Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: G5/FjaDcGL3YHczjvsYE0yccyFxfTuzujOqeZd1uPUo=
Subject key identifier: FF:00:82:94:A6:21:6B:D5:89:F1:FF:56:47:2F:F8:6D:28:BA:67:A0
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 0198D54DC8E442B98121B07CC4248FF36957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0DD8
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: nReuHvvTKNf2Sg0Zkwgo0SY0Czvu4Dido908NxhTiTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c8:e4:42:b9:81:21:b0:7c:c4:24:8f:f3:69:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=ff008294a6216bd589f1ff56472ff86d28ba67a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:2b:b1:03:15:54:2f:95:44:60:8e:d4:59:
3e:eb:fb:0e:d4:c7:e6:bb:39:8e:0c:3e:8f:3a:94:
ca:1a:80:d5:f8:05:e9:fd:50:fa:38:36:39:b9:37:
d1:91:ee:50:b0:18:10:b8:7b:19:02:7e:c2:f8:ef:
ed:cf:f1:45:3d:9a:f7:6e:a4:dd:1c:d2:b6:00:1d:
36:da:00:ff:88:15:1b:42:bf:ab:4e:36:4c:ab:49:
29:e6:40:f4:dd:d5:cc:2c:8d:95:c8:e4:4f:ef:a0:
ce:7f:fb:24:fe:b3:61:eb:dd:0e:c1:c6:02:69:74:
57:75:c9:57:05:46:d3:a6:65:6a:22:c2:32:7a:8e:
31:1c:87:7a:08:3e:50:8c:4e:d6:80:37:c3:35:be:
d2:ed:f8:0a:19:41:af:f1:69:26:f7:62:ae:f6:ff:
af:a1:2c:19:59:aa:0a:d6:c9:c9:22:a4:fe:26:03:
dd:47:d9:1d:64:8b:7b:15:58:a9:47:12:aa:39:c4:
33:40:59:67:f4:9b:44:11:4d:01:1c:c6:0d:21:a8:
d9:49:ed:c2:55:0a:af:f1:3f:ca:d2:4d:01:db:27:
ff:f8:5d:f3:4b:04:df:90:04:76:6f:71:05:29:b0:
31:9f:db:dd:b5:4d:20:c5:15:21:5a:22:4c:70:e3:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:82:94:A6:21:6B:D5:89:F1:FF:56:47:2F:F8:6D:28:BA:67:A0
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:56:66:5b:d5:b4:80:79:20:99:96:2c:fa:13:06:da:8f:bb:
dd:e2:80:f0:9d:8c:2e:51:f0:b3:ee:5f:0a:3c:ba:7b:a2:2c:
97:fb:c3:f6:89:65:31:2c:32:a4:8b:96:e1:84:66:88:28:b0:
86:e7:8d:05:d8:bf:2b:a6:0a:97:65:1a:7b:57:38:c3:44:26:
43:66:3b:cb:42:1e:57:c1:5e:16:23:4f:b8:e8:42:73:66:c5:
d4:07:02:b1:10:e8:5c:0f:49:6a:9c:ad:97:cb:0f:00:de:1f:
77:20:95:9c:3a:12:c2:46:b0:8e:b0:ac:cb:8a:a6:1a:3d:02:
24:48:db:55:e5:15:d7:9c:97:10:dc:62:0f:22:86:68:a9:65:
f2:5f:e2:45:58:f7:17:4d:eb:65:21:eb:43:98:c2:88:95:3d:
f2:b1:b5:ec:cb:58:34:5f:7a:3d:35:41:e6:c0:58:79:60:ef:
1c:c5:4e:32:21:84:46:96:78:1d:1b:c8:be:b6:34:e8:98:27:
33:22:ad:01:43:cc:46:ec:1d:08:86:9b:dd:80:5c:16:a7:b1:
1e:e8:a4:0a:7c:7c:01:55:20:d7:10:82:23:7c:fa:3c:b7:a7:
cd:29:0d:c9:36:3c:f1:e2:84:59:43:67:77:69:35:67:ba:1f:
0b:17:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:12 2025 by rpki-client