Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: ZouPazDxbw7AGM2EnM4mwm2Iodtr3sE1lEPvCH48PmU=
Subject key identifier: 89:78:E0:FC:5A:21:3A:1F:E2:77:DC:3C:45:5C:60:27:FC:65:EE:5F
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 0198D705A728DF3DBD284072F17CE206F5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 0757
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: ZAOaueHJaEeCaW5V125HpakIbjpPwcxfyqPDFuwIzKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a7:28:df:3d:bd:28:40:72:f1:7c:e2:06:f5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=8978e0fc5a213a1fe277dc3c455c6027fc65ee5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f6:a9:e8:2f:25:5c:06:42:c1:76:b9:1a:b3:
1b:f0:ed:8e:25:64:98:30:66:7b:8e:21:a8:ad:fa:
b2:ce:6c:b0:00:bc:db:52:ac:00:be:dc:7d:1f:e2:
0f:3c:9b:82:5f:98:f9:3e:f6:59:f0:e9:2c:7b:be:
9c:68:c9:61:5f:1b:f7:c1:b6:20:fe:5c:29:cb:92:
40:d8:02:0b:07:1b:14:0a:39:b3:d6:d6:35:a2:e8:
97:cc:e5:4c:e0:aa:95:b7:e0:30:c8:c3:60:05:38:
ed:7a:5d:ed:c5:09:4e:e1:4a:d8:0f:35:d8:86:6f:
ab:f6:49:54:81:11:81:47:ee:53:43:51:e2:a9:2f:
cb:57:c7:9d:30:d8:9d:1a:c4:49:15:b5:2b:03:35:
7c:88:84:52:4d:29:89:be:3d:6a:20:03:e1:ef:ae:
fc:09:d9:06:e2:b4:73:db:cb:f8:0c:09:f9:0b:f9:
47:3d:ee:c5:72:67:33:38:5f:d4:31:30:e0:e1:e5:
de:bc:d4:ca:8e:e4:62:df:9e:09:a4:bc:a9:61:66:
6c:f1:a3:23:8a:35:eb:cb:41:36:10:06:95:f8:75:
27:09:8e:d3:18:8c:e4:b8:d3:f1:8b:ac:8f:7f:66:
d6:80:50:c3:25:5b:f3:ac:79:27:5e:dc:03:b0:d0:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:E0:FC:5A:21:3A:1F:E2:77:DC:3C:45:5C:60:27:FC:65:EE:5F
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:33:d6:4c:b0:19:c1:c1:47:8a:6a:4a:ef:76:07:b3:c2:
20:d1:fc:d8:81:70:c9:bf:4f:fb:68:26:4e:23:eb:15:e6:e5:
5a:b6:e7:ef:f9:4d:88:f7:28:6b:8f:4c:3e:2a:d9:fe:9f:59:
11:11:d2:31:c1:52:65:fc:c3:3e:66:26:8a:6e:6d:60:f4:d5:
9a:fd:bb:08:1e:0f:e9:4f:2a:98:be:3c:b0:50:54:db:cd:b6:
0c:c0:d4:16:bc:3f:bc:96:1a:75:33:04:e6:ca:f3:f1:53:2a:
38:cf:8d:e8:d8:e6:28:67:d9:72:c3:7a:98:f1:7d:bf:a1:5c:
a6:55:a7:b3:c7:da:7a:f9:e1:60:f5:85:ac:67:44:5d:50:4b:
f0:6e:19:7a:14:6c:b0:f1:c4:9c:20:da:11:25:70:d4:30:7b:
21:fc:13:8b:1a:48:52:a0:fd:5f:9d:cb:4b:ca:2d:5a:fe:fc:
b4:53:fa:23:5e:f7:60:36:56:32:fb:7e:86:30:33:c6:1e:a9:
d8:c6:9d:35:bc:93:93:1e:d8:6b:fd:ca:5e:3a:86:d9:93:4d:
6c:cf:62:32:18:a2:4a:c1:ba:60:fd:d6:c1:46:c4:39:47:da:
78:7a:5c:1d:56:d0:e1:66:6e:98:a8:0d:d6:e2:33:ed:1e:26:
77:3d:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:56 2025 by rpki-client