Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: zL8aCMTVJvWGt2M2eymPjnhwhrlITgmY1SNEXUZ60SQ=
Subject key identifier: CB:DC:32:28:EF:E4:E4:13:C2:5B:92:2E:45:2D:55:1A:1B:28:17:6D
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 0198D5F192B10BCCDFBED2C245680E9E3CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 05AB
Signing time: Sat 23 Aug 2025 08:00:35 +0000
Manifest this update: Sat 23 Aug 2025 08:00:35 +0000
Manifest next update: Sun 24 Aug 2025 08:00:35 +0000
Files and hashes: 1: qeRkAxuKV7jDoBRtnwhgHvVO2oU.roa (hash: AbAyYkMckXNzAm/R63UZOCSEewsBDfH65FR66tVjq2s=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: 8c3A9waW49pBzxJGcKVP9X56eyXCJ9h0slD78xSkCgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:92:b1:0b:cc:df:be:d2:c2:45:68:0e:9e:3c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Aug 23 08:00:35 2025 GMT
Not After : Aug 24 08:00:35 2025 GMT
Subject: CN=cbdc3228efe4e413c25b922e452d551a1b28176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:42:5e:0e:93:51:87:58:0d:7d:35:e5:1b:
b0:b0:8e:9a:78:71:d8:5e:7d:ca:ac:01:de:a0:cb:
0c:ef:e9:64:44:d2:f2:f4:cd:30:08:bd:b8:50:e3:
f8:86:f3:e7:be:4d:18:48:cb:bc:3c:52:14:d2:6b:
49:94:2c:37:b4:69:22:d8:59:76:b9:82:30:01:1d:
08:ec:28:db:f3:8f:0f:34:d5:f6:a5:fe:2b:83:c0:
d9:7b:de:fe:c8:58:f2:7f:2b:ae:01:12:ce:50:08:
b6:0e:c4:73:11:b0:ed:09:b7:39:c3:82:37:f6:aa:
5c:bf:6e:2f:c9:c5:b2:b2:53:56:a6:10:56:fc:51:
f8:28:17:b7:bc:2c:07:1c:26:64:fd:e7:46:35:37:
62:b8:7d:bb:c3:b7:7d:21:3e:a2:5f:f2:92:da:fa:
e4:21:17:6d:01:a1:29:4b:99:c8:a9:70:9b:a8:3b:
fe:9c:bd:70:4d:05:54:79:20:8c:2d:43:29:48:50:
17:c2:5f:b8:fb:c8:0a:37:7a:84:54:e0:07:3b:33:
6d:b9:73:0e:ff:24:db:6d:f1:dc:04:5d:88:d5:26:
cb:44:01:17:da:ac:8c:4a:f5:51:cb:8f:96:86:f9:
ad:f9:f8:65:d1:5e:b6:a5:55:3d:67:91:56:8f:90:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:32:28:EF:E4:E4:13:C2:5B:92:2E:45:2D:55:1A:1B:28:17:6D
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:7a:0a:aa:e9:c4:6f:63:96:df:ec:73:f6:bd:6a:e4:64:
ac:fa:1e:6f:cd:9a:7c:a4:e0:1f:31:1a:6e:2f:cf:84:a8:fa:
f3:e3:b7:e9:ab:a0:2b:a6:4e:a0:fa:20:3e:0d:4f:3a:cd:ba:
c7:17:3f:37:04:84:6b:75:93:4a:f4:09:74:6b:35:20:67:6e:
89:44:72:f3:54:fe:3b:59:99:f4:3d:6d:6e:ad:00:ef:07:ec:
34:f6:c3:b9:2e:bf:1a:f8:f0:f9:6d:f5:13:d2:c7:0e:ff:6d:
96:b3:46:bd:b2:24:b4:a9:2a:89:d9:da:9d:71:ea:80:d9:91:
1a:b1:9c:8c:91:55:53:29:a4:85:51:f6:49:37:3c:34:67:25:
04:5c:74:d1:2b:ba:35:34:9d:d5:df:1b:ab:d8:f7:45:97:55:
fb:97:ef:49:1a:68:01:4c:d0:a3:c9:07:4c:a1:73:89:ee:10:
79:44:99:d7:4b:03:c1:69:38:7e:fb:4e:bd:59:87:50:19:a6:
5f:50:30:50:8b:4a:4a:7a:0b:c3:82:35:43:82:b3:8d:16:1d:
ab:f0:4c:74:1c:19:75:26:97:16:32:33:8e:1b:c1:37:4e:85:
e7:3c:34:bb:1b:1e:77:4e:c4:0c:6b:17:04:62:f0:60:d9:a3:
79:0f:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:58 2025 by rpki-client