
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: 30S3Z2wK2Ijxf7tfDlzW6RWRCKw5hoWw8K64WItDucg=
Subject key identifier: BA:B3:36:BC:81:B4:7B:EB:86:3A:43:C6:53:66:75:D6:50:5E:A5:76
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 0198D4A7CA989C6D089023DB7D7A6100F2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 0275
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: uCsL5lPMaD6/BjsFcgYBzeK5Gnwzk23V7GnsUqFNZyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ca:98:9c:6d:08:90:23:db:7d:7a:61:00:f2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=bab336bc81b47beb863a43c6536675d6505ea576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:48:45:38:ae:67:67:3c:52:7d:41:8f:1f:
34:a5:8f:08:49:50:18:02:01:9c:54:c7:1b:52:59:
44:8e:c3:e4:d8:ee:a9:a3:75:71:39:43:00:5d:c6:
51:be:2d:0d:43:9b:da:33:6c:56:7a:f1:4e:84:2b:
21:32:4e:0f:9e:91:86:66:36:25:e1:e6:9f:73:0b:
b8:b2:c9:ea:4a:05:d8:dc:b2:ab:a9:ca:aa:46:3c:
8b:45:18:15:69:dc:f8:ce:22:b4:3c:68:b0:6c:41:
e2:dd:6c:a7:18:6e:4a:dd:3d:8b:0a:cd:e5:20:0b:
d0:4b:53:c8:48:f6:9f:18:ee:81:fd:da:de:b6:e0:
07:2e:da:c3:ff:6d:11:17:7e:2e:bc:de:3e:da:5b:
32:41:7b:f4:ec:66:6e:f1:be:d2:70:66:1f:65:1b:
07:3c:b3:71:cf:94:82:74:79:78:25:99:a4:09:8d:
50:03:39:58:69:d9:75:e2:bf:f8:c8:67:eb:01:ca:
94:c7:2b:c7:b0:d0:e3:ad:8b:da:78:de:68:93:f8:
7d:de:26:76:05:8e:12:8c:f6:7b:69:51:0d:89:c6:
d1:95:7e:63:56:04:cf:10:0f:db:a0:bd:39:43:49:
20:c0:82:93:fa:8f:d2:87:cf:77:df:b1:59:96:a5:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:36:BC:81:B4:7B:EB:86:3A:43:C6:53:66:75:D6:50:5E:A5:76
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:d7:23:66:5b:09:3b:c4:aa:90:ef:f1:9e:d4:33:0b:f3:
57:2f:9c:d4:54:50:8c:ce:a5:34:c2:cc:1b:c1:d6:51:43:bb:
7d:e0:91:68:0a:67:e3:19:fb:49:39:73:80:56:b4:89:2c:c4:
49:ae:d9:e5:e6:ca:66:80:26:7b:18:40:b0:dd:2b:31:dd:19:
23:86:23:1c:7e:79:d9:6e:cb:0a:d4:03:45:a0:e4:e2:f1:f4:
85:76:b6:d5:da:3c:c6:2c:fe:97:ed:78:e4:c6:87:33:a7:16:
73:cc:9a:86:08:41:d5:3d:48:0b:1b:01:22:18:65:22:8c:aa:
b4:11:8e:bc:d2:7f:05:9e:0c:b2:6c:e8:6d:c1:48:6f:f4:50:
4c:8e:e8:58:02:e8:39:2c:d7:25:dc:37:a9:cf:d9:2a:fd:ac:
b6:3e:b6:1c:9a:e3:e8:ee:b1:25:74:8e:ef:cb:e8:cc:66:6b:
e6:30:96:4a:49:57:60:d3:04:a0:0f:9c:21:1a:4b:a7:57:39:
da:4e:97:3b:ef:c6:74:59:fc:6f:e9:09:48:ca:c4:d3:0c:7b:
5b:5d:59:47:18:cc:d3:4b:d6:7f:4d:de:9f:1f:bf:68:fc:c4:
35:e1:42:d2:26:e1:70:91:0b:a4:74:32:51:dc:d3:5c:ab:ef:
13:23:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:49 2025 by rpki-client