Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: fA+yfn7k66jBz6XVJ/aBgOLddvpLFClalUqrpXizzUI=
Subject key identifier: D5:96:DA:77:51:11:F5:85:A5:2B:0C:95:AD:F4:E7:60:06:D8:DA:EA
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 0198D5BBC34D429714FAA1C6AA28554792D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: TqGPjPbNVIf352BFIvVRid1V6jG17jVLfNvCLuCvc5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c3:4d:42:97:14:fa:a1:c6:aa:28:55:47:92:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=d596da775111f585a52b0c95adf4e76006d8daea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:1a:fe:92:0a:4d:6d:fd:ac:37:b9:74:ad:
a2:1a:3f:ad:9d:61:bc:e7:cc:ae:9c:60:0a:41:81:
d3:1e:4a:52:f9:a1:12:73:0a:1e:fd:28:a2:61:49:
73:f5:5f:e4:a8:73:1e:84:47:23:45:ad:56:79:9f:
d9:ed:71:ad:c3:36:7d:84:9f:20:5e:47:59:e9:06:
f3:db:e8:1b:7e:3a:22:ab:45:9d:7d:f0:88:df:cf:
a5:8b:c8:9b:a2:f3:57:7d:7d:d1:31:a4:41:47:e3:
46:92:15:96:79:7f:ea:85:e6:a6:f5:8c:6b:8f:a9:
e6:e9:fd:d9:16:ed:a5:09:c7:96:82:9a:1c:78:f4:
9d:67:7b:9d:6c:3e:57:87:e7:b7:2e:29:98:d8:33:
e3:ca:59:1f:19:7c:c3:4c:bd:07:ec:f7:11:fd:44:
1c:e0:cf:d2:09:c3:a7:38:5c:c7:5e:38:e6:06:eb:
01:16:78:bf:26:88:44:b9:f7:cf:59:1b:4c:52:6c:
d7:89:ae:bf:ef:c8:e6:97:d1:a6:09:4d:6e:57:14:
6e:36:3f:8f:ce:d3:3b:0e:b1:0a:06:51:af:a6:d9:
6b:e6:21:df:ab:9c:77:4a:57:d8:5b:66:f8:15:88:
fa:2d:07:c7:ae:2e:16:ef:e5:6f:4e:88:82:a8:f5:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:DA:77:51:11:F5:85:A5:2B:0C:95:AD:F4:E7:60:06:D8:DA:EA
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f7:50:07:6d:a0:0a:00:eb:19:08:9b:69:2c:21:b4:05:15:
96:b9:b6:10:80:32:2c:08:0e:f4:95:33:7a:27:f6:82:a4:32:
33:20:0b:f3:6f:a8:91:bf:16:eb:7c:41:6d:31:a2:12:4a:b4:
31:ad:c3:ee:a5:a8:80:21:c3:9f:23:04:a1:b4:dc:09:e3:dc:
ef:34:84:a8:2b:85:b8:13:9c:27:c5:a0:d5:f1:c8:a8:11:08:
15:cf:4e:a1:b8:02:67:d3:ce:a0:cc:83:a1:d0:e4:1f:92:2f:
5f:4f:d8:21:3c:c1:ab:34:49:5e:b2:e1:9c:bc:29:eb:65:dc:
d6:7c:d0:9f:ad:42:bb:98:ac:65:96:bc:8a:f1:67:be:17:d6:
31:3e:f4:95:1d:58:b1:02:5b:9d:d8:90:1c:65:8b:8c:8b:41:
5f:09:a0:11:cc:20:16:d6:d9:26:8a:99:c3:68:3c:fd:3a:29:
c3:f1:75:63:b7:f0:55:ac:48:de:bf:18:de:fe:ce:ab:99:b7:
b2:a5:32:33:06:f0:8c:8c:ac:32:47:2f:bc:6f:f9:d4:1d:36:
66:d1:1a:92:16:8b:bc:71:78:05:3a:bb:fb:dc:ea:be:34:f1:
d9:48:9e:30:4c:d2:09:e2:61:26:3a:2e:cd:38:d4:79:fd:a4:
66:7c:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:47 2025 by rpki-client