Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: toBEy7022FKUn+nGQU9KFVybh8DF1Bg4XGQ83K6vBuI=
Subject key identifier: E5:0E:A1:4A:1D:EF:51:78:9C:CC:89:68:72:01:AF:FC:D5:2B:A0:47
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 0198D5F1847A05AB1937C534C175AE66C88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 15EC
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: Vm2xySa3TZzRcufAzxt4hRBLNss.roa (hash: O5+b4nw4CSapOt9ANvlpqmvnfoL7HE4era1klJG6PPo=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: Jn2tNEb+YfTdOtMZfiK3/DTao9eh4qCQ1GWjpUaMU4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:84:7a:05:ab:19:37:c5:34:c1:75:ae:66:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=e50ea14a1def51789ccc89687201affcd52ba047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:88:f6:ee:88:82:f7:29:64:c6:cf:91:7c:
f9:74:a7:b4:26:42:52:57:ec:16:76:51:08:b5:aa:
a1:20:07:84:37:f3:a8:4b:1e:93:ed:cf:df:48:1d:
64:7e:50:dc:44:12:5e:45:32:da:1d:05:af:a3:60:
9b:71:6b:8d:ed:0d:32:5c:b2:ad:dc:8d:cf:14:e4:
d7:71:7a:c2:e8:0f:f5:dd:0e:8d:51:50:18:43:cd:
91:41:a6:de:bf:d0:7e:cf:9b:3c:c3:b5:3f:ac:16:
3f:b6:5b:a6:82:26:09:72:18:9d:f0:e2:77:0a:8b:
90:5c:b2:09:3a:69:25:b0:23:fd:09:59:6a:23:05:
d3:33:60:3d:4a:b7:d9:3b:62:a9:dd:5a:46:bd:93:
23:88:d4:5f:e2:23:32:f9:64:5e:93:42:fc:1f:3d:
9d:5c:d3:a7:59:7f:60:e9:65:fb:c3:0f:e2:b0:78:
f6:0a:ba:cc:9d:47:b4:67:49:60:27:31:e6:f8:a1:
10:85:df:fb:a6:65:e5:57:aa:df:8f:c9:70:d4:0a:
9e:5b:4e:b4:6a:da:1a:59:ec:6a:06:c7:38:68:bb:
7c:ac:3c:90:1d:75:4d:58:29:71:81:e1:e5:9a:96:
52:de:d4:b3:3c:93:c1:77:47:c7:93:19:c6:0e:eb:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0E:A1:4A:1D:EF:51:78:9C:CC:89:68:72:01:AF:FC:D5:2B:A0:47
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:89:8e:9d:f8:76:a3:2c:6f:11:fd:f6:5e:99:a4:4f:ac:12:
62:44:31:74:e0:9f:02:c4:3b:78:e0:d3:9e:e6:c8:c1:ee:77:
6f:20:aa:6a:0f:7e:21:9d:95:2b:ad:23:74:64:70:d4:c6:02:
47:9f:78:a7:15:f7:48:b5:e5:37:e0:d7:eb:f8:1a:e5:03:d4:
a4:eb:e6:b6:8e:b7:e8:41:86:1d:50:f0:6a:02:d8:58:ce:86:
c1:9a:d4:d7:f5:74:32:3b:91:ce:01:bc:bf:12:59:fb:a7:1a:
31:24:26:12:b9:52:54:94:20:78:6d:af:b9:0b:86:32:71:85:
72:7f:a7:4b:d5:b2:78:b5:8e:e8:3e:b4:6d:59:d3:fd:ac:ec:
f6:fb:9d:9c:b1:5a:24:f1:18:dc:c5:cf:31:ba:71:04:64:e1:
0e:6e:35:8e:aa:bb:c0:60:a0:7a:21:9c:55:f8:44:b0:30:ed:
37:b8:b3:06:e5:13:78:ca:77:4b:38:37:fc:3b:bb:8c:c9:4f:
b7:e6:c4:f6:12:ab:96:7a:bb:a5:16:47:2c:4e:87:e1:6f:04:
5d:a3:94:86:4d:37:70:f8:6e:2f:26:ad:fd:71:9b:54:f6:21:
b0:2b:22:d5:48:86:8d:33:78:3b:51:0f:20:1d:cf:41:15:81:
fe:78:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:30 2025 by rpki-client