Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: t2JU9ezf6WBbmhNSz1BT544Yj2ldp6isjWv7X/N0SK4=
Subject key identifier: 03:C0:95:1D:C1:67:78:27:ED:4C:D4:71:96:E0:62:A5:D2:49:A9:09
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 0198D5161F513C79E3AE53A02C3994CA0F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 158E
Signing time: Sat 23 Aug 2025 04:00:53 +0000
Manifest this update: Sat 23 Aug 2025 04:00:53 +0000
Manifest next update: Sun 24 Aug 2025 04:00:53 +0000
Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: 76ycVMsIqCfTh2OgKMzkT8sFn4KJ70f9UXkFfffYGYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1f:51:3c:79:e3:ae:53:a0:2c:39:94:ca:0f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Aug 23 04:00:53 2025 GMT
Not After : Aug 24 04:00:53 2025 GMT
Subject: CN=03c0951dc1677827ed4cd47196e062a5d249a909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4a:21:3b:30:b1:be:b3:38:80:40:0b:d8:a6:
ad:d0:bc:2c:42:a8:93:bb:01:2d:de:d6:75:af:df:
6e:a7:6a:79:43:28:5c:6f:79:b3:b9:a4:3e:b5:72:
b8:68:a7:e3:e9:18:81:4d:f6:91:f2:5d:af:15:72:
69:d9:3d:5b:6d:dc:0f:92:4b:e0:5b:88:d0:f3:3f:
95:2f:f2:95:96:14:c7:53:1c:6e:e9:35:88:9f:5b:
37:ec:8f:59:b5:32:7c:2c:da:af:46:3f:59:4f:18:
46:48:1d:95:f0:f5:b3:60:78:e3:3d:e3:75:c9:22:
cd:62:f5:7b:85:82:e6:a2:35:e2:82:3d:eb:81:f3:
b0:db:fa:1a:76:a7:1d:46:12:64:24:96:17:a7:d3:
7c:f1:4e:9f:71:7b:1e:90:62:05:0b:d5:ca:89:48:
27:5c:ad:60:41:0b:df:a4:24:a9:f5:8c:64:6f:14:
03:04:16:43:91:f3:61:9e:19:33:df:61:d0:7f:2e:
c1:44:e0:bf:95:da:33:93:ef:bf:75:4a:36:ec:cc:
a2:ed:37:b6:e3:60:96:d2:3a:c2:5e:bf:e5:e6:73:
03:11:91:11:78:9a:3d:66:38:1e:5f:1d:89:9b:cb:
d6:f9:a0:65:d0:f0:cf:19:50:ec:bd:63:95:45:c1:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C0:95:1D:C1:67:78:27:ED:4C:D4:71:96:E0:62:A5:D2:49:A9:09
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e1:0d:66:67:da:6d:36:39:82:d7:05:b4:7e:c7:99:e9:8d:
64:c7:85:a1:2d:98:db:61:a5:ae:a9:46:14:f2:81:1f:b5:bc:
fd:75:0a:da:2c:cb:b9:00:12:83:bc:ca:1e:d3:94:bd:23:0f:
ad:9b:a6:b7:32:03:d6:85:6e:c1:2c:d1:95:ed:b6:cd:da:db:
d8:88:47:ba:d7:21:b0:0b:7a:78:4a:06:23:47:23:2c:bc:2a:
6a:c1:2f:2a:dc:eb:71:84:fd:5f:34:88:29:d1:23:a4:03:f3:
7a:af:5a:cd:6e:bf:29:36:c5:95:c9:3f:59:06:47:32:de:a4:
84:b9:cb:36:f8:1d:90:da:ac:48:8c:7a:df:94:26:01:71:20:
fc:01:93:b1:db:23:4c:f9:e6:ba:17:ea:53:5c:83:62:08:72:
ad:ab:d1:00:58:94:7d:79:f4:2c:d2:ea:f3:24:34:ae:10:eb:
18:6e:0e:4c:0c:e3:cb:a8:2d:21:a7:5b:10:d0:52:7b:f3:c7:
e5:ba:d5:83:6f:26:a1:18:3c:42:d0:1d:4a:d3:de:18:d4:05:
40:71:f4:ca:01:2d:9f:68:84:94:09:cf:c3:1f:a2:cc:4b:33:
18:06:f4:8b:43:1a:8f:4d:db:d1:73:62:0c:42:f8:83:c1:4c:
8d:a5:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:22 2025 by rpki-client