Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: VHakwlg5s7wfIIYacwYTyf7UL7SR5UgxEdNhbgGd3ew=
Subject key identifier: A4:2F:96:57:08:9B:FF:D7:67:49:8D:F1:23:9C:67:04:81:47:0A:3D
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 0198D4A8188DBC5D2C85F54B67E2EC3F8E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0C8C
Signing time: Sat 23 Aug 2025 02:00:42 +0000
Manifest this update: Sat 23 Aug 2025 02:00:42 +0000
Manifest next update: Sun 24 Aug 2025 02:00:42 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: a1/xkSNc2YCGZB4Rb9Te1ioEQ6pXmH9U13KDobzqi3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:18:8d:bc:5d:2c:85:f5:4b:67:e2:ec:3f:8e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Aug 23 02:00:42 2025 GMT
Not After : Aug 24 02:00:42 2025 GMT
Subject: CN=a42f9657089bffd767498df1239c670481470a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:46:22:a0:4c:ff:3c:51:12:da:6a:d3:04:
05:78:a8:65:53:85:0d:a1:97:a7:76:66:8c:4f:a1:
58:cd:15:ce:c6:16:fb:a5:63:5c:6d:aa:c8:4b:b5:
32:f8:10:12:98:ec:44:78:a7:a5:93:44:7c:30:5e:
fd:0f:55:e0:fd:f3:06:8a:9e:25:79:fe:7e:4c:be:
6c:da:02:a8:62:80:7c:43:d5:2c:fe:98:da:e1:ea:
16:6e:b9:81:78:37:07:88:9e:82:a9:fd:bd:08:8a:
8d:f9:a8:34:6b:21:72:76:81:7c:27:d8:17:03:da:
eb:9b:95:34:29:7e:fd:5a:86:25:f4:c5:59:a3:a9:
2c:5e:63:f2:57:5e:82:f5:9d:1c:e0:1d:a3:c2:77:
d9:f2:9c:b8:5a:08:5b:45:69:f7:b8:05:76:30:25:
6a:d7:ca:17:77:d4:2f:00:73:22:f1:e1:c2:75:fa:
4e:05:a2:5f:8b:f4:84:26:f4:af:47:e3:e6:a9:39:
b6:6d:1c:c5:c7:17:6f:51:d1:3d:3d:74:e3:fb:b7:
a5:93:36:ac:95:b0:e2:1c:d3:ca:9f:df:9b:ca:8b:
c0:44:96:ba:c1:42:50:30:44:be:5a:c1:e8:33:4e:
c1:7b:76:34:5a:ff:21:a0:eb:98:a0:92:35:4d:2c:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2F:96:57:08:9B:FF:D7:67:49:8D:F1:23:9C:67:04:81:47:0A:3D
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:28:2e:56:1e:a0:c3:cb:dd:4c:3e:d5:63:cc:cd:f4:b8:
30:e3:15:51:aa:75:74:0a:5e:64:bb:ef:1a:69:17:df:b5:63:
42:91:89:5f:c2:f9:cc:c4:5c:ca:b8:23:e6:d2:f4:6e:b9:e7:
f1:03:48:25:98:88:78:89:34:2f:0d:6a:e3:84:39:b8:79:76:
a1:eb:27:ca:1b:4e:29:2c:a8:f9:57:2e:14:9d:9c:e0:cd:a9:
52:1d:b6:af:5b:4c:34:5a:22:ed:6d:9d:e9:4d:66:79:22:6b:
3f:ad:df:c7:7e:27:55:8b:f6:53:bc:ee:ec:23:4d:43:a6:42:
e0:77:18:1b:d3:ca:27:26:02:95:8d:09:05:18:5e:3a:c1:41:
b6:6e:e2:06:84:04:e3:f6:a1:08:d5:ba:83:b3:07:9c:d1:08:
1e:ed:c1:aa:ac:53:86:b7:31:8d:62:5b:bb:cd:62:72:f7:25:
9c:93:82:a4:8b:e1:e5:5f:85:d8:2b:ca:46:88:39:1f:74:75:
7d:8f:e8:3f:61:f9:6f:1f:f8:94:79:59:2d:10:99:f1:59:69:
5e:22:c4:53:e5:21:b3:ce:7c:64:11:57:d7:fc:ac:08:e1:fb:
a0:03:89:0a:c5:a6:df:4b:24:36:8f:e8:94:32:bc:b0:01:6a:
6e:03:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:40 2025 by rpki-client