Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: WOngwZEpRfYSc+RfXjhWenZkJMoBK1eC1YMAAS0nr+E=
Subject key identifier: 8E:0D:42:7B:C6:7F:CC:C3:FA:89:8D:12:1B:65:5C:C9:68:3B:B8:7B
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 0198D473101A53DC8A1411B01E466BAF3593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0664
Signing time: Sat 23 Aug 2025 01:02:47 +0000
Manifest this update: Sat 23 Aug 2025 01:02:47 +0000
Manifest next update: Sun 24 Aug 2025 01:02:47 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: S0L0Nlh3mMqoGadzORw7xOpAQeVdJhn0fzewDD5UmU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:10:1a:53:dc:8a:14:11:b0:1e:46:6b:af:35:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Aug 23 01:02:47 2025 GMT
Not After : Aug 24 01:02:47 2025 GMT
Subject: CN=8e0d427bc67fccc3fa898d121b655cc9683bb87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:44:00:d5:10:3c:ae:9c:99:d3:b6:fc:ef:
03:34:6a:15:18:1f:c4:a4:4f:b8:25:fb:21:a2:f5:
49:f0:22:39:7c:0c:02:c5:cc:53:5c:4e:7c:41:aa:
b0:5d:1c:b7:a5:4d:b4:15:be:96:f3:e7:0c:65:61:
8d:27:6c:a5:59:4c:0e:ac:f1:77:fd:a5:3a:ba:0a:
6f:2c:a9:78:71:1b:56:f3:85:06:df:c8:bf:9f:db:
0f:5d:4c:02:61:52:fe:43:5c:c6:97:74:e3:1d:3a:
14:01:d5:03:44:32:66:d3:cb:c5:cf:bf:e7:d6:e7:
6f:2c:da:45:a3:cf:fc:b5:1c:55:c1:bf:61:d5:08:
4c:16:1f:c4:3c:ce:bb:8c:3a:7f:03:a8:fe:f5:57:
33:42:0a:15:76:a5:7f:40:a1:31:77:3f:09:0d:52:
e6:0e:17:ee:31:8d:74:9e:d1:51:b4:4a:2c:65:8f:
5d:3b:5a:2b:22:20:6e:a9:2d:a7:e5:88:1d:38:8e:
e8:20:4c:ae:67:2f:f8:14:ae:2b:aa:8b:32:b8:d2:
cf:0c:22:68:4a:46:20:8d:ab:63:d9:8c:d7:5d:3e:
80:80:bb:aa:ef:dc:e3:c0:c3:79:d9:37:11:84:16:
3c:00:05:78:07:d0:29:78:6e:88:96:da:92:f0:00:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0D:42:7B:C6:7F:CC:C3:FA:89:8D:12:1B:65:5C:C9:68:3B:B8:7B
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7b:9f:98:5e:72:37:0a:6f:9e:f4:b6:c6:e6:d0:a3:53:35:
57:c0:99:09:78:11:cd:56:34:5e:df:42:68:cd:28:51:d6:0c:
23:40:cf:d0:3f:f5:2c:21:b4:18:49:6d:cb:00:35:99:f6:1c:
25:d8:57:55:67:00:1b:37:9a:ff:a2:7e:b0:82:53:62:96:3e:
df:34:ef:43:73:b5:82:fa:44:8a:0f:9e:cb:1a:e2:3e:36:53:
e6:ec:49:12:8b:03:88:1a:7b:ce:19:9a:01:ef:df:30:6e:88:
ba:90:fc:82:5d:b0:b5:26:04:9b:55:0d:24:f8:d5:79:2b:6c:
a6:bd:c3:42:07:e4:8f:ff:9b:37:e1:b5:a1:d3:3f:e6:b9:df:
b1:b9:61:c4:d1:ca:2f:a1:a4:d2:dd:95:6f:4a:a1:7a:6e:4d:
63:93:7f:c3:64:c7:d3:b2:40:80:e4:9c:37:5b:94:99:45:11:
60:6b:07:c1:c7:df:32:37:5b:f9:05:02:22:77:32:37:d7:3a:
24:ac:df:d2:02:70:fa:7f:c5:93:28:66:42:c7:6c:c7:51:9d:
f9:3d:f0:4b:e4:67:f2:67:ed:f6:fa:fe:25:d2:40:9a:f7:e1:
24:53:cb:b1:72:24:80:32:e3:69:1b:b5:c3:90:21:52:54:ef:
e1:c6:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:09 2025 by rpki-client