Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: 3LlP9pOVaooiJwmjB52ucccGEycM2eGXlwOCDvV4ZSY=
Subject key identifier: 08:6A:0A:81:56:18:E1:D0:FE:B5:BC:BA:A3:17:CA:D5:C0:4F:AA:86
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 0198D5F18CF2912EEDCF80079DD9B7C640CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 0917
Signing time: Sat 23 Aug 2025 08:00:33 +0000
Manifest this update: Sat 23 Aug 2025 08:00:33 +0000
Manifest next update: Sun 24 Aug 2025 08:00:33 +0000
Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: FgqqL1wIQDcLZXefXEw4mBZDBwSGgblgDswm16e/atI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8c:f2:91:2e:ed:cf:80:07:9d:d9:b7:c6:40:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Aug 23 08:00:33 2025 GMT
Not After : Aug 24 08:00:33 2025 GMT
Subject: CN=086a0a815618e1d0feb5bcbaa317cad5c04faa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:4a:bc:b4:24:64:bc:18:48:e7:73:51:13:
52:12:06:cb:be:93:4b:31:6e:8b:b2:d0:04:d1:0e:
5c:1c:4a:c9:2a:a0:8b:1c:04:54:39:70:e9:98:2c:
66:2a:f1:6e:e1:7e:39:d7:11:c6:e0:28:7d:2a:ac:
c6:06:af:3d:49:d0:77:ea:a8:e8:18:a0:5f:43:77:
a9:78:11:b8:ab:71:c2:f9:8d:b3:da:47:b0:00:96:
9e:84:14:94:66:d9:03:4f:4e:63:28:c0:10:e8:69:
ca:68:e3:eb:5b:39:cd:67:df:62:52:cd:b9:f1:60:
82:4c:58:0b:c9:9d:f4:bc:66:24:2a:6e:90:a0:75:
bc:07:0c:b3:e3:f6:b2:3f:c1:84:b9:cb:18:0d:77:
72:93:22:7d:7d:32:79:17:d6:6f:40:de:8d:84:65:
f9:3f:8d:5d:29:29:af:6a:ba:78:ce:07:da:23:73:
42:63:fc:85:6f:e4:dd:f3:32:6a:1b:b5:fd:10:41:
a6:7d:0e:1f:c1:18:8e:61:79:48:66:ab:2e:21:8f:
6f:fa:96:10:89:bd:c2:b3:c3:dd:1d:68:7c:5a:ba:
bc:22:ee:bc:db:ac:09:fb:8b:85:7e:26:b5:56:c6:
b3:c7:05:68:fb:00:a0:f2:d3:b5:88:85:15:1c:dc:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:0A:81:56:18:E1:D0:FE:B5:BC:BA:A3:17:CA:D5:C0:4F:AA:86
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:06:8a:d1:ec:eb:f2:8d:98:2d:e5:5f:f7:03:09:2e:11:7b:
f9:ba:4a:0b:00:75:7c:13:d5:aa:d1:a6:31:c0:d5:c9:e0:c1:
89:63:3a:98:95:3c:61:7e:97:5c:ad:b1:cb:7d:a5:d7:81:0d:
bc:19:f0:3f:a0:34:d4:69:e8:7e:26:f6:aa:c4:82:75:eb:5d:
21:7f:2e:41:32:a3:05:9f:60:b3:a9:c7:4d:dd:a6:7a:2d:e6:
b4:56:b7:47:6d:f2:32:0a:c6:26:c5:ef:30:d8:b1:80:50:35:
1c:29:06:16:6b:ff:80:ad:cd:59:f0:be:d3:96:10:94:d3:8f:
68:15:85:ef:2e:8a:50:c1:25:fc:75:ac:09:06:03:91:59:48:
3d:33:dc:e9:ef:e1:5b:25:4f:c3:f0:41:5b:d5:87:96:71:98:
05:7e:a9:23:f5:c9:da:8b:1c:d4:1d:56:00:b4:f0:77:a4:c0:
2a:bc:ed:8c:e9:2b:52:bc:aa:ec:62:a4:0a:54:3c:a7:2f:8b:
b9:f5:93:00:67:be:dd:9a:d9:7b:c8:17:99:97:86:29:5a:78:
eb:25:b3:4f:48:15:a8:e8:1e:52:9b:24:b1:e7:63:e7:a1:f9:
03:d0:e5:15:8a:84:8e:52:a2:4e:82:fa:90:2e:a2:18:d3:c3:
8f:f6:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:08 2025 by rpki-client