Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: B5iQ9V3Cda3VmF2j86jP2vVsAqf2xfGx93ZpoFytiZc=
Subject key identifier: AB:21:FB:8D:40:65:3B:11:EC:69:5A:A8:01:C5:71:8E:5D:1E:A6:10
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 0198D5F1CA9DC34403B30636E116B04E1A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: PaUzB8wgbbRsaVQjkghBHBx-i68.roa (hash: lFrqYnlO5yM3Jwu/7kIddY95Ktd00GHwSSlGhdD9Z3M=)
2: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (hash: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: oyJ8Q5H7Si05FGK5Cb5+dFWLV07JHBgt2mErqTSgOe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ca:9d:c3:44:03:b3:06:36:e1:16:b0:4e:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=ab21fb8d40653b11ec695aa801c5718e5d1ea610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:d0:fa:49:94:ca:1a:88:5a:04:62:c0:60:
7b:be:2a:6e:5f:3c:e2:d2:7f:d8:a2:d2:f7:2b:de:
fc:4c:31:56:6b:05:0b:de:35:10:7c:d6:e0:7d:5c:
b3:6b:a9:77:55:f4:f0:73:0e:4c:48:5a:3b:19:60:
10:4a:34:67:44:bd:ed:96:b7:77:a7:44:25:dc:de:
bd:ae:75:fb:0e:45:5c:e0:52:a2:80:97:9e:80:8a:
9c:a6:78:6c:60:f3:4b:94:fa:78:7c:07:88:0d:16:
e9:69:7c:e4:95:1f:ff:ff:22:83:c5:51:e8:ae:d4:
57:66:13:e6:47:20:9f:12:75:cf:ac:ef:26:0b:4b:
a7:47:b2:a8:3f:6a:6d:29:f6:a1:3a:41:0a:d4:37:
d4:9c:7b:d7:51:2c:1a:41:8e:94:d0:b7:49:ad:58:
a5:c8:0c:49:25:15:5e:59:af:67:6a:9a:a8:e5:f9:
3c:70:0e:99:b2:31:8d:62:14:af:bd:01:4d:0b:39:
e5:61:15:88:00:84:b7:87:b4:db:0c:dd:eb:10:ed:
de:53:65:0b:36:2b:4c:2c:fa:18:3e:ee:9a:40:bd:
fd:94:b3:ec:f5:f3:2b:d0:33:22:f3:a4:ab:1d:e6:
26:a9:11:44:4d:08:9e:99:41:fe:2c:6b:28:bf:6c:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:21:FB:8D:40:65:3B:11:EC:69:5A:A8:01:C5:71:8E:5D:1E:A6:10
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:39:82:0b:84:55:6b:f6:63:c1:d1:a6:a9:05:8e:94:c3:09:
d2:b8:f9:56:e4:54:65:c7:58:3a:1d:cf:a7:7c:90:45:be:b5:
1b:cf:0a:f1:8a:76:a2:4a:a5:48:c1:6a:21:b0:bf:7e:cb:53:
d4:2f:6b:25:7f:1b:77:54:45:5b:b2:ce:04:9a:47:90:91:9f:
20:72:63:86:47:f7:57:0a:15:4a:97:35:1f:cf:5a:07:cc:7d:
0f:ee:05:d9:57:ac:d4:68:be:bd:a9:a3:ba:98:27:cb:38:ca:
90:ee:ba:96:03:25:44:3e:8d:65:3b:61:0c:53:e7:31:d4:3a:
51:b7:40:bc:b9:ba:d0:76:aa:44:b7:4f:20:ab:d6:73:a8:f2:
88:3d:4c:36:1b:7f:c3:05:07:e0:27:ef:ee:f3:17:6d:80:a0:
fd:19:52:94:4f:a6:dc:dd:c8:63:f6:59:56:9a:c7:f1:31:80:
54:5f:21:ed:8c:4d:29:47:22:65:b7:36:cf:bf:de:c9:31:91:
ff:0b:3c:61:9b:6c:97:f5:8e:e3:df:b4:72:2d:d4:32:c6:f5:
38:62:a4:d5:bd:1c:a8:68:aa:e8:53:6a:83:18:55:c2:7b:24:
be:be:4a:79:d3:fd:6e:8d:01:62:4e:70:bf:86:56:04:16:df:
59:49:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:56 2025 by rpki-client