Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: jw5J0swCqcPxzSjvvhjylVuFjD97jLEHqxtQBSKhjBk=
Subject key identifier: A3:C9:10:FA:D3:21:72:0E:D3:41:BD:16:AE:9B:F1:4D:BD:E8:8D:86
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 0198D583C5D1197BFFAF26BDC6DE8F041F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 0C83
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: IlHeExFCZOwDVGR-pn-Mj6btqHA.roa (hash: G3OUewbUbdIfclHozVugqBGDnmkGwJv9DxeJNbUzFpM=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: hhmDWn4piCgvfvdzCVdZo1zx65IXV6WXplrpbpbJ6fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c5:d1:19:7b:ff:af:26:bd:c6:de:8f:04:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=a3c910fad321720ed341bd16ae9bf14dbde88d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:5d:12:d4:4c:a7:9c:3e:83:26:df:77:90:
99:fb:9c:26:1b:1d:c6:04:a4:9c:35:2f:59:fa:5d:
92:11:85:73:03:b3:a2:e4:fd:d0:0f:3b:25:49:f3:
5c:22:d7:d4:14:2b:ab:96:23:eb:3a:a3:1e:06:3c:
71:93:1d:f8:51:d9:dc:88:dc:f9:a3:70:d4:c0:28:
a0:90:11:a5:d3:95:7d:31:3e:25:41:c0:20:fb:4e:
8a:90:16:a4:fa:04:82:93:33:21:c7:a2:23:18:fb:
68:16:a9:e4:6b:9f:c1:e8:95:30:68:42:eb:d6:8b:
88:b2:f4:96:46:71:c2:6a:10:ea:15:72:c8:de:ce:
f0:9f:8f:9f:88:06:1f:13:72:78:52:d5:32:de:19:
77:ec:e4:9c:e7:19:14:4d:cb:aa:57:59:f6:f2:6d:
57:bd:0c:37:27:be:0f:ed:2a:34:ef:1f:b8:35:5f:
78:35:07:bb:5e:a7:f1:59:41:5e:c5:28:80:fa:e4:
f1:12:f4:95:9b:f0:46:49:72:e4:bf:6a:74:1f:52:
e4:5b:84:d3:fa:44:57:b4:fc:b7:24:ab:c3:87:12:
6e:a6:86:97:b7:42:21:02:64:7a:eb:07:0e:e6:39:
e6:e5:a2:4d:e9:a3:42:80:75:8c:7c:7d:be:82:93:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C9:10:FA:D3:21:72:0E:D3:41:BD:16:AE:9B:F1:4D:BD:E8:8D:86
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:38:83:56:14:d6:1e:8d:e4:ab:67:c0:31:21:32:25:70:6f:
39:ce:52:b0:d8:87:69:f9:63:5b:4e:9b:54:e9:63:8d:dc:48:
4d:e3:f8:7e:48:61:c0:7d:06:45:1d:ce:0b:4b:7c:dd:64:45:
d7:da:61:bf:a9:2d:4c:a8:b1:0d:70:13:f0:00:a2:02:c3:00:
59:ca:b9:81:fa:a3:e0:f5:b4:b6:3a:67:b4:16:2a:ca:64:35:
e5:23:7d:1a:e4:0d:6d:75:97:b6:2b:49:a0:5f:3d:1c:c0:fe:
97:cc:80:51:52:a2:5e:c9:1d:d7:12:9c:16:81:a6:49:f6:49:
44:9c:f6:10:48:1b:c2:87:cd:6b:61:33:8a:4e:a1:a3:95:9e:
7f:fa:f6:a4:94:ff:5b:a6:a3:52:4b:11:d8:b4:69:a5:2c:c3:
ff:f0:c4:13:84:2f:3f:39:6a:f5:74:41:0f:09:26:45:c3:d5:
4a:9b:f5:c6:56:78:d1:4b:3b:11:08:5a:ad:b0:db:03:54:0c:
fe:b2:b1:46:c6:5c:b8:26:de:79:53:ab:3d:aa:34:03:dd:a1:
62:09:a4:62:8d:d2:58:e1:51:ac:18:ba:2f:0a:de:ee:3b:d2:
c0:34:a4:7d:74:ba:d6:a9:86:d6:27:ae:32:47:e5:8a:0f:3c:
1c:60:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:30 2025 by rpki-client