Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier: YhINb9+xf8EXJSyh9WsCRQwVjruLr3tHUjr0VUhZHtU=
Subject key identifier: 38:9B:67:08:AE:DB:67:3D:33:57:1D:77:8B:38:C6:BD:AB:17:FB:F0
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 0198D773639826803B73DA0745B9C7269ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number: 01EE
Signing time: Sat 23 Aug 2025 15:02:00 +0000
Manifest this update: Sat 23 Aug 2025 15:02:00 +0000
Manifest next update: Sun 24 Aug 2025 15:02:00 +0000
Files and hashes: 1: bh_jxWLWM4ERu-tO2W_vtiAaR34.roa (hash: q67OJI4bSTnxGyWpXxOC2jeYAfoLHFvQvpzctzRe0VE=)
2: sibHr2FGPjo5CfPD_x82IFZOyjI.roa (hash: 5o3OHC/8KmGr6JnUosFKoE0TLY9c878SbcJe1V+5e/c=)
3: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (hash: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=)
4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: nbDFNuVGR8K+05Wck7+yIy5GOJAwfVEX7VYkBDZ6nco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:63:98:26:80:3b:73:da:07:45:b9:c7:26:9a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: Aug 23 15:02:00 2025 GMT
Not After : Aug 24 15:02:00 2025 GMT
Subject: CN=389b6708aedb673d33571d778b38c6bdab17fbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:cd:ab:7d:4a:7b:db:50:70:0c:35:69:5b:
92:38:a9:13:56:e2:c4:7b:d5:80:6d:06:21:49:7b:
fa:8d:1f:34:5f:a0:41:d6:3b:49:2f:ee:6a:03:9e:
3a:bf:bf:94:92:07:b5:0a:31:ab:e9:46:46:5b:a3:
de:e6:e3:cc:d2:eb:f6:45:2e:ef:83:93:3b:8b:09:
f0:39:84:55:5a:75:d1:f8:43:39:30:1d:ab:39:5e:
0e:53:7c:61:1b:1f:1a:bf:45:4c:e7:8a:04:5f:b0:
d4:f5:fe:32:5e:c2:78:b7:cd:1e:66:5a:35:9f:07:
48:3c:4d:c9:53:56:6f:04:79:08:99:39:42:7b:30:
db:27:33:88:be:1f:f6:9a:f4:35:88:6c:e1:60:c3:
67:ff:9a:e2:f6:46:67:c8:63:d7:fd:7d:20:9c:7c:
ee:57:e2:18:9c:a2:0a:c6:dc:b5:3d:c8:c8:bc:b1:
9a:4c:84:08:e4:96:00:4e:d2:59:33:56:c5:a2:48:
97:59:55:23:f9:7d:bf:f3:f5:4c:36:16:e7:da:8e:
d5:82:a8:a0:4b:bf:34:d7:55:37:e9:d7:ce:87:a7:
6f:97:3e:f3:ee:64:b8:83:4f:ad:8b:d8:3a:ee:85:
24:8e:e8:8a:7f:e5:f0:41:09:f9:1a:e9:80:a0:8e:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:67:08:AE:DB:67:3D:33:57:1D:77:8B:38:C6:BD:AB:17:FB:F0
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fb:72:d5:dd:f9:d9:df:a5:5b:0e:65:05:31:52:a3:9c:1b:
d1:97:21:b3:fb:1e:f7:5a:73:ae:b2:f9:1e:27:3e:4e:dd:12:
c1:1d:26:ca:42:cc:1f:73:31:48:bb:56:89:a8:b5:fe:21:2a:
a4:0c:b6:0f:17:d8:e5:11:aa:0d:d3:8c:87:cd:08:84:29:6f:
73:f5:35:9e:4a:04:1a:40:a4:fb:d2:3b:c7:b0:9f:c2:b9:bc:
41:6a:dc:e4:6e:01:43:c7:07:e6:d8:36:9a:fb:88:cc:4d:21:
0c:49:13:c4:89:c6:6c:ae:fb:9c:01:ac:5b:a9:e5:06:cc:7a:
2f:d5:88:6f:0d:e5:fd:ab:d9:e1:48:c1:7b:55:72:34:6e:b1:
85:b4:e8:b6:61:92:02:19:ac:53:09:aa:26:1e:17:ac:11:75:
08:fe:4e:ef:dc:5c:55:ba:09:6a:b0:4e:2e:ad:0d:16:f2:7c:
0b:8b:78:a6:64:45:2d:37:c0:f3:d0:9f:0a:0f:12:8c:11:75:
17:8d:ea:b3:1e:6b:67:4a:ce:bc:f8:c3:f9:79:0c:79:c5:ff:
d3:0b:62:01:a6:15:0d:d1:32:b9:eb:5d:8e:fa:98:31:f6:f6:
f9:9b:77:1e:1e:c0:3d:98:24:7b:56:bb:47:f0:d4:29:d3:e9:
8e:7f:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:01 2025 by rpki-client