Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: kyKFD2JqVjdpLHQXCcARI5b4bVHIg2JJFMcqllwgFqw=
Subject key identifier: A5:96:16:DA:EC:93:C8:36:16:F8:05:69:B9:4F:2B:91:E4:4C:8B:F7
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 0198D7E0EC8763816439B4EC6038C7147840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 12DE
Signing time: Sat 23 Aug 2025 17:01:38 +0000
Manifest this update: Sat 23 Aug 2025 17:01:38 +0000
Manifest next update: Sun 24 Aug 2025 17:01:38 +0000
Files and hashes: 1: J64w76zXIm6hBV_NCpHfs00xQ5M.roa (hash: tW24A+133JMJcQQWR3X2EMPjynjBMoPzLLODpQzP0s0=)
2: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: u8EuQ40LF6ugbcbIwB8bXYntIRHH2LJXG8+X6iVe4Uo=)
3: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (hash: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:ec:87:63:81:64:39:b4:ec:60:38:c7:14:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Aug 23 17:01:38 2025 GMT
Not After : Aug 24 17:01:38 2025 GMT
Subject: CN=a59616daec93c83616f80569b94f2b91e44c8bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:fa:72:2e:0b:9f:7d:6d:11:96:c5:90:e2:
4f:21:e7:d0:e3:34:23:7a:07:ce:9a:02:dc:04:81:
0d:89:f6:24:b4:dc:9a:dc:6a:64:1c:58:1a:d9:55:
a1:c3:1c:f9:cf:1e:67:8c:44:0c:ba:f5:2e:99:e5:
3e:59:ee:c7:a2:a8:4f:06:bf:5a:af:0c:79:56:d3:
04:03:b3:2b:7c:85:47:af:91:56:42:e3:1c:9b:3d:
d2:fc:bd:07:f7:11:f6:cd:e0:f9:71:ba:13:68:02:
ba:a2:53:c6:f9:bc:c9:0a:ff:43:07:73:10:ca:37:
9b:69:7d:d5:4a:1f:bf:db:f6:1a:8a:7d:13:e1:fa:
a9:d7:a6:1a:fc:c3:9d:0c:a3:e9:c8:c5:00:2f:82:
79:9d:6c:41:19:e3:07:5e:ab:47:08:91:ea:46:f0:
95:fc:56:0e:26:45:5a:e6:b7:98:fe:c1:cb:6c:7b:
c1:a8:97:20:3a:b2:74:e8:2a:b9:4e:07:2b:9a:a2:
f4:a7:bf:ae:f3:16:41:80:e2:36:ab:21:b5:90:39:
f2:99:ad:4e:70:be:ae:e7:24:29:cf:d7:67:b9:24:
43:b7:01:2b:11:25:3a:24:7e:de:c2:5a:c9:4a:ed:
af:bc:26:21:33:50:4a:8d:2b:12:97:39:6f:0d:71:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:16:DA:EC:93:C8:36:16:F8:05:69:B9:4F:2B:91:E4:4C:8B:F7
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:15:d7:96:4d:e1:d3:25:d1:27:f4:8c:26:7e:8b:51:42:49:
ec:9a:53:8a:db:3f:b9:86:28:b0:d5:3d:ed:0c:b7:b1:1c:63:
0e:0d:e8:90:e3:2e:3f:79:aa:17:72:3a:fc:41:d4:f1:93:81:
14:00:da:7b:9d:79:97:9f:aa:71:92:68:0a:ed:9e:a7:90:93:
23:14:5d:93:83:12:dc:b4:5b:c1:e0:a6:d2:e9:10:49:fc:a1:
4f:e8:75:85:a9:e0:26:91:e2:d6:27:bf:c6:7e:47:e8:e4:da:
f6:18:b9:df:49:22:7e:2f:4c:0d:c9:ec:8b:64:a7:ea:c0:61:
45:41:ea:ff:f3:af:59:42:0b:e2:d5:a2:35:b4:52:63:71:d2:
28:fc:e9:42:ee:56:f3:f3:79:5a:05:ff:a0:ad:6e:d8:a8:70:
4a:93:cc:ae:dc:e1:b7:36:e5:5d:c3:1f:c6:47:f9:c2:87:94:
54:01:d7:11:b1:ae:f1:58:71:99:6d:de:3c:5d:d0:11:68:85:
9e:92:12:8a:3d:7f:36:54:fc:3b:00:39:1c:fc:a4:fd:52:1d:
5d:32:dd:74:9d:de:e8:73:24:a5:b1:d8:fb:d5:e3:df:d8:43:
b5:99:56:1f:df:bf:6d:5f:23:f5:fc:0f:d7:e0:c0:58:43:9d:
f3:b0:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:00 2025 by rpki-client