Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: 2Np2Yw5XAViqbc/B8Yz09p4pRRqlCuSRgn7hsWXHL3g=
Subject key identifier: 38:4D:4B:F4:AB:86:A4:C4:F4:B9:35:46:63:3C:24:FA:41:7D:C2:2D
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 0198D5F170D63F76D299BB21F7C54CC01882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0499
Signing time: Sat 23 Aug 2025 08:00:26 +0000
Manifest this update: Sat 23 Aug 2025 08:00:26 +0000
Manifest next update: Sun 24 Aug 2025 08:00:26 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: A8q4SCpRLQddTTTF+pb67s1sLzxzbN/CMhEp6aqbY6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:70:d6:3f:76:d2:99:bb:21:f7:c5:4c:c0:18:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Aug 23 08:00:26 2025 GMT
Not After : Aug 24 08:00:26 2025 GMT
Subject: CN=384d4bf4ab86a4c4f4b93546633c24fa417dc22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:09:ca:f7:3c:a8:f7:c1:d5:7c:86:b1:f0:
ba:66:66:a1:2e:fc:47:5f:36:c9:2e:37:91:87:05:
c5:0e:b2:49:d4:11:70:eb:b6:0c:bc:dd:d3:0d:86:
91:55:d8:17:30:ba:26:a3:92:d2:b1:28:6a:bb:78:
82:8a:4b:b8:2c:77:ff:7b:21:07:80:8e:87:6b:32:
fa:e1:fc:f0:40:f7:38:75:da:c2:5c:a2:b9:75:ed:
b3:e1:a9:66:df:04:56:64:71:83:3b:9f:78:3e:26:
83:af:6e:a5:e7:79:41:0b:38:31:0b:61:58:75:fd:
2e:8e:72:09:30:6c:4c:74:4e:75:70:c1:71:5a:0e:
81:78:cf:2d:ee:b8:60:0f:2f:62:39:3b:1c:80:1c:
20:00:d2:68:7c:59:05:e0:03:91:88:9c:da:a3:16:
f7:0a:bd:fe:b5:30:8b:3f:4e:6f:3e:75:e0:9e:91:
2b:17:93:d3:54:5a:83:12:85:c3:d2:da:84:4e:27:
3f:93:de:ec:74:e1:7d:67:34:c7:82:54:80:1f:1c:
82:b8:53:fb:5f:a0:18:44:5d:25:63:b5:fb:9c:86:
04:48:09:6a:6c:95:4f:f0:57:62:88:fc:54:f4:01:
fb:5c:a4:c6:72:f3:3f:7b:e1:99:7c:34:8b:83:34:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:4B:F4:AB:86:A4:C4:F4:B9:35:46:63:3C:24:FA:41:7D:C2:2D
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:55:68:a1:d5:7b:78:69:b1:30:2f:5a:94:6e:a0:36:38:
31:5e:14:0a:f5:d8:e4:79:9e:e1:c9:c8:46:0b:13:f8:de:d1:
cd:ab:a4:d3:eb:47:73:7a:d2:1e:7b:09:9a:75:f0:3e:af:73:
25:75:47:f0:ca:8c:4f:24:38:18:eb:f9:00:5c:36:16:b5:67:
24:e6:c1:6d:30:82:fb:76:70:83:4a:e2:a8:65:16:73:c5:ee:
d7:ac:e7:a1:4a:cd:6b:75:05:61:c8:96:1f:ce:41:4b:37:20:
e7:63:f3:50:fb:0f:bf:ca:d3:26:bd:f8:3c:3d:ea:af:15:00:
c9:b8:a7:d0:b0:f3:f2:46:31:f8:e5:99:fd:6b:b7:bb:2c:ff:
8f:fa:fc:39:f4:2c:14:51:f7:33:46:1a:57:7d:9c:6e:90:cd:
6f:88:90:96:71:f1:25:08:4c:3a:6c:ec:90:09:6d:2b:ed:05:
c8:e0:a1:82:16:b3:b6:ab:53:f7:e6:c1:f8:93:d4:01:9f:43:
16:a2:14:b6:8a:13:d3:a3:79:d5:f2:f8:1a:05:9c:99:7f:e0:
8e:69:4e:b2:14:f8:5a:88:07:88:92:80:5e:61:9f:6f:ac:9c:
4d:4e:2b:ec:6b:02:8f:21:0f:8c:cd:e2:e0:ea:d7:2d:56:a3:
a7:cf:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:01:23 2025 by rpki-client