Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: kWjs58QGUqFCkfuo697A3W5UVqC/4y2PksFEb8kzEA8=
Subject key identifier: B3:67:D0:62:0F:65:CE:B6:42:B6:FF:F5:21:C8:A6:7C:F6:80:A6:FE
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 0198D51575D4DBA8C362359409899F5EA15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: yEMlFNYIo_7PBG15hC66LWSw4E0.roa (hash: 0NF8QaEpF30c3qMJTec6Bga4N+I8Ns4AqntJ51k9D0k=)
2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: tlGYvBl+x1i0V7gW/BQttLgsGeqXe8UbVcs/LHDIVp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:75:d4:db:a8:c3:62:35:94:09:89:9f:5e:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=b367d0620f65ceb642b6fff521c8a67cf680a6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:50:ce:28:10:e1:63:01:ad:a1:51:13:0e:
22:47:ea:cf:98:9a:da:bc:18:33:25:7a:d4:93:0e:
f8:4e:93:04:6c:a6:2f:8b:fa:93:11:63:8e:f8:63:
3a:88:c4:d5:48:95:5e:a6:57:7e:85:d6:0d:6c:91:
ac:97:10:94:2a:56:23:b7:45:42:19:dd:89:f8:c9:
16:86:c8:fb:a7:b4:8a:63:fb:14:5a:27:d1:4f:b0:
fc:da:1e:8c:3e:50:7c:6c:64:74:bd:21:80:1e:48:
60:1b:e9:a0:52:30:9b:d5:38:7c:e3:94:04:1e:e6:
25:5e:8c:32:1d:c2:67:5a:21:5f:4b:13:fe:5f:74:
13:1c:e7:94:51:d0:c5:eb:17:68:2f:9f:58:a7:4c:
78:54:4c:67:56:f9:5e:e4:00:93:58:27:45:51:82:
ef:e3:80:ea:47:17:19:a3:ff:4c:ad:00:71:69:bd:
b3:1f:75:e2:4e:a6:74:06:8d:98:99:90:84:7f:21:
f6:e4:6a:36:88:f2:cd:68:1e:64:b8:04:54:45:31:
15:b4:8f:01:14:7d:e9:5c:ee:2b:ca:c4:01:55:78:
88:ff:20:8f:60:65:34:b1:e1:03:10:b5:fc:92:0a:
8f:4f:53:90:05:f7:c4:c3:51:82:84:c4:9b:af:fc:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:67:D0:62:0F:65:CE:B6:42:B6:FF:F5:21:C8:A6:7C:F6:80:A6:FE
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e7:85:65:7b:c9:9d:40:6d:73:4c:ad:fd:f0:3f:30:4f:b3:
5e:8b:24:45:9e:c1:43:47:bf:ed:8a:19:d7:61:93:05:d1:18:
dd:d1:3b:c8:18:14:cf:88:ef:fe:ac:5e:22:78:85:32:e9:bb:
5a:78:47:2e:1f:84:f0:9b:29:69:f6:da:7e:18:2f:59:c7:fa:
14:37:7d:1d:75:98:e5:49:52:32:9d:6b:eb:a0:c1:19:b1:35:
4c:68:c4:da:6b:26:aa:03:d2:35:9d:52:c1:5f:c1:1d:5e:72:
6c:42:98:b5:59:d6:00:6d:0d:db:b6:05:7f:e7:5b:f1:b6:6f:
03:4e:63:e4:ea:ac:bb:53:0f:8e:97:d7:c9:e4:f3:df:e0:03:
46:3a:41:33:89:01:f9:06:eb:cb:79:39:c7:81:84:f8:6f:98:
21:7f:2e:e7:e3:43:7a:7a:1f:1b:25:70:17:5a:d4:1b:69:fb:
f1:a7:ca:25:f0:0e:0f:f2:42:cd:80:85:36:ca:45:63:6d:45:
aa:1b:39:c3:15:89:8e:71:4f:1b:1a:1c:2d:a2:3c:27:52:ad:
cf:b5:4a:c5:0d:1e:34:72:5d:e9:f7:ed:13:c4:1f:ba:12:68:
9b:48:43:9b:ec:58:8b:d2:90:3d:78:b0:e8:46:24:e7:c4:3e:
6b:cf:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:38:58 2025 by rpki-client