Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: 44xdF8nbTlYSfjtrRrwQi2T0hwHOsFzyT2+AOLsydKg=
Subject key identifier: 55:E1:B8:36:BD:A5:FE:D8:C4:B9:8B:6F:B0:D9:4D:F3:AF:03:EB:FC
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 0198D7A8B33CF13B6EDF4DE182FB0BED7133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 15DF
Signing time: Sat 23 Aug 2025 16:00:14 +0000
Manifest this update: Sat 23 Aug 2025 16:00:14 +0000
Manifest next update: Sun 24 Aug 2025 16:00:14 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: KS2EwGlL/tznUQVX0D825DhKdykzF+eJNEyw0ZzuA3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:b3:3c:f1:3b:6e:df:4d:e1:82:fb:0b:ed:71:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Aug 23 16:00:14 2025 GMT
Not After : Aug 24 16:00:14 2025 GMT
Subject: CN=55e1b836bda5fed8c4b98b6fb0d94df3af03ebfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:fc:d5:68:3e:6f:af:ef:cd:cc:f5:3d:8d:
d8:cd:e6:0f:c5:7c:00:0b:28:a1:0d:17:ba:10:4d:
a6:df:02:51:53:e6:9a:93:18:df:c8:d6:fd:02:85:
0b:75:50:67:d1:2c:bd:d2:0b:36:96:9f:20:b7:ce:
33:4f:7b:d4:c2:27:a7:9b:d4:bc:1a:03:d1:0b:f6:
cc:67:5b:59:26:20:83:a4:17:61:af:27:70:32:40:
9a:49:dd:34:30:0f:9a:06:0e:4b:1f:74:db:df:95:
94:30:fd:b5:a9:98:7f:09:d3:44:e0:f6:a3:51:d7:
e5:8f:28:74:d9:99:12:b5:bf:0e:76:52:43:38:18:
9f:ea:45:aa:ef:53:70:b2:d0:eb:9d:99:99:97:67:
e7:6b:29:9a:4d:e9:0b:a0:87:1c:60:21:f2:f8:ae:
41:e3:1e:5e:bb:99:79:3a:a8:74:1e:c0:df:2a:45:
67:7c:36:09:38:8d:e2:bc:90:13:a4:51:ec:80:62:
d3:95:20:f9:61:66:05:1d:27:99:43:40:e0:bb:fa:
8f:16:0e:a9:57:26:0c:13:91:c5:b3:6a:7b:35:5e:
e7:95:d3:31:5c:9d:f8:1d:9b:93:37:8c:e2:4a:41:
4e:68:92:73:5a:56:08:66:30:cf:17:1b:a9:c0:33:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E1:B8:36:BD:A5:FE:D8:C4:B9:8B:6F:B0:D9:4D:F3:AF:03:EB:FC
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6b:53:62:63:8d:76:52:ae:4f:02:f7:98:39:2b:d1:c6:d4:
cb:f4:bf:e5:86:99:93:d7:3e:eb:ba:c6:02:ed:a6:16:03:8d:
72:bc:aa:79:73:3b:7b:11:c0:9e:15:f2:11:e5:45:fb:fa:44:
9d:43:3c:75:a2:3d:13:3c:84:6c:91:54:11:33:dc:1d:88:a1:
00:58:8c:43:3e:a4:a9:bf:d1:f3:47:15:b5:d0:a2:b3:e0:d2:
c3:64:ad:e5:d7:41:0e:0a:f0:78:86:74:16:6a:47:31:01:21:
69:a0:e7:09:a3:75:57:c6:9b:68:00:6b:32:2c:d1:f4:d9:b8:
e8:a0:57:e9:5e:a7:31:5d:9b:37:59:7e:39:d1:3a:74:83:b6:
c2:4f:c8:26:de:04:fb:5f:36:d7:8f:15:8c:d5:df:07:16:3c:
a3:70:ae:6b:17:da:9f:3d:95:2e:fc:a6:10:1c:90:46:63:56:
35:60:23:08:62:40:1f:63:9e:db:09:8e:e4:20:69:0c:bf:cb:
17:e2:26:5e:ea:74:22:16:63:e9:10:aa:14:4e:45:74:42:62:
a0:95:f7:9b:57:67:63:61:34:28:7c:d3:e3:84:97:08:8b:af:
c1:15:42:47:ef:a3:6b:59:7c:17:95:c2:04:e7:28:f0:b9:e2:
a2:6d:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:59 2025 by rpki-client