Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
File: yCyAAaF2QraVYsY6xYkg2jYPFU8.mft (raw, json)
Hash identifier: DNO1Oxxw2ZyWJCNNMInamrfsUA96R+tDayj2wj0jcro=
Subject key identifier: 3A:3A:8C:66:A1:62:73:45:6F:72:11:75:FA:5D:A8:5C:FA:39:17:E3
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Certificate issuer: /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial: 0198D5BBA9340B3B3D4CC525F2487CB2EE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: 1QZVcXytUuxqM1PLlTk73xY8pDU.roa (hash: oWmFEOAWi7NkKA3U3ke7LKelHFeRhHAmJaVgP86H32g=)
2: yCyAAaF2QraVYsY6xYkg2jYPFU8.crl (hash: JwI6wMNqHVZiAZqFEernmAzTBxYuy/97oFMrK1bpiLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a9:34:0b:3b:3d:4c:c5:25:f2:48:7c:b2:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=3a3a8c66a16273456f721175fa5da85cfa3917e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:88:3f:b2:f1:23:8e:ea:4f:ca:8d:6e:11:
de:5d:59:4b:cf:67:9f:c0:50:f6:8b:e6:57:7a:a2:
a3:e6:80:44:ab:97:00:af:e0:e0:f6:89:22:08:64:
8f:95:d0:c6:a3:f0:02:de:74:2f:40:bd:0c:1e:ef:
0d:1b:d2:04:66:7c:22:6c:22:c0:ba:e6:fa:72:8e:
6f:c8:a8:10:3f:0d:a7:6f:01:ee:68:86:24:56:a5:
d8:c0:f5:a6:f7:05:21:e4:0d:01:82:b5:3f:97:b9:
c7:40:92:ef:0f:e9:d1:5d:bd:07:40:59:43:bc:8b:
f3:58:77:86:c9:39:ef:81:95:7b:8d:ba:cd:96:45:
29:d7:af:9b:4d:13:5a:f1:ca:bd:b4:04:6f:6d:cd:
fa:ce:08:9a:c4:73:72:bf:d0:dd:eb:85:b4:0e:42:
49:b3:9b:4e:79:ad:4a:73:da:5f:7a:29:2c:9e:58:
4e:81:08:77:2d:4e:55:6e:09:61:d4:e6:df:eb:7d:
16:82:71:38:58:48:ad:31:46:aa:93:77:84:29:fe:
86:4c:88:23:d7:ca:0d:75:da:76:64:3e:73:52:55:
fb:61:01:3e:01:8f:1d:16:ce:c7:7b:fc:77:f9:4a:
a3:5e:f8:be:3f:95:35:6c:e9:84:c0:8a:e0:6d:4d:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:8C:66:A1:62:73:45:6F:72:11:75:FA:5D:A8:5C:FA:39:17:E3
X509v3 Authority Key Identifier:
keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:df:e5:f6:73:65:7b:4b:32:70:4a:d6:21:05:3b:0a:0d:81:
05:c9:d1:d0:36:03:bb:75:35:14:9d:78:90:dd:af:43:e0:ce:
3f:50:51:6c:f0:f5:da:39:f2:4d:aa:18:c4:55:32:ee:e8:28:
5f:ed:a6:85:7f:8c:7a:3d:1a:e5:9b:90:e5:ff:47:b5:eb:aa:
df:69:06:ce:ca:1c:74:42:8a:d3:aa:31:52:53:70:d7:f0:9a:
5f:ca:65:2b:7e:99:81:3b:32:f4:8a:45:96:d0:42:ce:f4:90:
30:b9:73:bf:f0:80:a4:9a:1a:21:6b:f5:64:b6:e0:7b:10:b7:
8e:f7:fe:26:7a:bd:2a:87:0e:91:0e:5e:a5:e4:88:21:54:28:
2f:51:ce:c2:92:bf:63:e2:be:de:47:a7:f7:52:15:56:cb:2d:
f9:ae:40:31:cc:f9:9a:ef:a5:30:a3:12:6a:ea:d2:25:3a:0f:
03:7b:d0:a3:74:41:36:e9:8a:d2:46:c7:6b:9b:64:c2:7e:cf:
47:ed:3f:79:ae:be:00:ec:d3:2e:9a:97:51:b9:f0:b5:bd:26:
be:ee:82:31:6f:11:aa:46:0b:a1:c6:ea:54:e0:a4:9a:c3:10:
54:bf:3a:31:5a:25:4d:d1:18:59:de:f1:d6:97:0d:ae:2e:5f:
54:99:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:06 2025 by rpki-client