Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: CLr9MEYwsxj7mFRjmc6SeXtqxpx3MwiI+31SyRs0SoQ=
Subject key identifier: 5A:97:26:59:1A:6B:2F:D7:FA:F1:5A:74:CB:09:5A:92:A0:D9:D3:0C
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 0198D473146D996C9AC2368234DE8E570EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0E0E
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: iqiPasWJ6htpoRI70yAvc8JucOQTPQnzWw6czSoqgvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:14:6d:99:6c:9a:c2:36:82:34:de:8e:57:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=5a9726591a6b2fd7faf15a74cb095a92a0d9d30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:79:a9:59:29:12:e8:fc:95:45:99:d8:8e:
f2:7f:22:8f:67:49:21:a1:57:13:2b:9c:39:3b:e8:
c6:15:09:0a:c2:d1:c4:9d:79:e8:d0:e9:2d:63:15:
37:2f:96:af:d8:04:75:5a:63:b3:8c:04:14:6a:6a:
9c:45:da:68:14:fc:f0:4e:79:19:16:1a:20:da:ec:
a6:fd:74:83:1f:cc:ad:a2:91:9c:3c:2b:1b:b8:0b:
01:41:ff:4d:6b:38:37:18:7d:a9:61:f2:f5:1e:70:
d0:9f:b2:de:6f:97:9c:05:6d:e1:96:d9:cd:6f:6a:
43:2a:b2:a5:3c:7c:4c:2a:1a:24:05:03:d4:f7:69:
be:4b:b6:a7:8f:d4:0d:bd:d4:fa:63:63:2a:51:b4:
0f:c2:85:3d:56:66:2a:22:15:0c:c8:13:4e:be:c4:
60:fa:a5:24:5f:3b:ff:f2:bd:dc:b2:ed:7b:e9:21:
2d:0e:f1:e5:16:16:30:52:7b:42:f1:da:fc:88:cf:
08:a9:7f:ae:cc:7b:e1:86:da:f9:4c:58:10:a7:02:
cf:00:86:a7:bf:c0:0c:bc:ff:5d:dd:aa:0a:d7:73:
b1:0e:7a:7d:e7:87:72:57:44:81:d5:dc:45:b4:7e:
2c:d4:a9:17:70:05:42:be:9a:46:86:39:f3:e5:0c:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:26:59:1A:6B:2F:D7:FA:F1:5A:74:CB:09:5A:92:A0:D9:D3:0C
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c6:d3:7b:ce:e9:74:a2:64:a3:e0:25:b1:f0:7b:81:49:65:
19:10:46:77:a2:af:77:ce:e0:03:2a:4b:16:ed:de:ed:9c:6e:
06:aa:d0:a3:a3:c1:2d:d1:de:8d:be:b3:7a:26:36:5e:93:b0:
c5:43:a2:a0:88:2c:d0:c5:6f:64:4d:87:dd:f6:4d:54:e3:8d:
0e:e3:69:5f:71:35:b6:ba:d0:e0:3e:8b:25:86:d0:fc:4b:e2:
19:92:1a:86:98:2c:2e:61:9d:18:22:9a:05:73:b4:df:5a:f0:
42:f6:f5:e4:5e:5d:3b:fb:be:a5:ed:05:62:64:aa:dd:92:e0:
0c:ef:a5:06:a4:00:46:78:e7:0d:2e:8d:37:73:ff:b4:a2:3f:
91:cb:32:26:61:2f:27:36:f5:40:1c:19:5d:80:fd:4e:e6:00:
f5:03:63:ed:ce:3c:a4:91:3f:ef:4f:dd:9e:25:f5:30:99:8e:
4a:76:c8:1e:3f:3b:06:e6:51:a3:0d:73:9f:10:81:35:b4:6b:
b5:65:c0:29:ce:7b:95:8f:e5:a6:0f:be:14:82:5a:ba:3e:e1:
c9:2d:bd:22:e6:92:85:e4:65:fc:fe:70:9f:c3:8d:2e:c6:61:
a5:79:f1:7a:0d:0e:2a:3d:64:f6:36:4e:70:00:2b:39:06:94:
e0:a2:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:15 2025 by rpki-client