Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: 5uu2wOdmq38CvKUf32m35AgO3FR/8cFo5LBB7y/qXtI=
Subject key identifier: 00:5C:51:D8:37:00:C7:3F:C5:98:9C:F4:19:51:47:1C:2C:64:3E:65
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 0198D73B0F2BBC532E4F570A557B2424343B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 1511
Signing time: Sat 23 Aug 2025 14:00:28 +0000
Manifest this update: Sat 23 Aug 2025 14:00:28 +0000
Manifest next update: Sun 24 Aug 2025 14:00:28 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: pCVDfsveqGznqY8vw8BKm2sVDqoRUdxN8o2hGl3FePM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:0f:2b:bc:53:2e:4f:57:0a:55:7b:24:24:34:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Aug 23 14:00:28 2025 GMT
Not After : Aug 24 14:00:28 2025 GMT
Subject: CN=005c51d83700c73fc5989cf41951471c2c643e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:52:cb:4e:40:07:aa:de:a9:7e:89:ea:9d:
01:6b:9f:10:25:f2:0a:ec:a2:a8:23:d5:d6:ca:b7:
67:bc:d6:38:df:99:73:9c:e7:02:7f:9f:a7:f2:c3:
04:c0:93:6e:b5:f2:49:65:53:4d:b6:43:5c:35:1e:
03:33:0d:4a:79:2d:8e:5e:b7:cd:35:83:65:9d:e1:
bd:5b:3f:5e:1b:95:46:f7:87:4f:98:90:aa:61:e1:
65:6a:59:7e:47:a2:b4:a3:87:e0:6b:78:5a:c1:9c:
1e:7c:3b:f5:a8:f5:fb:85:0e:1e:50:3e:03:eb:95:
8c:9a:b2:e0:5b:af:07:0b:a1:2a:9f:20:9a:24:73:
ec:09:e8:8c:a5:0c:01:9b:b3:7d:69:a7:db:83:f5:
37:cc:8e:86:65:3f:ef:0a:99:fa:a9:9a:e6:73:57:
68:34:ff:eb:b3:cf:1e:2f:88:99:51:54:29:0b:8e:
90:01:76:e9:6c:f2:f3:72:a6:d7:3c:b7:9a:a6:39:
3b:13:11:0b:29:aa:6d:76:64:1d:c1:14:fa:c5:06:
33:32:ec:b3:78:b3:6e:9b:35:e6:77:1f:d2:17:3f:
74:72:1b:fa:cf:e2:d9:65:15:d1:7e:27:5c:74:83:
60:54:38:7a:03:21:2f:ac:a9:af:1e:ea:19:4a:71:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:51:D8:37:00:C7:3F:C5:98:9C:F4:19:51:47:1C:2C:64:3E:65
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:14:11:54:b2:82:e5:13:e1:f1:71:58:fa:61:50:b3:4f:ef:
c6:3c:87:26:da:34:a1:c1:a8:4c:3c:d1:48:4c:5a:41:17:84:
b9:8a:4a:4e:cc:ca:1c:5e:62:d2:9e:e6:48:ad:34:47:fd:e4:
eb:43:c7:44:60:fa:98:c5:d9:67:01:a3:6c:3e:f6:0d:77:07:
17:85:66:85:7d:a7:6f:82:f0:d5:59:82:5c:89:19:81:87:da:
e8:a6:d2:f2:bf:c5:63:0c:86:05:77:86:dd:1d:ff:90:e7:4c:
75:58:3a:6b:14:b6:ea:a1:a7:e6:bc:14:49:07:e5:12:40:71:
03:97:a2:fb:1a:22:f9:5a:69:19:15:76:02:b6:db:72:27:70:
03:16:a8:07:6b:a8:6b:02:66:8d:00:a2:ee:93:0b:5f:7e:34:
99:51:81:54:fd:a7:d8:e5:b2:b1:be:ee:42:f8:7e:f5:c5:ad:
3d:ad:26:46:75:2c:56:52:df:04:cf:b5:94:d8:f5:ac:b0:b3:
f6:51:cc:2c:de:08:78:ee:ed:29:e8:5a:fa:49:89:f4:de:fc:
bf:f4:f8:2c:6d:26:82:3a:d8:e4:fa:96:e1:3a:f1:03:c6:44:
d5:60:f2:22:19:6f:3e:03:59:9a:86:42:7f:7f:e4:2d:07:eb:
81:7a:c9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:14 2025 by rpki-client