Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: 0tnppAB/ov2wW+UPivt268IZcYDSCAD44FwHuyMl26k=
Subject key identifier: CA:E1:FD:CA:7C:65:88:B5:16:96:72:F7:9F:06:09:77:A6:E0:ED:31
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 0198D660A5FE9511147D547A5CC9A46AF1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: w92Q4gaPwevkpLAAFgOWgwbT4PfJKsBziqcYKIifHuM=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a5:fe:95:11:14:7d:54:7a:5c:c9:a4:6a:f1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=cae1fdca7c6588b5169672f79f060977a6e0ed31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:3a:a1:55:91:a2:e8:cf:54:59:7f:6a:90:
1a:6f:40:9f:ca:d9:91:69:00:2a:8d:a6:ae:81:77:
81:66:64:dc:66:36:f1:5d:26:28:84:4c:fe:32:b9:
80:db:77:3f:be:64:fc:fb:f7:09:e0:7a:e6:d8:99:
89:15:f1:7b:d6:14:89:84:4d:a1:02:d2:b0:a0:67:
11:16:d0:b8:00:21:49:77:0e:13:35:d0:24:02:82:
09:5c:f9:e4:7e:a2:3a:02:03:b6:4f:8d:b2:5f:49:
82:42:01:ba:df:77:9d:a8:84:a7:81:7d:72:58:db:
b2:79:20:ce:f0:2e:ff:b5:97:7e:30:26:8d:63:7c:
d8:0a:bf:7e:9b:a3:99:b5:80:c2:ea:e7:8a:6d:93:
b2:df:46:16:65:bf:5b:6f:e5:f2:1f:9b:1c:39:3f:
2e:36:70:75:4c:0f:4a:d9:f2:ee:c2:f7:cf:17:b5:
05:d9:b9:aa:27:34:e3:fa:dc:44:53:16:86:a1:a3:
86:e3:96:ad:70:7d:f7:fc:83:4c:02:6c:00:96:a5:
f6:9a:04:e9:ad:f1:5f:0b:f3:43:51:81:ae:a5:28:
c2:6b:e8:ce:af:48:f2:53:b7:c2:23:1e:a3:ca:9f:
17:cc:3c:f3:d0:5f:f6:fb:52:07:76:2a:df:54:1e:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E1:FD:CA:7C:65:88:B5:16:96:72:F7:9F:06:09:77:A6:E0:ED:31
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ca:df:f8:cb:45:38:90:78:8c:61:31:20:56:e2:ad:11:39:
bb:e2:11:d6:97:75:a8:a9:2f:ae:0b:7b:ee:10:6d:a4:8e:dd:
06:78:ee:0f:c9:2b:15:b3:fb:02:42:50:db:ef:83:b3:bd:f6:
f3:25:c7:b5:8c:6b:89:b9:a9:2d:7d:50:49:e8:a3:2a:23:8c:
3e:8c:b4:57:9b:84:ac:3a:36:1b:0e:b0:cb:d0:ab:0a:21:0f:
90:80:bf:6d:94:25:fb:95:26:64:3b:e1:ed:87:39:4d:fc:7f:
7d:dc:00:6a:e7:7c:63:79:9b:3b:8c:2e:87:f1:23:c0:44:83:
be:1d:de:e3:81:bf:18:cb:b8:5e:84:c7:d0:f5:db:86:74:ea:
5b:14:f7:e6:ba:29:14:de:5d:a7:50:19:fc:3d:5e:41:d2:9f:
71:8d:cd:70:07:6f:b4:1c:60:60:6e:3c:67:ea:87:45:8f:cf:
52:fb:ad:67:0e:de:d8:9e:5e:fb:1b:15:54:cf:2f:46:df:18:
27:97:e3:4d:ea:7d:d7:f6:ec:f1:ab:c4:14:91:c1:0d:94:67:
c4:cf:83:00:19:9b:de:04:d8:61:65:83:34:f9:91:96:3c:4c:
b0:36:22:79:51:11:99:52:d3:83:e4:5b:a7:0a:b0:6c:ec:29:
ec:0e:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:32 2025 by rpki-client