Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: subePvOwtZC/WNh/qwvQlUiCkE9pkAUYCdVdIk8SFTM=
Subject key identifier: D8:6B:34:7E:4F:2D:86:6D:F3:11:E6:14:66:9C:85:40:FC:D0:8E:2C
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 0198D515C2CAFD444A1AD2BD38ACB30322CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0D7E
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: J6d+HlLUBmGPbZOFcuPTSQNcs+seNHiAwyhsrNO4uis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c2:ca:fd:44:4a:1a:d2:bd:38:ac:b3:03:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=d86b347e4f2d866df311e614669c8540fcd08e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:1f:c1:71:b1:d3:44:2b:da:6e:64:f5:f1:
50:1a:37:d2:93:e9:0f:91:58:86:72:c3:cb:aa:af:
12:a4:1d:f0:f3:1a:3a:1e:dd:3b:df:f4:2e:16:7c:
ee:42:1f:4b:13:75:18:c2:13:a0:5e:a6:f1:c8:02:
04:d3:29:19:ef:01:51:fa:e5:e6:19:21:97:97:0e:
1b:42:48:f0:d0:a8:ef:f6:cf:e8:72:3b:35:32:44:
c9:a0:93:20:c2:40:55:2d:33:35:7e:d0:7f:75:24:
4f:b3:4f:04:00:39:79:f3:cc:38:39:a3:d2:1c:8b:
4e:6f:de:bb:0a:ad:fa:e9:f2:b0:0b:e4:84:ab:68:
00:3c:35:80:58:06:6c:e6:22:f1:b6:07:da:a2:3d:
6f:96:3c:0b:9a:30:87:c9:86:74:da:d7:fd:36:84:
4e:ff:ee:49:f1:64:78:4f:22:42:82:74:1b:5a:b7:
dd:30:7f:33:05:a3:e5:04:6e:6c:6d:96:e1:95:93:
e8:80:9d:96:df:69:0c:7f:92:1b:b5:7a:81:fd:c2:
bc:23:c1:3b:53:ed:41:08:4d:f6:fc:51:d6:4c:46:
96:8f:c9:80:75:37:7d:dc:bf:e1:0a:95:f3:52:9e:
6b:e8:07:2d:5b:a6:62:61:3a:d0:ff:90:3b:f3:33:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:34:7E:4F:2D:86:6D:F3:11:E6:14:66:9C:85:40:FC:D0:8E:2C
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:40:07:bc:c1:e0:e7:0d:df:7e:07:36:69:62:52:86:ca:
87:10:40:99:38:c2:65:75:36:78:e4:c7:de:cf:2f:07:00:69:
2f:ab:c9:16:77:75:8e:c4:ea:ec:90:59:e4:ec:be:cd:6f:2c:
33:4c:94:1e:3a:1b:6d:f7:49:17:14:fe:37:d8:04:da:4f:e9:
11:bf:ff:cc:20:ec:62:b7:a7:41:24:aa:b0:f5:23:c2:bf:45:
5b:7d:6b:90:e1:33:cd:76:fb:51:9c:94:1b:94:d7:3d:51:3a:
71:20:87:32:2d:ba:8b:9a:32:24:9f:f9:8f:91:c1:61:a3:e7:
de:c9:f8:0f:f4:4e:47:fd:cc:bc:52:83:ff:ca:0c:bf:9a:e2:
eb:ff:c8:96:ca:b8:c6:d9:36:a9:6e:67:e4:c6:ee:54:81:18:
70:d3:f4:27:a5:9d:b4:08:71:5c:c8:19:78:d8:18:bc:1f:6e:
73:00:2f:bb:1c:dc:e3:12:d9:93:8e:8d:8f:43:b7:3c:ab:88:
6f:68:c0:87:a4:05:92:82:cd:37:de:3f:eb:14:32:8a:62:ec:
24:a6:b0:4c:1c:73:c5:3d:8e:18:25:9b:ae:ae:86:30:6d:93:
be:87:9a:51:c1:97:95:18:08:66:40:f7:9c:78:18:d7:4b:64:
e6:10:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:25 2025 by rpki-client