Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: jygfsFLx5EC704hCCLXIXq3UPMtOfZEhIeF8aso1yiE=
Subject key identifier: 1E:E0:99:14:7F:D7:C4:69:29:F1:9C:69:5F:95:BC:54:80:AE:2B:F0
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 0198D5835AFC6552EA3C824BDCEA6408ED85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0C2C
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: 2ATvNbnGawNlZZ5eknfDSbXFIzQ.roa (hash: tXSd9lU5fCgD64Z/fTQv/A1ZJJrB3ZcLdqsIZET5sKI=)
2: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: 5zgd7vw1qoOmx1IVAvcGR1fS2K4O82k78ePygvc7YJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5a:fc:65:52:ea:3c:82:4b:dc:ea:64:08:ed:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=1ee099147fd7c46929f19c695f95bc5480ae2bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:9d:6d:59:2b:23:b9:e7:26:60:b5:c0:30:
d0:82:35:27:d7:95:1f:39:4e:3d:0a:cd:e9:22:25:
1d:bc:7c:6d:e9:a7:b5:ec:55:1b:ef:a3:1f:1c:0e:
18:a0:47:ec:73:c1:85:2b:c0:74:cb:5e:dd:90:60:
bf:df:e9:0a:c0:8c:ba:f2:23:2d:4b:f6:0e:69:b0:
f6:85:64:08:e5:84:64:b0:11:89:56:83:7f:68:9b:
55:fb:f2:d5:6a:ec:ab:e1:12:93:f6:10:02:50:fe:
44:a5:64:56:43:e6:f1:24:89:4c:3b:be:66:f8:92:
d6:8f:01:d0:1d:cf:7c:30:fd:4e:46:fb:bc:b3:65:
3a:b0:6d:3f:6c:c5:8d:3a:1c:6c:cf:f9:71:7e:1c:
a1:ae:cd:8a:00:71:33:95:e9:40:d4:69:19:7f:a6:
9d:b5:9a:56:11:98:01:20:87:fd:0b:ac:7d:0f:d4:
1e:a2:ae:99:a3:8a:42:cb:c0:a6:14:8c:45:1f:d3:
57:59:5b:f9:16:4e:89:14:0f:04:ab:6d:49:b7:11:
a5:b1:e6:5a:3f:4b:d3:0a:93:bb:24:c8:fb:b1:7a:
df:39:36:a1:54:17:cd:b0:4b:26:bf:54:f6:9e:18:
2c:6a:9e:d9:a9:8a:47:9e:ae:34:fe:6c:f8:ef:66:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:99:14:7F:D7:C4:69:29:F1:9C:69:5F:95:BC:54:80:AE:2B:F0
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6d:9e:7e:99:0f:53:c8:69:fe:32:7e:19:30:a1:ab:b8:bb:
ac:8d:1b:a2:89:bb:58:ee:8f:06:b6:15:06:f2:6d:c7:4a:e0:
1d:d0:8b:3f:c5:05:58:db:c2:70:57:a2:71:43:c8:b5:85:fd:
38:93:b8:79:36:78:07:42:1e:c7:ff:24:86:c6:bc:db:96:00:
4a:29:10:7d:e7:c6:19:91:05:fa:8e:a9:86:b5:cb:fd:74:16:
63:47:f0:66:11:e8:6d:62:76:a1:93:90:de:96:f9:e8:1c:be:
26:f1:20:56:93:0c:10:bb:41:a3:02:74:45:48:46:de:8a:f5:
e5:f8:ad:de:b0:f3:96:53:67:cf:cb:be:9f:84:b8:9c:a9:38:
53:0e:d6:ab:39:d7:4f:fb:d6:b1:a5:95:bf:11:5e:a0:a5:a5:
05:61:b2:68:fc:2a:cf:59:ec:de:32:bc:30:c8:e5:ac:71:bf:
bf:de:6a:f7:ca:df:4a:9f:bb:ef:59:b3:f5:d4:66:41:7f:36:
ae:67:a2:45:6c:11:95:6e:ce:51:a0:64:df:05:95:68:8c:68:
95:3f:01:72:39:4c:ca:1c:50:c8:9e:a3:6f:fd:e7:7b:66:0b:
4a:f0:6a:da:4e:48:22:a7:7b:cf:39:46:f0:d0:87:96:02:3c:
b3:b8:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:57 2025 by rpki-client