Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier: Y9ATgjlyz1ibAk1Zz9lQdeVHkHn3yDMTKqRAF4zppKY=
Subject key identifier: DF:EB:0C:95:13:1D:F0:11:00:D2:A3:1F:48:8B:FC:9E:5E:E5:73:AA
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 0198D6613D9729531717BDB425CDFC0B4353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number: 0AAD
Signing time: Sat 23 Aug 2025 10:02:33 +0000
Manifest this update: Sat 23 Aug 2025 10:02:33 +0000
Manifest next update: Sun 24 Aug 2025 10:02:33 +0000
Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: ts3yXKNxj8RLR8vtdIMCsbHYjn2DZLcPBqBcGPxwx20=)
2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3d:97:29:53:17:17:bd:b4:25:cd:fc:0b:43:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Aug 23 10:02:33 2025 GMT
Not After : Aug 24 10:02:33 2025 GMT
Subject: CN=dfeb0c95131df01100d2a31f488bfc9e5ee573aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:43:13:39:5d:a5:a1:5d:88:f5:aa:56:20:
99:f7:a8:b2:b6:4f:a5:96:d5:e5:1a:7b:6f:9d:a3:
fd:e9:2d:40:e4:04:38:3e:19:c4:c9:57:ae:1c:76:
2f:ea:f2:7f:24:9a:48:0b:2d:84:7d:9f:05:29:f3:
9a:30:0a:42:f2:01:32:a8:c8:e8:cb:fb:cc:18:ff:
9a:05:bb:3f:65:42:99:2e:76:41:ed:aa:82:50:79:
cf:e4:24:e0:09:c4:62:44:3a:84:1c:5b:25:d3:b6:
82:45:8f:0c:aa:cd:6d:9a:80:98:50:66:63:91:89:
cb:d8:a6:34:6d:55:5d:2e:ca:f8:08:17:34:fa:c1:
66:47:09:30:44:c4:a3:d5:b5:f9:11:ff:1a:7e:be:
fb:67:ee:36:3d:9e:47:3e:88:2d:aa:97:8a:f1:aa:
c1:e2:84:97:19:ea:1e:2d:a9:90:f8:33:56:91:1d:
e4:f8:88:53:dd:47:c1:5e:c0:4f:e6:bd:22:e7:57:
e9:21:9e:b5:30:1c:0c:30:54:45:b3:e9:84:0a:f9:
99:3a:26:d5:03:61:7b:0c:b7:fc:e0:d6:9e:7d:f7:
46:17:a6:43:ad:d9:99:f6:cf:dd:6e:b9:29:44:a4:
61:4a:5e:fe:8f:16:43:3d:47:b8:9a:a5:1b:95:23:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EB:0C:95:13:1D:F0:11:00:D2:A3:1F:48:8B:FC:9E:5E:E5:73:AA
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:22:79:a5:6a:c3:10:19:fb:02:53:f3:86:4d:63:bc:00:9b:
e7:fb:9b:ef:92:9f:c3:e4:5e:c0:45:35:d2:e1:89:6e:be:51:
d2:9d:e5:f1:5c:37:f2:06:29:06:7f:a3:80:08:e0:04:8a:c4:
b1:7c:ff:21:2b:be:01:dd:da:1d:be:55:3d:30:9a:92:32:b3:
08:e5:69:27:5d:06:a9:10:20:75:40:ca:c0:de:14:31:09:fd:
fd:ba:20:dd:86:91:a6:a2:87:13:1a:8b:97:8c:81:27:bf:1c:
bd:36:04:ba:90:fd:68:ea:e8:31:8c:92:ae:44:fb:a1:78:84:
3b:cf:8b:23:7b:b4:18:e0:99:85:1a:4e:c7:3e:c3:0a:28:96:
02:1b:48:58:42:df:9c:b3:96:dd:2a:11:22:bc:75:40:d0:ae:
fc:ce:80:da:58:bb:41:a8:94:20:f6:6d:44:82:a5:f1:0f:6a:
a9:fe:bf:db:e6:29:16:08:f3:88:0d:c8:54:64:df:52:46:b6:
ec:d0:d0:db:21:87:b2:8f:32:11:6f:5b:2a:23:b8:05:c4:0d:
d1:ae:89:56:13:8d:11:1a:77:2e:93:5b:51:44:1b:a1:af:4b:
14:a2:1a:87:55:e8:45:51:c3:bf:9c:81:89:2d:06:6a:15:0b:
e3:e4:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:26 2025 by rpki-client