585abe07185b3b371c45ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:42:2a:1d:2b:08:67:19:cf:cb:43:ff:52:
ca:5a:ec:dd:ca:c1:21:47:32:b9:61:56:87:ec:a2:
49:d4:ff:b1:26:bc:76:5c:bc:a2:da:54:ce:50:67:
9b:7a:4b:cb:ea:6b:cb:0e:3c:f5:56:a2:92:9e:e6:
6e:cf:eb:0a:bc:da:ba:33:bb:89:58:ef:54:17:91:
ec:48:e8:91:92:c5:52:60:77:fc:37:f3:7f:77:13:
69:3b:c6:1b:cb:86:66:d4:97:34:93:e8:e8:a6:d8:
48:2e:b3:84:52:a5:08:3c:19:66:37:cf:f7:1b:e8:
d6:aa:63:6e:86:44:8a:99:60:58:de:df:6e:a9:d6:
f7:4c:c1:52:f8:bf:90:8f:94:05:a9:1c:e4:5f:2c:
0f:ba:6c:cf:b9:5e:31:7f:33:f1:10:01:cb:dd:05:
3c:f8:d8:1f:53:bc:56:bd:30:b1:67:bc:12:c0:6b:
c8:5f:a2:81:e9:53:3e:04:b3:7d:55:7f:98:9b:a1:
e3:11:3d:28:b0:1b:30:b1:ee:bf:f2:71:b2:c9:be:
71:db:61:70:cc:38:72:f7:6b:56:ea:49:2d:19:c5:
83:9a:56:6f:33:48:6b:df:e0:da:5e:6b:f8:b8:3c:
e0:21:b6:1b:67:53:c7:43:4e:44:65:0b:19:c0:c8:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:B4:57:A2:03:BC:CB:FC:58:5A:BE:07:18:5B:3B:37:1C:45:EC
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:35:e4:5f:38:91:8d:f2:bb:7b:fe:42:8d:90:f0:5f:c8:6d:
3e:b9:03:cc:63:bb:7c:02:25:b8:30:e0:c9:f2:d7:af:df:81:
11:85:b4:a3:77:8e:6b:47:ce:2c:c9:a7:5c:91:6d:65:04:55:
78:7b:db:dc:bf:fd:65:0f:9f:fa:0a:fa:f7:f6:48:ab:20:8e:
99:08:1d:08:4e:dd:8a:b1:c4:d0:3a:7f:54:6a:c6:dd:93:31:
b0:90:3b:55:0b:b9:35:03:47:9d:21:23:e6:90:e2:53:d9:8f:
dc:15:dd:0c:df:4f:13:67:eb:a7:fe:ac:ec:b1:56:90:00:b3:
c5:a2:59:f0:1a:55:42:44:21:24:7c:44:53:e0:5d:c5:12:38:
3d:7f:d5:df:98:0d:6c:ff:7f:3b:db:07:7e:a3:1c:72:7c:8f:
be:5f:e0:a1:85:15:e9:0e:e4:b9:ed:ed:a4:76:da:d4:57:89:
1e:84:b3:34:d1:97:f9:31:23:0e:b4:2a:87:eb:75:b4:46:02:
a2:e9:d7:67:95:24:a9:65:b8:5a:01:d0:3a:f3:6e:72:cc:12:
e7:fb:f5:ea:e0:c5:4c:3c:36:ca:17:61:98:00:05:37:29:0a:
76:a0:66:33:b1:dd:58:8d:03:1e:27:7d:6e:0c:47:d1:b7:45:
50:7c:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:43 2025 by rpki-client