Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: KPPrx7akRBg05i3chyqZqOjASZquk6K6D0VES9vP6Rk=
Subject key identifier: 9E:A8:30:DA:19:1C:07:3F:78:DB:C0:AD:0E:40:BD:F8:78:9D:A4:9D
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 0198D54ECBA8A5E09125CAC4C29D2CF4C9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 0ABB
Signing time: Sat 23 Aug 2025 05:02:47 +0000
Manifest this update: Sat 23 Aug 2025 05:02:47 +0000
Manifest next update: Sun 24 Aug 2025 05:02:47 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: 6krYzpQLTWI9rF55IG/KOBI5N22wS2vYIPJ6LOOV2IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:cb:a8:a5:e0:91:25:ca:c4:c2:9d:2c:f4:c9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Aug 23 05:02:47 2025 GMT
Not After : Aug 24 05:02:47 2025 GMT
Subject: CN=9ea830da191c073f78dbc0ad0e40bdf8789da49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:98:7f:f0:39:4e:38:82:df:ca:fe:00:eb:
ab:b6:4d:01:60:38:51:e7:70:ba:79:2c:51:a9:de:
d8:2f:c5:cc:02:6f:e9:be:93:02:9a:b2:98:e8:d0:
c3:7a:9a:88:5b:01:ba:a2:5f:1c:38:4e:00:38:94:
f3:91:13:92:67:6b:0a:55:1f:f0:b3:da:b1:6e:88:
42:b7:08:68:b0:af:31:f9:6f:bd:b5:d2:bc:50:7c:
77:a2:a1:37:fa:eb:ff:38:72:f3:35:b4:f6:f9:11:
f4:c4:ab:03:c1:90:b2:5c:f7:05:29:83:81:82:9e:
db:bb:16:dc:17:c0:ff:7f:c5:0d:b7:c2:c5:8f:90:
7e:1b:59:b8:15:82:5c:0a:b0:25:09:ff:c2:a5:7b:
72:1e:a4:42:dd:e1:0f:41:42:38:b1:0f:0f:b0:0f:
8d:af:a2:18:4f:f1:10:0e:57:31:5a:c0:75:d7:90:
06:2c:29:da:2a:a0:e5:0a:f2:cb:58:78:24:60:17:
43:45:d8:c6:70:e4:78:59:e4:65:f5:08:64:99:b5:
01:56:11:29:08:a3:f2:59:b5:2d:14:fe:8f:6b:38:
25:33:82:d0:16:d2:98:3b:2f:ec:15:0b:a6:59:e5:
bd:ea:d9:83:dd:be:31:4a:a1:ab:a6:70:cc:63:91:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A8:30:DA:19:1C:07:3F:78:DB:C0:AD:0E:40:BD:F8:78:9D:A4:9D
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7a:25:0f:ae:ed:80:77:d5:9b:b3:e4:b9:88:1f:25:84:0e:
eb:f7:57:01:e6:4d:89:79:92:8e:09:e1:85:4f:6e:35:72:da:
4f:bb:09:c5:94:ed:b4:4b:68:3d:76:77:22:31:a2:7c:66:a3:
c4:30:de:08:e7:29:c0:0d:eb:f6:16:1e:1a:e2:93:11:86:42:
2f:2c:00:62:54:40:d3:e5:2c:cf:0f:2f:79:34:4c:81:df:0c:
a4:0a:09:da:ee:55:4b:72:87:2b:bc:aa:57:6f:cd:9f:7d:28:
9f:3b:c7:ea:d0:c8:4c:4f:fd:d5:13:6e:be:fe:5e:4f:bd:06:
53:a2:44:66:f5:87:37:20:77:4d:2d:a0:ca:2e:13:72:98:53:
04:5d:8a:ef:22:07:cc:f2:52:4a:45:3e:7d:fd:fc:9a:69:84:
13:77:26:82:de:ff:2f:1a:a8:b6:f8:5f:8d:e1:0f:6c:c8:1e:
ae:53:6c:19:4e:f1:c2:1f:57:c9:1d:e1:81:17:68:9c:a8:0e:
3c:95:00:10:77:51:b6:f0:2c:d1:db:8e:ec:a1:65:8b:fc:3e:
32:0b:35:9d:70:2d:e0:18:9e:f2:a4:52:25:db:b3:f2:9c:47:
16:6d:ab:46:da:59:f4:18:3b:79:36:86:87:5a:2f:e1:08:64:
0e:5f:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:17 2025 by rpki-client