Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: leugi2Al0M7eav2GHIkpKpwHtKe6G3PZiG0TzGMinDw=
Subject key identifier: 18:29:EB:98:15:70:60:DD:CF:68:11:BE:8C:57:97:5D:F2:D3:00:1B
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 0198D65FBF6ED93F26E8BF4C03A0E8C06720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 055B
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: tUoDyI5YUi6JwNyMBdKGajqfbp4m0xKB7Vuv2HHw+VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:bf:6e:d9:3f:26:e8:bf:4c:03:a0:e8:c0:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=1829eb98157060ddcf6811be8c57975df2d3001b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:a8:86:ab:79:b8:0b:a7:05:3a:e8:8d:06:
5a:2a:49:7c:de:2b:70:03:8c:7e:d3:ca:af:1c:8a:
77:8d:a8:f5:f7:7d:40:fb:2c:dc:2c:79:bc:0e:a4:
ea:77:6b:ad:59:8c:72:09:f1:63:58:95:85:1c:54:
ab:27:01:24:00:ff:b5:81:df:e0:28:66:2b:65:5c:
f6:2c:35:29:b5:e4:c2:de:b2:49:12:65:1a:56:38:
cf:96:b2:58:11:39:00:73:f7:ff:0c:95:1b:2b:59:
cf:27:60:2c:c9:c0:77:eb:4a:60:41:7a:03:82:c8:
d7:b3:02:98:5e:b8:0e:11:29:63:28:cd:76:fa:17:
b9:35:49:50:f4:e1:a4:69:d8:d0:9d:a1:8d:4d:0b:
22:f8:65:ae:f5:d7:5e:3b:f2:f2:a2:f8:55:7d:03:
28:18:da:c5:67:26:1d:48:ed:62:e4:a5:97:6f:31:
cc:30:a9:1c:a9:03:6c:08:0d:af:e3:dc:6d:0b:fb:
41:16:43:9e:f6:99:0a:11:5f:b8:f2:7e:d1:ae:a1:
3a:5d:f0:5d:b5:6e:98:50:5c:56:aa:fc:da:ee:ee:
48:33:14:05:dd:f0:f6:eb:c0:ea:0e:3f:cc:29:53:
03:77:54:6f:ab:5b:07:cc:74:cb:99:92:18:f8:7f:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:29:EB:98:15:70:60:DD:CF:68:11:BE:8C:57:97:5D:F2:D3:00:1B
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cb:65:05:07:fd:86:6f:94:46:d9:f4:d3:eb:d8:aa:71:e4:
e4:a5:16:4f:09:48:37:16:10:15:27:6e:ff:15:21:7a:58:58:
51:17:7a:ce:6e:1f:ec:a3:40:20:6c:9c:1f:c2:1b:94:6c:3a:
d1:05:ce:7d:5b:db:03:d4:d4:1b:4d:42:85:0f:ee:4a:6e:b8:
2f:d3:32:7a:cf:83:c6:9e:62:3e:68:4e:ec:4a:b2:f4:92:9a:
7f:b0:33:0a:2b:66:53:21:8c:b9:ab:4a:7d:4c:e8:fb:3c:20:
fe:94:16:71:c3:1a:89:33:50:9b:42:57:a0:e8:c5:f9:c8:72:
45:db:9f:20:bc:00:21:5a:e4:3d:90:8e:d8:4b:f7:ae:93:8f:
6d:0b:eb:dd:3a:19:c4:46:0a:1b:16:72:7d:18:4e:94:57:bf:
70:9e:40:16:80:d4:87:fb:12:2a:ee:b8:85:85:4b:4a:78:ec:
b9:d2:5e:d6:fa:ff:df:34:f5:1a:6d:c9:0e:6b:e6:fc:85:de:
bd:9c:08:4e:d3:b3:1c:bc:59:70:5d:52:40:81:20:56:06:99:
82:53:6f:ac:67:d7:3f:48:5e:20:ee:8b:29:c9:d8:82:f8:62:
3b:9b:bc:c9:84:f4:70:06:03:11:eb:3e:58:e4:f7:6e:5e:0e:
22:1e:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:54 2025 by rpki-client