Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: 7ApIfLzw368ah3JFh7GRur6Z5S92/NH2WJXGTUPTmJU=
Subject key identifier: 67:99:F2:17:C4:46:99:BC:B3:6C:6F:59:C8:CF:A9:E9:E2:32:C2:68
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 0198D404F82862BFB8F3F25C298715E3FB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0F5A
Signing time: Fri 22 Aug 2025 23:02:32 +0000
Manifest this update: Fri 22 Aug 2025 23:02:32 +0000
Manifest next update: Sat 23 Aug 2025 23:02:32 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: ITizrDe1/Fwlo6gGiw8l8egUnXTzq0u3/RPdLkh7zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:f8:28:62:bf:b8:f3:f2:5c:29:87:15:e3:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Aug 22 23:02:32 2025 GMT
Not After : Aug 23 23:02:32 2025 GMT
Subject: CN=6799f217c44699bcb36c6f59c8cfa9e9e232c268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:d0:51:7f:de:41:fe:e0:71:10:e8:75:03:
89:b7:92:a4:8d:9c:20:11:46:ad:ab:ef:3e:8e:06:
bb:c3:53:f6:5b:e3:1e:95:95:3c:3a:3b:0b:4e:60:
1a:c2:8f:42:ce:d5:d1:8c:7a:e6:06:48:96:11:81:
00:77:0e:5e:f6:be:61:76:b5:39:cc:dd:2a:54:42:
ab:ad:3c:b6:01:5c:f3:fc:3c:bb:f1:6a:0d:ed:13:
eb:01:54:f3:1e:e1:7e:33:02:b5:87:65:43:58:ce:
20:e9:2c:11:dc:22:9e:a6:54:a1:4b:bc:0f:63:08:
dd:69:ea:99:38:12:2d:a9:03:32:70:7e:80:61:e4:
1a:43:f8:ac:21:05:1c:1c:b0:8d:c0:c3:59:8a:a2:
81:53:df:d3:69:5a:53:05:4d:9c:de:e8:55:0c:6e:
d2:19:e1:a7:a4:82:80:92:55:58:f3:cd:b2:50:ff:
c4:87:63:5d:27:d2:60:e2:5b:8f:80:7b:11:2d:07:
d2:39:2b:3b:54:ee:8e:ec:4b:06:65:1b:21:72:fd:
16:f9:80:b1:9a:ce:30:8e:50:2d:c8:ab:fe:da:cb:
76:a6:06:a2:97:87:ab:1b:fb:53:2b:a2:32:c4:ae:
02:34:36:cc:8f:82:7c:a9:f9:4e:fc:91:96:fb:a3:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:F2:17:C4:46:99:BC:B3:6C:6F:59:C8:CF:A9:E9:E2:32:C2:68
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:01:e9:0a:82:38:8a:62:27:e0:46:d5:b5:a0:8a:96:7d:d2:
f1:9f:90:ff:c5:2e:23:57:db:c8:e0:8f:f7:11:bb:b6:09:66:
0a:32:84:a8:38:9d:00:52:08:f5:1a:50:ac:cc:37:e0:a7:46:
1a:0b:d3:5d:96:86:69:63:42:14:70:14:c5:a4:d6:f3:9f:35:
81:9e:24:31:54:8a:b9:24:c3:39:af:60:0d:ed:c6:6d:61:fb:
c0:ed:86:d1:e4:23:3a:cb:31:8b:88:21:93:07:51:eb:fd:fc:
3e:c5:38:6d:dc:67:9b:7b:14:b0:c9:df:02:cb:24:6d:a2:fd:
3a:d8:70:ce:25:7c:36:cf:1f:3c:54:53:b6:dc:f5:c1:d8:8d:
94:f8:d7:55:09:7c:48:84:4f:72:a8:cd:28:6d:46:27:30:28:
b3:a4:e8:77:d2:85:d0:23:6f:58:15:d5:df:46:6a:9a:d3:2e:
15:e3:54:83:65:70:13:4d:b6:9a:1e:43:43:9c:b0:6b:f2:c6:
66:75:96:f1:eb:37:44:7c:f5:92:a0:5a:6a:ad:66:da:72:d5:
8e:4c:a1:d5:4f:e8:8f:75:98:f9:c4:b4:3e:7f:ed:de:02:7a:
33:fd:e7:4a:eb:60:e8:d3:a0:ad:78:1d:43:45:df:1a:32:9b:
41:90:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:42 2025 by rpki-client