Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: ACrGQq3HcGkKlLfU3j9iLLlqLmJ0VHXaJSclfPo5F7Q=
Subject key identifier: 48:C8:6F:34:77:5F:36:74:4E:A1:5E:57:2B:7D:B9:EF:EA:D3:9D:FB
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 0198D698273A6C3CBA6BEEDDF6026BC8D842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0929
Signing time: Sat 23 Aug 2025 11:02:32 +0000
Manifest this update: Sat 23 Aug 2025 11:02:32 +0000
Manifest next update: Sun 24 Aug 2025 11:02:32 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: pN3wBh9XuCW1itIg0OCHNkzG3EO82NYub1kikBWVEdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:27:3a:6c:3c:ba:6b:ee:dd:f6:02:6b:c8:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Aug 23 11:02:32 2025 GMT
Not After : Aug 24 11:02:32 2025 GMT
Subject: CN=48c86f34775f36744ea15e572b7db9efead39dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:7b:fe:8c:f5:45:52:bb:97:49:bc:0f:6e:
52:5c:7e:e6:d8:2c:5e:a1:36:65:9c:98:df:60:45:
a1:85:cc:66:38:dd:9d:55:fd:df:64:a3:47:e0:00:
6c:0b:47:91:d3:a0:20:fb:31:28:85:c6:25:96:d2:
05:38:71:c7:7d:39:74:dc:fc:7f:94:a3:75:88:11:
f2:ae:f4:76:32:27:94:87:83:0f:a2:ff:09:6f:76:
29:e0:a8:28:45:73:b0:15:84:bd:1b:74:a2:c3:1c:
7b:e8:fa:6b:a6:76:73:cb:1b:0a:05:c0:f9:61:c9:
93:30:9b:4a:56:c2:99:2f:d4:fa:29:3b:cc:01:6f:
8e:b3:d1:7a:97:24:74:bf:a0:53:f5:c0:14:b9:58:
d9:87:d4:7d:30:3f:f8:e8:01:c4:56:bd:f7:20:f4:
5f:33:db:c2:02:3b:a1:50:85:29:be:a3:d7:aa:0d:
0a:74:54:7c:ee:d9:58:a3:aa:a8:b7:4e:79:53:33:
b7:7b:12:76:e1:45:87:30:b9:22:44:6b:33:af:16:
67:e4:92:a5:38:c8:65:23:a5:f8:cc:2e:29:8e:b8:
6a:3c:61:86:b3:71:d8:3c:c7:4b:13:5b:09:2d:72:
56:f2:75:2d:25:ef:b5:cf:cd:c9:56:41:c1:c8:49:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:6F:34:77:5F:36:74:4E:A1:5E:57:2B:7D:B9:EF:EA:D3:9D:FB
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e7:43:8a:87:57:d3:f4:75:9e:25:d5:40:12:84:5c:7c:d2:
1a:ca:50:b1:c8:15:e5:2e:10:b4:ae:63:ef:a4:7c:d2:1d:36:
6e:48:40:c8:0b:7e:f3:f7:59:2c:6d:85:88:ce:43:17:ef:42:
56:bc:7f:93:04:2b:dc:07:1a:d5:60:8f:0f:c5:86:9e:86:5f:
e0:82:25:7e:6f:3c:eb:51:60:74:f6:f3:f6:b5:51:10:df:ec:
eb:bf:c3:a4:e8:1d:2d:7b:ef:b3:a2:19:9a:0d:e4:6e:28:8e:
1a:97:c8:b6:e5:02:9a:80:46:91:4b:f8:9f:35:66:c1:8b:b1:
e8:fb:36:fd:1f:85:4d:f5:a1:c3:10:98:88:6a:cc:c6:13:4e:
5b:bc:d7:5d:75:8b:30:ac:cb:7d:38:6a:01:d5:3f:98:16:a6:
85:f5:3c:6a:f5:52:33:14:98:b1:0a:09:f6:87:24:e5:43:b0:
db:62:b3:2e:03:cb:c5:3b:3f:78:f7:c5:9d:f2:41:b3:61:bc:
3e:7e:83:9f:31:d3:f8:9e:15:d2:c5:f2:19:93:c3:c4:42:5f:
a3:79:8d:49:a1:45:47:88:97:ff:12:27:df:85:ee:e0:2d:a6:
81:a1:99:df:48:2d:97:73:e5:80:04:95:6f:23:a1:0c:ff:56:
c4:85:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:28 2025 by rpki-client