Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: qku70v04AtnqFNrmkWJfQwmKbTrjdBSiFPcSadfviyQ=
Subject key identifier: C4:70:13:4C:EC:40:6E:5D:3C:B0:66:EB:59:4C:39:90:24:5D:EE:62
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 0198D6604F5A4953A258D662382A2CDBD5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: IWgEMGO1UiVL90IidRwVRJnaDItGoOMWZUPTOMF4iQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4f:5a:49:53:a2:58:d6:62:38:2a:2c:db:d5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=c470134cec406e5d3cb066eb594c3990245dee62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:f5:26:e2:37:89:ca:c6:96:f9:da:f4:86:
94:14:3b:15:9d:ee:7d:d2:c6:45:68:e8:a0:73:30:
b4:60:c1:54:e3:a4:5e:9b:c6:97:74:94:66:30:b6:
bf:c6:52:2f:62:92:79:b1:b4:6b:69:6d:69:9c:aa:
95:11:51:aa:20:b6:42:cf:c0:37:f4:b2:a3:9a:98:
6f:27:89:8a:df:87:a9:e5:91:da:aa:bf:6f:1f:f3:
4c:d6:22:03:20:f8:7c:d8:74:a5:93:d6:c9:bb:1a:
78:78:ae:8e:3e:a6:60:16:64:7b:cf:c4:5a:e4:88:
26:85:5b:47:52:d4:5a:59:77:89:64:34:00:fa:07:
fc:34:fd:dc:32:be:b1:85:47:ec:89:b1:93:a2:79:
4b:84:f4:91:82:81:df:48:5f:ee:6e:61:67:22:32:
7a:4d:51:2d:97:ce:83:1a:30:57:46:9c:07:a5:70:
a1:cb:61:81:90:ef:4b:c2:5d:81:b7:bf:22:9c:3d:
74:ce:1b:0a:0c:78:d8:e1:c2:79:09:49:f9:07:00:
26:60:c4:eb:6c:a3:13:f8:e5:78:93:8e:ee:62:1d:
d4:de:6c:e8:ff:ab:cf:80:76:b9:a2:74:b5:03:8a:
34:d4:84:99:31:e3:b4:b5:78:d1:b8:6c:3d:ec:03:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:70:13:4C:EC:40:6E:5D:3C:B0:66:EB:59:4C:39:90:24:5D:EE:62
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6c:be:6e:36:4d:07:72:46:10:75:58:77:7c:fd:44:76:16:
4d:63:8d:f7:33:8e:b0:f2:f2:e8:e9:e2:1f:f6:85:80:11:02:
5f:6c:8c:f8:46:51:25:d1:e7:83:00:20:81:af:81:8c:06:98:
61:b1:35:fa:c2:b5:83:9e:da:c8:ef:fb:bd:58:ef:11:ba:67:
77:c5:38:30:57:a6:18:e7:56:bc:cb:6f:b2:36:af:28:db:59:
d2:27:ba:dc:0c:f1:15:3f:52:4d:40:5f:96:32:fc:91:17:0a:
f8:59:fd:ad:6a:cf:a2:ee:c2:03:4e:41:ed:c3:1d:1d:e7:9a:
9f:14:30:11:b3:fe:e5:d0:84:ec:84:45:ff:42:65:d3:d8:77:
6e:0b:42:6d:1b:db:0d:c3:23:03:ad:8f:b8:4f:dd:e7:9e:1e:
88:a6:14:b8:16:a2:7a:45:93:7f:dc:bf:9d:8e:d3:a7:27:b8:
4a:5b:40:3e:c1:5b:a9:03:65:9e:bd:65:c5:84:ae:7a:ea:cd:
1b:d9:42:e0:ce:06:59:28:6e:f3:f1:70:2e:a8:08:70:6b:2e:
18:0c:4c:07:b7:17:3b:bd:ce:ba:24:97:78:2f:c3:dd:49:27:
eb:fe:39:51:40:9d:ac:ed:72:7e:55:e3:86:1f:e6:4c:a5:ba:
44:91:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:37 2025 by rpki-client