Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File: YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier: 2dhQ9rBneHt87FWH7dgYghNOb4PHIUU99URBQIj3sp8=
Subject key identifier: F7:A2:A8:3D:55:82:EA:8A:00:F5:81:02:80:66:70:22:BB:6E:EC:D0
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial: 0198D4A8113B15C8C9D6B30D2AC463963955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number: 15A1
Signing time: Sat 23 Aug 2025 02:00:40 +0000
Manifest this update: Sat 23 Aug 2025 02:00:40 +0000
Manifest next update: Sun 24 Aug 2025 02:00:40 +0000
Files and hashes: 1: REqtYQmRREKLJc9dQnOchbRCd38.roa (hash: CsFmG2TMLbA2Znbnw8r80UkQYTzgJ0VzpR3kBwBlHwY=)
2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: VKyQfnvOdTHqT5p8pI7OLVQP0LG+GqdEtcQTqt2RDR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:11:3b:15:c8:c9:d6:b3:0d:2a:c4:63:96:39:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
Validity
Not Before: Aug 23 02:00:40 2025 GMT
Not After : Aug 24 02:00:40 2025 GMT
Subject: CN=f7a2a83d5582ea8a00f5810280667022bb6eecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:f4:11:df:9f:50:ac:9d:41:b5:8a:5d:44:
a5:84:85:a1:c9:01:3c:bc:d0:f9:13:53:6c:e0:87:
cb:92:c6:d6:04:be:c9:33:ae:43:f9:8a:33:cd:6d:
eb:2b:91:a3:93:7f:2d:66:19:f8:af:7c:6c:b5:a5:
71:ed:0d:e2:39:b0:e6:8c:6e:dc:93:4c:1f:b4:7d:
22:a6:27:7a:2a:7d:42:ee:79:d5:4f:a2:11:58:3e:
2d:4b:df:b7:9b:96:23:14:1e:be:2b:ae:84:45:c2:
39:ad:46:fc:bc:00:fa:fd:3e:7c:a9:bd:74:2f:e8:
c2:cd:ca:01:2f:b2:39:a6:f5:e7:86:c9:c8:4b:13:
9b:f3:0c:32:db:83:b0:a7:8f:fe:b3:90:2d:36:7e:
2f:e2:59:27:d1:d5:66:02:73:d5:d2:88:da:49:02:
4e:02:95:34:d5:22:ba:d4:26:9b:bc:13:df:a8:47:
06:f7:08:ed:51:58:3d:48:85:ad:e5:c1:d3:21:0b:
7e:12:be:c0:1e:5a:6e:27:e3:10:5c:4d:da:22:dc:
8f:9c:33:4f:34:cb:4a:2b:25:10:4e:2b:e6:d4:78:
3f:da:c6:9f:68:68:f2:2a:9a:de:63:35:96:dc:3e:
6b:aa:07:4a:e2:1e:d2:6e:72:a7:7a:a2:ed:85:b2:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A2:A8:3D:55:82:EA:8A:00:F5:81:02:80:66:70:22:BB:6E:EC:D0
X509v3 Authority Key Identifier:
keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:20:bc:86:e3:fc:55:b4:f0:51:5f:24:6f:f8:8b:54:1e:ec:
a2:79:dc:55:f9:08:e3:9e:a6:e4:54:ed:b7:45:8c:0e:94:06:
61:ca:3f:c4:7b:db:ed:21:19:5e:93:dc:a7:e8:00:29:8a:5a:
1e:f1:18:76:5b:53:96:2e:d9:62:c0:7e:27:28:b5:c9:6f:42:
d8:d9:3d:b2:b8:62:5b:45:2f:c4:e3:f7:50:47:93:99:3f:88:
92:7c:e2:10:94:52:70:6a:18:ed:ec:b8:c0:0d:64:26:ae:b2:
6e:21:bc:4d:ca:a3:50:3f:8d:78:9d:47:e5:8d:23:0a:a6:91:
af:59:d3:e0:f5:cc:46:a3:8c:73:b7:83:ca:21:85:a0:9b:53:
e7:55:ae:8b:14:d2:c2:bc:36:30:f6:6e:63:05:2f:e2:85:cd:
e2:b4:e1:96:3e:77:c3:c1:f6:08:49:86:8b:de:fa:fc:a9:76:
94:39:05:7a:e9:01:93:aa:35:de:2c:a9:5a:ea:4f:cc:7a:e3:
ce:0a:06:f7:1f:f0:ae:e8:9c:1a:7a:7e:33:84:7f:69:d2:cb:
cf:e4:62:59:10:b1:c3:2d:7a:55:b2:c1:6b:fe:84:03:98:6e:
d9:f9:c2:c7:3d:81:c7:57:54:18:77:9c:42:53:23:af:d9:74:
65:06:17:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:51 2025 by rpki-client