Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: E+/9jCe3aHOM6vWT72mFNoIkBDAj23z95sbg037nbUs=
Subject key identifier: DD:98:BB:D3:59:51:AF:97:95:E9:5E:BB:F3:94:17:03:D4:B2:9D:84
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 0198D4E015E0EAEB02A1119D48D00337A2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: pP3xWgkvZ17lEG5iG+kwKeJaakWM+85WhjB4vUcrv2Q=)
2: GriK4KCJf_pD-27uHbjP7oEGNcE.roa (hash: ZFT+MzdQyFzyxpSKYu1uYqlJsuD4hjBAizP1SCZZEkg=)
3: e59o4nflKfkRbUwhU4WwMTxJI_Y.roa (hash: qghzj0Mw1zkJvf6+G2QT/sr1eaEcjZizZylknw1LbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:15:e0:ea:eb:02:a1:11:9d:48:d0:03:37:a2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=dd98bbd35951af9795e95ebbf3941703d4b29d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:80:a4:87:ae:43:09:8e:3e:c0:b4:f4:45:
f7:56:ed:1e:9f:ae:94:41:e9:12:ed:cc:b3:0a:df:
c4:5d:eb:7c:5c:cd:85:4b:21:36:17:d0:1b:e3:01:
29:d4:79:f9:a8:fe:65:65:33:ef:6e:15:dd:da:0d:
75:86:12:65:47:40:c0:84:23:4b:9a:92:6c:7d:01:
9e:f3:f4:89:4e:f7:63:2d:49:89:c5:cf:31:af:45:
91:d1:c2:14:66:e8:e2:d6:18:5e:98:4d:f7:1f:55:
06:ed:ff:28:8d:11:1d:a8:96:4f:8a:c0:5b:a9:d9:
0e:f5:e0:e0:2b:d8:dc:3a:83:65:d8:c7:ea:88:f4:
d4:64:7f:85:c4:b2:a6:d0:ed:03:77:f3:e8:a8:94:
e7:04:ff:68:a2:94:84:48:14:f8:d9:ab:39:12:d9:
95:ff:e1:02:5e:de:c4:fb:2c:d7:4a:94:ac:39:a0:
e7:92:cd:5a:44:ad:bd:33:f1:15:73:60:1a:cf:52:
9e:67:d6:4a:c5:70:cb:fb:d4:c0:2b:11:08:74:80:
95:2d:1a:23:f8:25:6e:f6:92:7c:67:3a:54:55:9e:
24:54:9c:71:08:c2:c2:e7:ee:05:27:d5:7c:ed:e3:
e2:85:cb:5b:7c:4b:e2:61:88:a8:12:f5:71:ca:21:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:98:BB:D3:59:51:AF:97:95:E9:5E:BB:F3:94:17:03:D4:B2:9D:84
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:44:83:2d:e1:03:ef:17:da:36:5c:96:43:68:3f:52:64:bb:
7e:4a:3d:90:78:64:8c:6b:e9:3f:29:cb:74:12:69:5e:b9:9e:
1d:ef:9f:2f:f2:f8:e4:7b:87:43:cb:aa:0e:7d:48:53:70:c7:
6d:ff:cb:d0:58:86:be:42:74:aa:2c:14:fb:86:68:35:50:18:
17:81:26:1f:e4:de:86:d8:bb:c4:fe:b8:b2:f1:b1:b1:4e:f9:
02:80:a3:45:c1:eb:55:50:90:8d:b0:34:19:2e:8b:ec:36:10:
f5:51:47:5b:ce:56:04:31:34:12:e3:95:f0:75:f6:77:4a:d7:
ef:a2:36:22:d8:cd:62:33:a8:96:56:bc:f4:de:45:03:40:10:
d3:dc:51:a1:b0:a5:95:74:43:91:21:f0:cd:13:69:56:39:ed:
e5:d0:3e:ea:67:1f:68:83:18:ba:6a:b6:5c:52:8c:d1:89:ad:
68:05:9f:21:48:8f:e4:95:cd:52:87:ed:24:7a:aa:85:d4:22:
18:58:7b:62:13:a3:06:65:82:3d:e1:fd:6c:e4:bd:c9:af:1d:
ad:29:ca:98:ab:1f:7d:44:f1:08:30:76:fa:17:a5:53:f9:98:
3f:00:4b:ab:1e:dc:9c:02:5b:31:aa:60:ca:3a:e3:a6:8b:15:
59:fa:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:09 2025 by rpki-client