Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File: yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier: yHtyf2hn7FHJMv830timd+e9XqRgyeoi2VjaceceueA=
Subject key identifier: 69:CE:8D:C8:3A:17:F4:90:D4:8D:52:C3:BC:F6:15:00:AC:61:87:55
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial: 0198D65FD65A7BA17AF5FCE6B842E15749DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number: 0806
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: rOX9zRwObaYZKZTR0WDKGvQYCI8.roa (hash: AVl8Cu7AhfVM1Wh1VdzrltPVEMOUXlEEy7ZTpT+wzAA=)
2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: iWu3uCi5qowzWXKEg0HHmpjHwdZPrv584DFGgwlSP2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d6:5a:7b:a1:7a:f5:fc:e6:b8:42:e1:57:49:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=69ce8dc83a17f490d48d52c3bcf61500ac618755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:97:51:67:3d:38:14:01:bd:e3:b5:76:4a:
72:87:f2:ce:01:7a:10:42:d7:d6:33:8f:df:ca:89:
b4:ad:89:ec:62:40:60:fc:84:0a:d0:12:5a:ab:e1:
7f:ca:84:91:93:18:3f:9d:d6:3f:fa:3d:6d:76:ee:
96:17:18:bf:1f:81:c6:35:bf:44:d5:78:ad:d4:94:
ca:b9:b5:16:8e:56:ac:b9:2b:e0:f1:7a:78:8c:b8:
49:88:f5:75:39:9a:0e:3d:0f:8d:54:9b:de:dc:1d:
d4:6a:1a:9c:82:60:e0:d4:27:b6:19:77:3b:d3:51:
b0:c7:14:30:d4:85:af:3b:42:0a:ad:71:29:14:de:
57:13:ea:8e:a5:f2:3c:d5:87:5b:da:0a:1d:af:78:
ea:d9:5d:4c:a1:4e:c8:5f:77:f8:62:f7:75:78:0e:
f2:7d:c7:8b:13:b7:5c:4b:0e:98:0b:cd:bf:4a:24:
ab:c4:1d:4b:43:40:05:6d:5e:25:9b:bd:60:8c:f1:
c7:e8:49:3c:02:27:3e:16:ea:13:b5:66:4b:6c:8d:
e0:07:e8:6d:8d:42:95:77:98:4c:de:39:90:28:44:
d9:83:78:96:cb:7a:64:8b:91:42:35:27:46:f7:fd:
e4:11:d8:b9:ab:06:9a:04:90:7d:36:ea:a3:e2:5a:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CE:8D:C8:3A:17:F4:90:D4:8D:52:C3:BC:F6:15:00:AC:61:87:55
X509v3 Authority Key Identifier:
keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a9:d8:1a:a8:6c:f3:89:ec:49:1e:c7:51:98:7d:7a:e1:3c:
05:18:9a:15:33:78:81:05:39:66:06:e2:82:b7:0c:f7:7b:76:
a9:80:6a:4f:30:16:dc:a2:fb:48:42:ba:3a:fa:5a:fd:a6:a0:
08:f9:12:43:69:9d:41:59:53:87:fc:63:e7:5a:85:a7:82:9b:
c0:27:d9:e0:70:03:cf:7e:31:42:27:69:00:c9:35:26:f3:ea:
ca:15:9c:6d:27:2e:b5:c8:9b:4c:13:44:f4:46:41:ea:78:91:
7e:9b:1d:3d:cb:73:ef:1f:88:5c:33:86:cd:ad:7c:53:1b:c8:
09:3e:26:88:7a:8e:05:db:46:4c:12:fd:75:e6:65:c0:f9:c5:
b8:b7:2f:88:9f:65:d1:a8:c5:98:2e:be:83:c8:0e:87:b4:4e:
76:fd:95:61:fa:95:ec:72:09:34:c1:59:f7:24:6d:51:f7:72:
6c:c3:f8:35:01:46:c9:49:7a:b5:88:85:8a:60:34:d9:49:01:
93:39:7e:90:13:cd:5f:4a:d3:78:bf:c5:5e:10:44:84:b4:c4:
53:bf:26:c6:aa:25:d9:d7:67:d4:b5:b5:29:de:bf:8e:4b:ee:
9b:26:1e:c1:6e:3d:49:bb:6b:63:f7:74:92:54:24:4b:46:36:
e3:e3:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:55 2025 by rpki-client