Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: 3W8D4aqDzf4kZzkUfFTjRDwqN6igS5I+copC6+vca7w=
Subject key identifier: 03:31:17:AD:21:DB:FB:CA:FF:DF:4A:AA:5E:FE:A8:9C:51:F3:47:15
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 0198D5F11BC3C18B8BAC827A6CB35DE0EE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0B3C
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: cAjyxAg9EwsEta34nweafQaHa3w5pAcW/hGjU2LNViA=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1b:c3:c1:8b:8b:ac:82:7a:6c:b3:5d:e0:ee:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=033117ad21dbfbcaffdf4aaa5efea89c51f34715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:a8:75:9b:f1:6f:9d:87:a5:73:3c:d5:e4:
1c:fd:f0:7b:8e:54:84:bc:8e:b4:59:b2:ef:0c:33:
77:95:cd:4a:b1:1e:3f:22:ff:24:35:43:8b:b6:95:
21:35:38:c7:36:89:9e:a4:00:e8:47:07:3e:fe:03:
72:47:a3:e2:a4:f1:bb:8f:10:ee:2e:98:87:f4:45:
c1:0e:82:f4:bf:8b:d0:68:d2:4d:c1:b0:03:d4:a8:
97:aa:3f:5d:f9:54:07:5b:81:32:80:b7:1a:78:8f:
51:74:7c:27:e1:18:5b:b5:c5:6e:5e:11:db:78:06:
9a:59:6e:82:8e:15:50:f7:5b:b6:3b:ca:bd:7b:02:
f3:15:65:17:df:e9:50:00:f6:b6:b5:47:85:17:0c:
65:1c:e2:f9:68:09:e0:8f:66:be:d6:bf:42:a1:7a:
8d:eb:77:09:9f:70:36:5c:60:8f:44:b1:52:57:3e:
f6:16:c0:4d:1e:20:77:7f:3e:49:0e:d9:32:d8:b7:
82:fd:d5:db:9e:ba:f9:ed:c3:ee:f1:62:03:b8:b4:
63:1d:eb:ed:91:5e:f2:a1:2f:bd:6a:32:19:f4:06:
f4:b7:f4:f9:ef:df:8b:d3:c1:da:23:f2:2a:54:53:
d2:b8:c5:c3:02:60:55:02:ce:90:12:66:32:64:c3:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:31:17:AD:21:DB:FB:CA:FF:DF:4A:AA:5E:FE:A8:9C:51:F3:47:15
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:28:32:76:6a:39:58:d5:2f:e5:e4:a7:f4:c9:66:ab:6d:
41:54:f2:b4:af:7e:e8:01:7f:cc:dd:02:2b:11:d1:9c:dc:7d:
96:c0:86:b1:33:31:cc:11:ab:48:d8:39:3c:c9:e0:8a:d4:d2:
03:8e:da:4c:aa:11:a0:16:e9:78:ab:e8:61:b3:c8:91:71:54:
8f:f2:36:7e:0d:9a:23:bf:89:b7:66:3c:e5:84:8a:8d:ae:35:
71:05:25:dc:24:af:0b:f3:4b:56:b8:ee:95:54:c2:20:ec:2d:
ce:c1:4d:81:75:eb:7c:57:cd:d3:bd:50:bf:ba:11:4c:c3:68:
72:6b:4f:3e:61:df:47:38:d5:6e:de:5f:e7:f9:e3:e8:3b:79:
6f:db:69:3f:56:aa:a8:7c:02:ec:26:a3:74:19:21:0b:ac:aa:
6b:e0:66:df:7d:18:ed:91:c3:24:dc:22:ae:54:40:3f:a8:68:
9f:22:52:3d:f8:0f:d4:f8:df:a1:2a:e5:9c:da:aa:04:36:33:
a8:80:37:bd:76:ee:e7:04:5c:11:88:86:df:14:24:46:1e:0d:
77:90:ad:3f:18:15:63:82:e5:6b:fc:d9:dc:4d:df:05:64:4a:
21:2c:0e:63:1e:78:df:8d:87:5f:51:19:fc:97:c5:5e:c6:4b:
c0:ed:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:25 2025 by rpki-client