Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: vcKVEbhjr+yl+v3R+WtP7sGcYgs3rKDjeHdTD7bdbsk=
Subject key identifier: 0C:EC:9D:91:C4:9D:12:6A:17:91:D6:DD:82:64:66:E3:83:7A:5F:27
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0198D5BC1D9B739E502EEF930D6C8B58F199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0EB7
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: VoVf7utx+3rAtJf6TXn5eI0u0OMyylcHeuIExQ5C42c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1d:9b:73:9e:50:2e:ef:93:0d:6c:8b:58:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=0cec9d91c49d126a1791d6dd826466e3837a5f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:06:c6:4b:a4:29:c7:d7:33:84:10:11:23:
ee:02:e3:67:0a:98:51:d9:fb:f8:ec:91:10:31:3d:
df:76:87:38:32:8d:c8:99:ba:26:8f:39:07:b1:14:
50:a1:7a:f9:0d:8d:65:51:3e:49:e8:72:87:38:0b:
5a:7f:71:a1:d3:ab:6d:dc:12:13:de:f6:04:2b:2e:
56:63:b6:b3:6c:8d:3f:cc:cc:35:c2:18:f6:f3:d6:
4c:63:01:c4:93:5e:38:1d:08:b3:e6:66:3d:c8:ab:
41:0d:2c:28:ff:34:4d:46:ad:0a:52:5f:fd:47:1e:
39:10:49:80:67:07:05:5d:49:b5:58:83:90:1d:85:
49:59:40:26:cc:ad:b0:2a:e9:24:67:71:37:27:a2:
80:73:da:7f:b9:f3:65:36:13:8d:ff:7c:81:ef:52:
dc:65:8b:df:3a:2e:ae:e8:d0:68:69:1a:9e:8c:9b:
90:20:cf:18:d1:13:2a:d9:5e:3f:b0:04:5b:20:15:
1b:23:ad:a2:62:81:88:69:54:23:18:b5:2c:c4:ed:
95:4c:1c:cb:59:3e:3f:c9:a9:6f:cd:d8:30:cc:70:
75:1a:1a:a8:7d:20:0c:0b:f9:60:3b:f5:b5:24:74:
9c:1f:49:10:8d:44:ff:f6:53:c9:16:e5:16:47:70:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:9D:91:C4:9D:12:6A:17:91:D6:DD:82:64:66:E3:83:7A:5F:27
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f8:fb:88:fd:35:aa:8e:72:2c:b3:83:56:95:cc:0d:56:74:
5f:e5:ab:1b:2c:8a:27:0c:18:54:33:7d:5d:84:0e:76:f9:f1:
f3:67:66:07:6c:be:c8:d8:21:c3:fe:5a:09:7d:0b:d2:a5:9d:
0c:8f:5a:4d:c4:71:c5:73:fe:95:10:91:fd:d4:3d:5d:a0:e3:
32:4f:69:68:60:37:ef:f0:fe:d9:35:9d:26:6e:67:7c:96:67:
eb:18:8f:60:3f:34:94:dc:d9:1f:11:4d:71:9f:cd:da:f4:f6:
c1:c4:33:91:5b:f8:92:9d:d7:63:9b:fb:b9:1e:1d:fd:5c:16:
55:24:46:39:b7:4e:b6:a9:9e:bd:36:77:60:9e:9b:e7:35:dd:
dc:71:3d:9b:00:2f:71:53:4b:74:4d:2e:4e:a7:19:a2:bd:1e:
00:1a:ce:76:44:27:36:02:8f:44:91:62:79:73:94:90:49:2c:
0c:0c:ca:8c:12:e1:d6:db:6f:08:cb:cb:04:18:6b:b1:2c:48:
2c:06:c1:ff:9d:03:e0:83:58:18:06:a6:36:49:bf:e3:b0:dd:
13:86:e3:cc:48:e9:01:7b:f6:81:f9:81:fc:93:a1:a7:22:18:
f0:be:03:b1:e4:d0:be:20:0d:af:e1:5d:5a:e1:e6:20:32:d6:
0b:99:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:36 2025 by rpki-client