Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: 6QdHKruOemENKuS0IGMaT8Wg6dGg/gh1duvrrcLgtKc=
Subject key identifier: 9D:18:AE:14:54:4C:9C:50:86:26:80:78:D7:CA:72:2F:E8:AC:F6:4D
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 0198D5F1774977D7AB59CB6F515F36910DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: y3TeJZbOGYYDvzo/+qvfbLupnXymfJcFqr63ASRnsX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:77:49:77:d7:ab:59:cb:6f:51:5f:36:91:0d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=9d18ae14544c9c5086268078d7ca722fe8acf64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:6b:91:52:97:68:90:c2:a9:6c:ed:c8:66:
24:ab:2b:e9:0d:60:12:54:2a:39:8d:cc:6e:45:57:
90:6e:f5:30:de:76:1d:d4:7f:dc:05:ad:ce:80:d8:
0b:18:84:eb:40:32:a8:ce:15:ea:2e:be:d8:23:58:
0d:bf:20:75:fa:70:03:d7:3a:63:9f:6c:a8:dd:25:
3c:5b:13:e1:48:a7:23:b6:cd:8d:99:65:b7:9c:a0:
29:80:f7:10:e3:32:94:ec:c8:c5:68:33:4f:87:7b:
60:f6:a5:ce:43:94:68:40:a1:d5:04:41:9a:2c:41:
98:44:49:c3:a0:36:27:ea:7a:43:cf:d6:90:ad:4a:
fa:cc:d1:39:81:cc:e1:18:d8:80:09:e6:de:0c:de:
cf:84:96:a4:29:f4:4c:a5:90:32:ec:2b:9d:62:e6:
32:4b:51:e7:d1:70:8b:e1:dd:96:c0:2a:4a:85:fc:
a2:42:ce:b0:88:7f:5b:18:a7:6f:3e:29:05:aa:74:
87:f9:be:a9:b9:ea:7e:35:d1:09:2e:dc:42:ba:e6:
5d:f3:a8:a1:5a:78:52:68:3c:cb:8e:6b:46:eb:4c:
44:4b:57:c2:1a:dd:d0:3d:fd:73:7d:4b:4e:14:94:
09:f9:a9:ca:2a:fb:2a:78:73:31:49:c3:18:be:ef:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:18:AE:14:54:4C:9C:50:86:26:80:78:D7:CA:72:2F:E8:AC:F6:4D
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:d7:79:63:b3:cf:d8:ee:49:ae:60:f0:43:be:2b:01:ab:
f6:28:c9:09:fb:8a:f1:80:cd:48:c5:90:84:75:3c:97:40:85:
44:23:e3:6e:f1:d6:a1:b8:a2:3b:44:70:5d:8f:b8:5e:bf:08:
d8:ce:3b:09:95:34:fa:e3:0d:58:4a:03:f5:e6:fd:b2:ce:51:
c4:56:ca:5f:f8:e2:bf:ae:e9:38:d3:7f:4f:fd:15:15:59:ef:
56:14:d2:38:af:4f:d5:43:0a:b0:ef:93:f4:1f:96:a4:83:dd:
49:f5:e3:ef:50:af:2d:d4:18:47:5e:1d:e6:e9:66:d6:fb:6b:
f0:a3:dc:0b:1f:df:a6:cb:3a:d2:fb:bb:1b:64:e4:ba:06:52:
7b:d4:c6:74:75:1d:7d:9f:f3:f5:df:92:8d:71:dd:e4:6b:aa:
0f:c5:3a:f4:a4:8b:16:b0:89:7c:12:ca:f2:2e:8a:74:09:ca:
10:2d:13:49:f4:56:a3:a8:90:76:90:77:eb:07:06:db:76:a4:
75:aa:06:93:ca:13:aa:93:8f:db:b4:e2:b8:9d:e0:7c:2b:cf:
d3:47:85:36:ec:5b:61:4c:a6:6b:1f:02:70:24:ef:17:1e:e5:
e6:7c:b4:66:15:ba:83:88:a9:0d:04:1a:7e:48:00:3c:2f:59:
3e:12:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:11 2025 by rpki-client