Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: zHUElP0Cky+pU6Qu5dLWFgnyese3O0aCsicFjC3/sRc=
Subject key identifier: 9E:84:E5:E4:10:8A:C9:48:89:67:7B:15:7C:8D:4D:E1:73:B9:52:08
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 0198D4731FD761055B83408BAA8FB1A2C136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0B6A
Signing time: Sat 23 Aug 2025 01:02:51 +0000
Manifest this update: Sat 23 Aug 2025 01:02:51 +0000
Manifest next update: Sun 24 Aug 2025 01:02:51 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: iE5L7baid+aT9qj6PoOTi5mLEVkBDVYyk4hRXEgMtjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1f:d7:61:05:5b:83:40:8b:aa:8f:b1:a2:c1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Aug 23 01:02:51 2025 GMT
Not After : Aug 24 01:02:51 2025 GMT
Subject: CN=9e84e5e4108ac94889677b157c8d4de173b95208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:a5:26:8d:6b:5b:b6:f2:82:ff:6c:d8:c2:
1c:4d:95:9c:4f:ef:41:32:4d:8e:73:95:19:a4:cb:
be:61:0d:81:71:30:3e:1f:9f:f4:99:c2:fe:2e:6b:
4d:62:52:6b:a0:23:75:a0:ab:35:4b:da:34:7a:91:
5e:ea:5d:00:b3:a6:1c:d4:bd:67:c7:95:87:2d:e8:
60:31:ab:73:fc:7d:d5:e0:c7:d4:35:02:68:f7:96:
4a:e7:ab:21:20:78:5e:67:27:80:63:53:8c:15:12:
13:6d:d2:7f:34:36:91:d3:58:0d:c8:e8:ac:dd:49:
f4:fd:5c:18:6f:92:28:5d:c8:b7:b7:71:72:c6:4a:
07:92:ab:fb:02:fe:84:4f:eb:3b:de:63:41:e0:4b:
ef:3f:c9:b7:45:d1:bd:19:3b:2c:79:65:05:0a:2d:
6b:e4:c7:c9:5d:1d:f1:ee:f3:b5:c3:42:83:53:f4:
e5:6c:11:fc:b2:ee:37:61:86:f0:ed:8d:06:d0:73:
2f:bc:d8:59:02:e8:5e:10:5f:54:d5:e1:95:91:22:
57:34:26:8e:ab:dd:71:24:9d:fa:a9:8b:ea:43:e7:
d4:fa:bd:fe:47:0f:92:6e:64:d1:4e:61:70:cb:93:
35:c8:45:df:be:cb:80:2c:63:1f:88:c1:a8:eb:c7:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:E5:E4:10:8A:C9:48:89:67:7B:15:7C:8D:4D:E1:73:B9:52:08
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ad:36:61:f8:5d:7e:0b:46:cb:cf:38:bb:d0:28:64:fe:b9:
f9:47:7a:77:d7:6f:f4:de:51:a5:96:31:11:f0:b8:91:e6:05:
15:d0:ff:a7:7e:1a:c0:f2:91:8d:db:47:33:b0:21:3e:21:ac:
32:e4:e4:a4:45:e8:ee:58:02:f1:2e:ce:c3:99:77:e1:da:48:
f9:8e:2f:5e:d0:40:a9:15:48:eb:1c:93:ff:f6:c6:82:80:1d:
13:6f:fb:2e:63:3f:ca:e5:f1:ec:ec:a9:32:d0:87:1f:5b:b2:
90:76:28:4b:a1:79:52:cf:38:0a:55:20:8f:bd:48:e0:78:70:
f6:30:1a:d4:d7:9a:4c:f4:7f:aa:67:7c:25:6d:d9:2c:63:25:
60:72:43:f4:c3:a0:03:9b:0c:a3:8b:29:68:54:30:a8:7b:a1:
2b:25:76:a2:3c:e4:6a:6e:0f:63:03:1e:41:b8:c7:c2:7c:77:
07:18:e5:10:0d:25:e1:bc:39:f6:51:97:e2:34:33:0e:99:44:
42:20:b9:ba:0a:da:4b:23:78:5f:01:82:14:f5:98:d1:b3:bf:
5c:7e:dc:6e:f9:2e:5c:ae:99:d9:09:da:3c:9e:af:fc:50:2c:
17:72:42:31:db:f0:ef:d9:39:da:8a:11:4d:89:6a:03:0d:63:
56:41:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:51 2025 by rpki-client