Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/eba0b9-6275-426c-8b10-95db9bf63763/1/yzvaOHewO7evSs-WD9wvlt6JH_E.mft
File: yzvaOHewO7evSs-WD9wvlt6JH_E.mft (raw, json)
Hash identifier: LyZ8q5zjFhwmHG7tlOn8aDUXFDB4mKGL5BsMZjZvVo0=
Subject key identifier: 68:F1:1B:C7:1B:66:43:CE:02:78:39:6F:A2:9B:36:43:36:3B:6E:B6
Authority key identifier: CB:3B:DA:38:77:B0:3B:B7:AF:4A:CF:96:0F:DC:2F:96:DE:89:1F:F1
Certificate issuer: /CN=cb3bda3877b03bb7af4acf960fdc2f96de891ff1
Certificate serial: 0198D4A830E00F9AAC2F082334BE3BA71DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzvaOHewO7evSs-WD9wvlt6JH_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/eba0b9-6275-426c-8b10-95db9bf63763/1/yzvaOHewO7evSs-WD9wvlt6JH_E.mft
Manifest number: 3C
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: fQnNiPgnrExlgGixhIK5k0FYGr8.roa (hash: g9xiA7oNRTWzFjyPXSwcVbHrjtoJGtsiu0z+mGGqspE=)
2: yzvaOHewO7evSs-WD9wvlt6JH_E.crl (hash: PgFS3ynzgFn1kbvbH/3ieSUpaFM8KbSsj6vHWN6NAEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/eba0b9-6275-426c-8b10-95db9bf63763/1/yzvaOHewO7evSs-WD9wvlt6JH_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/eba0b9-6275-426c-8b10-95db9bf63763/1/yzvaOHewO7evSs-WD9wvlt6JH_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzvaOHewO7evSs-WD9wvlt6JH_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:30:e0:0f:9a:ac:2f:08:23:34:be:3b:a7:1d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3bda3877b03bb7af4acf960fdc2f96de891ff1
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=68f11bc71b6643ce0278396fa29b3643363b6eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:44:80:8c:ca:de:16:e3:04:9f:6d:e7:47:
48:e2:53:a1:79:08:d9:fc:dd:05:81:b8:85:04:9c:
97:e9:6b:fc:cf:cc:dd:af:51:54:5b:5a:f7:48:e6:
71:66:13:81:80:d2:aa:3f:ca:d5:05:eb:5c:5f:99:
10:1f:65:81:58:6a:69:cb:ea:11:50:f8:d3:a5:03:
11:08:6c:f5:e5:d1:4b:80:38:36:1f:8d:ed:4d:ac:
d6:1c:c5:6f:2d:63:74:80:48:3a:02:aa:47:1f:e6:
fa:08:10:d0:11:7a:0a:45:77:53:44:4f:c4:21:06:
3f:2e:ba:b2:78:e2:9b:2a:de:a5:d9:40:d8:f0:1c:
4a:68:9a:7d:c2:2d:3c:ba:1a:10:3f:ed:10:a5:5c:
b1:0f:b0:44:4e:a4:b0:98:ed:5d:ad:8d:98:7a:35:
77:b0:d1:ac:de:c3:18:b7:d7:aa:38:2c:82:5f:26:
8c:15:03:1c:d0:f5:2e:bf:8b:ec:35:04:9d:28:b9:
44:5e:28:06:94:37:4d:a6:ad:1d:ca:79:0f:a4:4f:
d0:ab:69:1c:82:fa:d7:29:ce:37:28:2e:71:e4:2c:
f5:2b:5b:36:eb:9c:aa:c9:43:70:87:e5:eb:50:f5:
c0:33:63:4c:56:25:a3:0c:6d:46:85:0c:9b:67:55:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:1B:C7:1B:66:43:CE:02:78:39:6F:A2:9B:36:43:36:3B:6E:B6
X509v3 Authority Key Identifier:
keyid:CB:3B:DA:38:77:B0:3B:B7:AF:4A:CF:96:0F:DC:2F:96:DE:89:1F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzvaOHewO7evSs-WD9wvlt6JH_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/eba0b9-6275-426c-8b10-95db9bf63763/1/yzvaOHewO7evSs-WD9wvlt6JH_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/eba0b9-6275-426c-8b10-95db9bf63763/1/yzvaOHewO7evSs-WD9wvlt6JH_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:03:24:e3:58:af:b1:3e:96:b9:ed:3e:45:e0:17:1a:69:aa:
1d:90:81:90:ac:6f:9a:18:23:1d:ed:85:c0:4e:dd:04:b4:17:
bb:8c:08:ae:9d:c9:c5:15:4a:8f:da:b1:b4:c8:ea:3c:bf:e0:
8e:6a:cc:03:f7:b1:2d:c4:a9:b5:fd:61:a2:3c:03:f2:2c:cd:
db:0f:57:20:0c:74:e2:4c:98:54:f5:9c:18:51:fa:b0:ed:39:
b2:3d:19:3c:9e:81:35:7f:2f:63:a2:81:93:d4:f5:76:08:b2:
fb:29:d8:89:20:10:d1:4a:ff:07:5b:f4:a1:b5:22:6d:fe:a4:
c6:1f:7f:8f:50:79:84:ef:b2:55:f8:80:a7:0d:1b:ff:66:9d:
51:81:f9:1b:6a:f1:2c:e4:15:04:9b:cd:d5:3a:5c:a5:88:e8:
ba:8c:3b:e0:ff:49:e9:63:1f:96:da:49:06:29:1b:da:e9:5c:
00:7b:19:4a:df:b2:79:09:dc:af:73:58:63:dc:8f:31:ff:22:
2f:42:2f:b5:c3:cf:b5:39:a4:c5:8f:5e:48:7f:d4:f6:2e:fb:
30:5d:88:3f:14:78:a9:6d:a7:bc:b3:6b:b2:8e:57:cf:ad:85:
7e:21:59:7d:d7:a6:c1:1e:c8:d7:45:8e:82:c0:4c:a8:9f:bd:
5b:da:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:05 2025 by rpki-client