Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: a02ZFXzjJLKBBCwE2nIO3EYDV6IcrRdt7er//LKBJXI=
Subject key identifier: 87:01:42:39:E3:F8:17:20:D2:76:7F:3C:27:5E:5F:06:94:5C:49:B2
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 0198D54E9D23DC0C80C9915944ECFEFEA67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 112B
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: kSm6hKaPN9ST9JdPHtNWyzRqZdIkty35dmUyqbDHwtk=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9d:23:dc:0c:80:c9:91:59:44:ec:fe:fe:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=87014239e3f81720d2767f3c275e5f06945c49b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:77:e3:f4:e8:2f:01:26:6d:f8:d9:d9:a9:
91:2e:66:a5:22:68:97:ff:fc:d7:34:7d:0a:63:ec:
cd:cb:e1:36:8e:e6:24:22:74:d9:36:fd:a9:7f:18:
5c:cd:66:e6:dd:c6:63:ad:d0:6f:6a:6c:7a:da:10:
6b:4c:a1:69:1c:77:b8:a5:06:61:eb:45:0c:4e:a4:
5a:7a:af:a8:95:06:00:06:9b:7a:88:50:db:f5:41:
ae:2c:0b:a5:c1:43:cc:de:1b:6d:de:77:e9:72:14:
90:2f:97:0f:3b:33:e8:79:61:8b:db:6b:6f:54:96:
14:42:1d:50:fb:5d:ba:31:8a:04:9b:9e:35:b9:c3:
54:24:c0:a0:e9:37:48:d5:eb:95:92:cd:1c:fa:1f:
46:3e:77:51:a0:94:3b:2a:23:64:aa:75:f9:96:e4:
77:0a:40:82:7e:b7:51:de:20:a1:c9:e6:9e:d6:5e:
49:f7:38:e6:d7:69:bc:31:47:39:23:80:77:37:f6:
b2:a1:ea:6a:aa:bd:81:b4:b4:3a:18:3b:db:84:28:
1c:dd:eb:e9:25:ae:3e:88:a6:a3:cc:d4:26:df:11:
52:f5:13:6d:7d:c2:23:74:0c:f3:ac:a2:e8:87:fa:
20:dc:a8:bf:8f:7b:81:cb:6d:c1:7c:53:e2:f5:33:
d2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:42:39:E3:F8:17:20:D2:76:7F:3C:27:5E:5F:06:94:5C:49:B2
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bf:db:dc:6d:89:76:3a:fc:ba:50:6b:43:cc:89:92:12:4c:
7a:f5:c0:d7:88:41:d4:d2:f3:78:72:a9:cf:99:fc:dd:7a:81:
bd:48:af:a6:86:c6:35:27:9e:4b:81:e6:21:bb:e0:dc:95:04:
b9:ec:51:64:9b:68:91:97:bb:bc:18:a3:ec:bf:11:41:a6:e8:
97:e1:8b:e8:74:0a:19:8d:f7:7c:b8:c6:96:50:ae:68:3a:96:
81:27:a4:05:d6:11:a2:e8:29:97:b9:c5:8b:44:5e:de:30:36:
ee:8e:fe:21:9c:81:cb:f8:f4:fa:11:a0:45:5a:f8:31:a3:d3:
31:4f:b2:cc:c6:8c:4a:8e:e4:9d:6e:be:ae:c1:8c:15:21:12:
63:38:8d:37:5e:f7:6c:62:fe:b9:1b:84:c2:4f:43:7c:f8:eb:
10:0d:bf:fb:6e:4a:c7:10:ab:1f:97:06:56:1a:22:0f:e2:04:
32:a8:60:dd:fd:dc:cb:e5:9d:7f:9a:a4:f1:42:20:88:0e:b1:
d0:c0:a9:bd:e1:84:c2:a2:6a:5c:83:32:57:0f:b5:00:eb:e6:
da:49:d7:f0:c4:02:63:39:fd:e7:79:9b:20:12:e6:73:e5:49:
c8:4a:0d:4f:ba:21:ca:33:19:b9:4e:a6:5f:5b:04:91:94:c8:
67:37:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:55 2025 by rpki-client