Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: JQbIpGsFjZmqiDFvvp0V7YX5mmenyzdXTAzzM5VTZgE=
Subject key identifier: D1:2E:4C:63:9C:83:E9:69:2A:8E:D4:43:2F:06:52:E3:D4:18:14:32
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 0198D77322AF44895698F4504C4B919BD05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0EA6
Signing time: Sat 23 Aug 2025 15:01:43 +0000
Manifest this update: Sat 23 Aug 2025 15:01:43 +0000
Manifest next update: Sun 24 Aug 2025 15:01:43 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: m5bNPqL0sCaqEeQ7H+FVNDe6iuN6zV5QzxkYtCle++4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:22:af:44:89:56:98:f4:50:4c:4b:91:9b:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Aug 23 15:01:43 2025 GMT
Not After : Aug 24 15:01:43 2025 GMT
Subject: CN=d12e4c639c83e9692a8ed4432f0652e3d4181432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:2f:cc:e3:6f:e5:aa:9d:ab:49:a6:6b:ac:
90:6a:e1:e7:b2:c1:d5:5d:2b:41:b3:51:06:c9:e8:
ce:9b:62:18:71:cd:8f:fc:fc:98:e9:4a:92:0f:b0:
99:65:2f:75:89:75:21:2a:13:be:32:9b:65:f0:e7:
53:e3:5e:2f:35:df:a0:a7:7f:7c:c3:f3:c5:10:f1:
68:25:4e:53:f7:1b:c9:be:a8:c9:d1:aa:7a:d0:83:
46:a1:f1:a3:6c:98:52:cb:39:9c:b6:f4:65:18:81:
64:af:45:5a:69:ec:96:fb:4a:43:96:ab:3c:e3:90:
4a:f8:54:f6:f6:93:48:2d:18:95:cc:e3:72:13:58:
98:41:4f:7e:83:9a:1e:eb:ea:04:13:e0:1c:38:20:
31:18:9e:6c:0e:9c:a3:68:45:05:79:6d:e7:b8:3d:
4c:89:11:de:1b:a3:51:ec:1f:ff:3e:cc:c5:81:0e:
18:e3:38:20:90:92:4a:71:60:61:00:0f:b1:a1:2e:
a2:86:97:8e:b3:53:f4:e5:a6:18:48:44:75:62:2f:
da:6d:6c:e4:9d:e8:c6:4a:88:fb:df:78:16:66:45:
37:e3:0a:66:1a:67:d9:08:39:67:60:b3:bc:e9:23:
80:47:f4:49:10:93:88:33:63:03:32:e7:14:d3:ef:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:4C:63:9C:83:E9:69:2A:8E:D4:43:2F:06:52:E3:D4:18:14:32
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:57:7b:4b:a6:e6:f0:d9:47:91:8d:31:df:6c:d5:c6:3d:44:
41:af:3e:c7:4c:ff:b7:20:15:c5:44:ec:5b:15:9b:25:33:1e:
1c:f5:e9:17:27:9a:e2:a5:fb:74:06:8b:5b:87:77:61:ac:3d:
62:11:50:69:2a:9f:c9:b2:b7:5b:9d:31:1e:9b:05:59:6b:47:
56:2d:85:ef:79:e6:36:63:45:a1:87:9b:60:d8:a2:e4:19:c1:
06:bf:8a:bc:22:0e:5c:0c:98:fa:5a:34:24:19:d0:39:15:2c:
54:8f:9f:c1:0d:1a:c8:87:01:b3:3d:7e:34:d6:9b:7b:ea:25:
00:09:4d:86:50:eb:36:4f:89:19:46:16:13:61:2e:63:a1:4c:
71:3b:1f:d4:3c:84:f8:e2:2a:15:e8:a6:4c:c1:b4:06:eb:8c:
5b:7d:a9:29:52:1f:c0:1c:bb:47:b0:25:22:c1:9e:42:42:22:
b3:7b:32:47:ea:db:ec:06:56:7a:26:d7:58:1b:7a:30:ab:61:
7e:39:54:db:cc:e5:92:dd:ff:ef:75:59:a4:84:60:41:68:88:
ad:c1:fb:88:7a:cc:45:3d:dc:a3:5b:29:88:17:6f:59:ea:7f:
c6:97:2b:6a:9c:fd:ba:19:54:92:24:1e:0c:58:4d:28:d4:fc:
e6:bd:91:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:26 2025 by rpki-client