Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
File: yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json)
Hash identifier: /gvZQqwOiDXWrzWraetqhuDPdacJFM89eY7ZgjEWQ34=
Subject key identifier: C9:AC:AB:D3:D2:69:D8:6D:02:CF:CF:03:17:4E:79:88:2C:5F:16:57
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial: 0198D70652123A7E91D7D0D9C14C1FE0D5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
Manifest number: 039B
Signing time: Sat 23 Aug 2025 13:02:52 +0000
Manifest this update: Sat 23 Aug 2025 13:02:52 +0000
Manifest next update: Sun 24 Aug 2025 13:02:52 +0000
Files and hashes: 1: KmT0zBeAxHbx64CqcJ4Kw-HSMGw.roa (hash: g294VQOsqRVKkLhlE8NKqam6KvGQ9H8e4fukJsFTk1Y=)
2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: s1kiC24PFKPKjRdtMaXds8b0+eO0mWhYavgYOYMeuvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:52:12:3a:7e:91:d7:d0:d9:c1:4c:1f:e0:d5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Validity
Not Before: Aug 23 13:02:52 2025 GMT
Not After : Aug 24 13:02:52 2025 GMT
Subject: CN=c9acabd3d269d86d02cfcf03174e79882c5f1657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:eb:ef:db:7f:fc:37:c9:12:eb:70:15:25:
7d:e7:df:bb:96:d0:30:18:c5:c6:2c:4f:ed:4d:a3:
b0:e0:c3:d2:73:24:35:d1:c9:47:9f:18:dc:bc:ba:
62:33:69:b8:fb:40:d7:78:c2:d5:b9:42:6a:67:1c:
76:b2:11:0a:b2:de:1c:68:e1:22:36:8e:94:41:1d:
f6:d6:8f:8a:33:7b:bf:b9:55:da:2d:c0:a8:36:44:
70:1e:ae:27:d5:da:34:2d:88:7c:07:16:48:40:42:
fa:a7:ba:b6:ae:63:63:a0:4a:59:88:5a:a2:ca:d5:
1e:21:fa:ff:a7:52:7f:ee:20:8f:0d:f5:13:63:71:
da:8a:53:1c:ae:6d:16:11:f0:3c:4c:ea:4e:e4:67:
8e:24:b9:60:89:ee:24:c8:7d:11:81:e8:af:46:00:
94:2f:87:72:bf:32:92:e8:de:e2:c9:2e:1d:fe:ee:
f6:20:3a:b1:1e:46:7a:5e:20:db:cc:6c:73:e0:de:
84:c6:53:18:ab:74:64:63:84:a3:31:ed:55:3a:73:
d2:26:d3:79:11:0d:f3:98:8b:44:10:bc:a2:55:04:
62:df:18:8e:4b:94:a6:55:17:fd:de:65:d1:1b:be:
fa:f0:b9:d4:d5:b7:19:d4:e9:77:2d:22:c6:e6:bd:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AC:AB:D3:D2:69:D8:6D:02:CF:CF:03:17:4E:79:88:2C:5F:16:57
X509v3 Authority Key Identifier:
keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ac:69:0a:91:4a:46:71:e7:52:1d:71:43:c7:92:90:73:f1:
18:e1:ca:5c:e6:31:6c:65:12:96:20:30:b6:0b:75:26:1a:12:
64:9a:09:42:f5:22:4f:4c:5c:ea:77:d0:47:78:77:d5:a1:81:
3d:fd:5f:a4:14:71:25:3b:c8:19:00:2c:b4:4e:45:f6:88:91:
26:a2:f7:a3:b8:f9:10:36:98:3f:5a:f4:53:31:bb:e2:5c:d1:
7e:4a:9d:99:d9:42:a6:74:8f:72:52:2a:45:bf:9b:6c:03:91:
b4:73:e7:ae:00:8b:84:24:73:a6:bd:43:cd:eb:9f:45:8a:d4:
ae:a2:7b:d2:26:ed:5d:9c:c3:88:a1:6c:94:1e:c3:fc:c6:9d:
27:91:8e:be:9f:15:fb:e1:f4:df:7a:1c:f4:85:41:25:cd:36:
81:56:bb:c1:60:37:87:f7:2b:49:51:8b:13:d0:ef:50:f9:aa:
22:83:13:09:21:58:3a:49:fc:89:6e:eb:bd:c9:32:9b:b7:90:
03:26:41:b9:da:c9:fa:f5:d2:cd:9a:2d:88:22:cf:78:0b:a0:
f0:4d:45:87:f1:c3:e2:83:91:48:6a:3f:bc:82:18:93:d6:c5:
73:3a:87:32:ae:ac:84:85:f0:4a:93:5a:c2:50:c4:c5:df:eb:
9f:eb:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:51 2025 by rpki-client