Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: P7bLglP2b4jucf9M7TV1PHOIgxnoxJydfQSz4AQ7tj8=
Subject key identifier: 0E:00:AE:E3:5F:24:D8:CB:DD:0C:BA:1C:33:39:84:FC:02:BB:EF:57
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 0198D583A9892A311EC6036D2D2D735E12B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 06C6
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: xMSFsrqU8loL02z+DDQFpsKj82I5LjQESlYpxyfaeNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a9:89:2a:31:1e:c6:03:6d:2d:2d:73:5e:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=0e00aee35f24d8cbdd0cba1c333984fc02bbef57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:95:6b:d7:ee:cd:3c:2c:22:ed:7f:ce:9e:
96:e0:d5:80:a7:88:dd:32:16:51:71:f8:ec:31:ef:
50:34:f1:94:7a:9b:ed:05:d8:1d:10:9b:42:7f:77:
9d:c6:36:39:4c:13:fd:4c:47:f4:6d:68:1c:64:8d:
dd:f5:47:69:ab:f7:87:0a:44:05:b7:ce:c0:10:a1:
95:4c:ba:ce:b8:a3:00:55:5d:c2:6b:2d:3b:ef:05:
93:99:9a:d8:8a:ff:88:17:68:a4:a4:07:ab:0a:1d:
bb:47:b0:e7:16:4a:4c:33:df:d9:f3:c9:4d:24:4f:
6d:fc:21:2c:1c:c6:74:58:2a:a5:14:1b:a0:9a:72:
22:3a:39:25:c6:76:d8:57:a6:41:db:00:cb:f9:c3:
18:dc:fb:25:3c:4b:92:d6:55:48:1b:9a:29:64:6d:
c1:1f:34:d7:5a:94:07:17:e9:4c:99:94:7f:25:41:
eb:ea:05:e3:4f:a4:fa:b4:ec:86:55:b9:3f:79:7a:
1b:d1:60:8e:7b:d6:61:a5:6d:2f:19:73:5f:be:29:
8b:b6:f5:18:d2:84:e4:a2:3b:d0:7a:27:ad:90:e6:
9c:65:6d:48:4e:26:8a:84:66:e7:19:9b:41:32:30:
38:94:4b:f7:26:6a:ba:13:89:7f:27:b0:f3:36:a3:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:AE:E3:5F:24:D8:CB:DD:0C:BA:1C:33:39:84:FC:02:BB:EF:57
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:15:5f:a2:f5:88:bb:25:7a:6c:51:cb:9c:5e:29:f8:fe:98:
5f:51:d2:d0:fc:97:21:02:be:a6:ff:3d:a8:69:44:6a:03:5b:
1d:dc:13:7c:bd:90:70:a1:cd:25:19:73:b0:13:34:a8:4f:f9:
2e:22:61:ae:0e:28:cd:38:98:a7:70:c9:b2:d9:48:c2:fc:1e:
f4:d8:75:89:b4:b7:56:74:6a:b0:8c:19:ed:03:76:19:69:67:
39:90:dc:4b:43:f9:a1:59:d0:d0:db:c0:29:0c:b4:d5:68:85:
c1:10:44:44:25:32:c5:d5:ab:2c:88:0b:ce:ea:ad:52:5d:02:
bb:03:51:64:fb:65:3d:fb:b7:67:ef:e0:9d:69:8d:2d:3f:62:
da:fb:8b:11:ed:94:a8:66:a4:df:1e:a6:15:95:e6:46:4a:21:
3d:d0:63:95:82:6d:a5:1f:05:ac:98:bf:b1:bc:98:2c:fc:88:
01:bc:0c:36:ad:a0:09:fe:9b:b3:04:ff:f1:b5:cf:17:9b:8f:
14:8d:1f:52:f6:4c:a9:fd:f0:b1:7b:e0:09:0d:c0:4a:be:c4:
60:a3:35:47:25:44:67:92:81:0f:80:8a:e2:56:0c:ce:4b:98:
ff:b3:a2:2f:ed:84:63:fc:17:f6:7f:7a:cf:89:3d:a2:ba:b3:
e3:bc:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:10 2025 by rpki-client