Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: BkUuOMrajbJ+epqn+OuR0YiwxHhUMXVWy08wKr7vVOQ=
Subject key identifier: 7E:2A:C7:25:1F:D5:DA:73:43:08:A2:20:15:40:6A:63:84:C7:E9:C1
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 0198D5BC2BCA7C8EA711A493D0C529AA95BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0A37
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: CTf5Zl9TxTO8cUInEx9R/N2dllb07jn/7pRz3DnfYbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2b:ca:7c:8e:a7:11:a4:93:d0:c5:29:aa:95:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=7e2ac7251fd5da734308a22015406a6384c7e9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:7b:a6:78:36:c1:06:76:d9:89:5f:b9:18:
28:f5:cc:fb:5c:70:66:2f:b8:4f:c8:a7:7f:54:f4:
80:d4:20:b0:16:79:b0:77:b6:b2:53:ea:dc:58:14:
70:03:c2:7d:57:32:34:4c:53:82:13:61:b6:6c:a8:
5f:da:6b:04:f3:b2:bd:3b:5d:cd:07:cf:d1:a9:53:
c9:61:f4:c2:6d:82:c5:4d:0f:92:d0:07:79:7d:cd:
e5:90:3a:81:ba:64:2e:57:e8:8c:1b:3a:bb:9b:16:
60:4b:d1:24:e6:70:27:59:aa:ba:64:b5:a3:3a:e7:
04:77:ac:c7:cf:e4:07:f5:04:c3:0e:09:90:53:74:
2e:6f:3b:84:c6:cc:6a:cf:58:17:98:67:8b:37:0c:
85:a2:8b:81:cf:fc:11:9c:7e:30:12:15:96:c7:f4:
72:c2:86:df:35:fc:f2:2b:5d:1a:15:99:3d:2e:62:
d6:4d:42:57:6f:17:1d:ff:a1:af:fb:b3:f5:f4:22:
4d:23:16:16:e6:03:59:57:0a:df:23:a0:0c:f9:f4:
18:d1:c6:5c:d7:5e:6d:a6:83:98:e1:e8:0d:f4:d6:
e5:e7:a7:b2:10:d3:fa:43:5c:97:3e:ba:12:1a:2e:
4e:40:3a:71:27:7d:d3:31:4f:8f:4d:8d:9d:53:06:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:C7:25:1F:D5:DA:73:43:08:A2:20:15:40:6A:63:84:C7:E9:C1
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:94:84:ef:0b:2c:bc:34:e2:21:07:d0:da:2e:52:2a:55:6c:
55:a6:89:62:9c:d6:17:73:ac:4e:8c:8f:d0:7b:07:5f:1e:c7:
5f:5a:09:e2:19:e0:e0:c4:67:fc:07:51:18:07:21:51:c1:4d:
f4:3a:4b:a7:e7:59:9e:76:24:af:c1:d0:f4:0b:9e:24:b9:5b:
70:0d:1f:ee:6e:e1:9b:08:4a:f9:80:48:2c:51:4d:80:46:e6:
fd:f6:99:06:ee:cc:b3:fd:08:17:37:50:9a:ee:86:c9:65:3b:
68:98:f5:73:32:d0:00:86:4c:4c:42:37:03:e0:1c:35:5b:48:
2d:6c:0b:89:3f:55:c9:48:42:26:2a:07:66:fc:bf:5e:d7:08:
8c:f2:3c:2d:58:ac:11:2a:53:98:a3:f3:eb:6e:9d:4d:98:3c:
81:33:59:4e:52:a3:cb:39:67:7d:e8:55:67:5c:a1:77:66:6c:
2b:bf:24:dd:33:83:a3:ce:cf:5d:60:d3:30:df:18:31:eb:bb:
cf:39:0e:55:db:dc:6d:85:bf:ee:40:2e:47:88:36:ab:79:83:
f9:ec:fb:f1:20:52:46:ba:22:36:44:1d:a5:14:d3:c3:0e:7a:
34:18:48:1e:16:ab:f6:84:a1:03:38:76:43:90:12:d7:21:1e:
29:b7:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:53 2025 by rpki-client