Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: eUcQ7N7mQrjkvdKn4CPr+L2Vr61HxeyqT28M5fWuQiE=
Subject key identifier: 31:53:4B:98:4A:E5:B9:3B:97:6F:93:6A:5E:A5:0E:3F:E6:B8:3A:AA
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 0198D6CD0684CE35C9AA47CBA5D725DFF52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 15AB
Signing time: Sat 23 Aug 2025 12:00:17 +0000
Manifest this update: Sat 23 Aug 2025 12:00:17 +0000
Manifest next update: Sun 24 Aug 2025 12:00:17 +0000
Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=)
2: BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa (hash: +wyGsgZf3mkT04YYiaLjKGX/U5oOsHBvxk3RajkpCvY=)
3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: Vs5pFuJu41dRgiNE5Yt2zL+tLafslEIRY1p4amSCOdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:06:84:ce:35:c9:aa:47:cb:a5:d7:25:df:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Aug 23 12:00:17 2025 GMT
Not After : Aug 24 12:00:17 2025 GMT
Subject: CN=31534b984ae5b93b976f936a5ea50e3fe6b83aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:0a:e6:3c:f3:06:2c:7b:6b:8c:5e:7a:fd:
99:97:f8:5e:4c:fa:9d:43:86:c1:3c:8b:b3:1a:28:
a1:ae:bb:44:bb:fe:d5:24:78:b5:0f:07:a4:27:c6:
cf:dd:9a:64:c7:9b:09:31:fe:55:46:94:64:99:e7:
45:d8:69:c4:cd:34:96:af:3d:28:33:de:46:72:91:
3a:53:36:09:27:44:97:09:36:c9:c5:4a:f3:9f:08:
24:38:49:14:69:38:00:99:16:38:74:49:bd:e6:94:
78:0e:56:e9:a6:91:9e:b7:b6:18:27:d5:aa:bb:03:
f2:5c:31:56:9a:82:40:3b:c6:42:35:ea:fa:08:88:
b6:07:0d:21:42:48:59:33:0d:af:16:5c:08:9c:47:
5a:7a:c6:41:b7:e2:42:b5:67:79:c9:c4:53:20:89:
6b:61:7e:fb:ce:95:aa:96:a2:75:10:65:8a:1e:22:
f1:85:e1:bd:27:7d:b6:4f:9b:df:d7:33:1f:aa:0f:
48:ff:83:60:8b:87:41:f9:cf:e9:a1:8a:d4:e4:5f:
38:57:ea:e2:58:e0:83:f3:b9:62:48:c8:0a:da:1a:
6d:a7:25:76:b2:8a:a3:5a:9f:1e:93:99:db:6f:69:
f2:9f:b2:57:58:ee:20:83:d6:9f:10:d4:49:8a:a1:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:4B:98:4A:E5:B9:3B:97:6F:93:6A:5E:A5:0E:3F:E6:B8:3A:AA
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2c:b5:8b:10:ea:b9:59:4f:e6:47:cb:40:4b:ef:c3:f8:dc:
7f:85:e5:d3:d2:86:07:fe:c9:f8:f2:8e:24:1d:b6:53:99:d3:
87:7d:1c:e6:6a:86:45:5a:c8:5b:78:ec:3f:20:96:ff:3e:8e:
2f:a4:71:01:84:f9:5e:97:19:f0:8f:bf:cf:2f:01:49:36:4e:
82:e4:9b:ac:f6:82:c0:e5:c7:23:ee:e2:a0:39:03:fc:76:85:
96:48:8c:c1:9f:f2:45:80:77:83:19:6d:4e:77:8f:16:aa:d9:
82:86:c4:13:c5:94:a1:24:54:2b:36:4d:9a:4d:4a:89:41:3f:
51:46:87:89:44:25:8a:c3:c9:12:61:d5:6c:d5:75:ac:30:c7:
53:da:6b:10:c7:16:2a:a1:0f:b3:6b:b2:2a:05:9e:e3:c2:8f:
1b:a8:f1:b1:a1:b8:d3:ea:f4:4d:b3:1d:3c:ec:46:1f:9b:b7:
26:31:20:c4:3d:7f:b7:d4:8a:fb:87:69:21:d3:2c:16:1c:6d:
c5:1a:dd:2b:bb:b8:b6:03:9b:8b:33:15:ec:a5:00:8d:65:d6:
14:73:c2:61:c4:ee:fe:81:92:55:9b:de:23:0a:dd:67:7c:aa:
2c:0a:bf:63:26:0a:1d:af:4b:ea:d7:75:b5:46:15:4a:4b:1f:
74:ab:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:05 2025 by rpki-client