Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
File: yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json)
Hash identifier: 5AyViZlBGIltqd30Gax3OjG2oVnOncPOp20i4boFsSU=
Subject key identifier: 8E:EA:2B:00:19:E2:B6:FA:44:71:74:8B:8F:7B:24:50:44:4E:86:A6
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Certificate issuer: /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial: 0198D51624CF6B1790F15B73A3C909FD5B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
Manifest number: 1574
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: FU1o4K68ASMHjxslt5agTXMw1Z4.roa (hash: cFpnMXx4SNy55YthuxgRWkF2I8U6u41jmzS8UiT8Yts=)
2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: y04asfKr9ySigLSIvVtk04Y1CqROs4UuQvq5Un7rcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:24:cf:6b:17:90:f1:5b:73:a3:c9:09:fd:5b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=8eea2b0019e2b6fa4471748b8f7b2450444e86a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:a2:16:9d:27:87:07:fa:d2:e7:12:67:4e:
da:17:09:f3:02:dc:29:80:9c:6d:89:06:5c:95:e1:
d9:74:13:f5:b4:b5:6d:4d:ef:ca:a4:11:2e:a6:12:
92:f6:98:fe:29:7c:e2:dc:04:52:9f:c6:89:e7:c8:
30:7a:ed:1f:64:8d:89:87:cf:70:65:5e:d6:d6:ad:
5e:1e:8f:59:74:20:55:c7:20:f8:bf:3f:4b:8e:ed:
85:f5:f6:54:46:12:b1:c6:4a:2e:6d:5c:a8:16:d4:
0b:3d:19:84:1a:71:5d:cf:46:e1:f4:26:3d:d3:d4:
48:01:c3:1e:03:3f:ed:8b:07:f8:a4:46:e5:7d:ce:
cf:62:25:2e:4d:32:85:e6:79:bb:62:67:2a:c7:72:
15:cb:ed:bb:c4:52:b1:23:e1:b4:4a:06:b2:a2:68:
e7:84:d6:24:16:3d:c5:80:ab:cc:fb:52:1d:6d:42:
77:f4:d7:f8:de:94:52:63:0e:6f:3d:24:d0:34:b4:
ea:19:07:e7:81:74:7c:68:94:64:b9:48:ba:1a:e2:
5a:77:cb:d1:a8:4c:f9:e3:6a:22:22:51:e3:47:7d:
80:40:c0:6a:d0:c4:47:d7:79:15:4e:18:37:49:a9:
bc:40:ce:40:78:c3:e8:50:e3:c5:c1:ae:ca:aa:51:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:2B:00:19:E2:B6:FA:44:71:74:8B:8F:7B:24:50:44:4E:86:A6
X509v3 Authority Key Identifier:
keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a8:0c:1d:b6:a3:d8:d2:52:3e:72:77:43:c0:2d:2a:12:25:
70:6c:14:d3:be:d2:01:77:c0:04:d1:40:6c:91:4c:a3:51:e8:
47:d2:a1:70:a4:f2:e7:7b:38:8a:af:2f:78:44:ef:78:a0:1c:
87:5b:ff:ae:40:6b:79:55:4b:e7:23:cd:4c:c1:df:77:6f:19:
80:2c:2e:64:f9:9f:02:78:6e:63:97:d9:9e:ff:ea:a8:a5:52:
28:f4:98:0b:ea:c8:ed:d1:39:29:7c:91:a6:4d:a6:aa:88:42:
0a:8f:33:12:db:c8:1b:9c:bd:39:9f:a2:07:57:52:7f:5d:c6:
28:d2:16:03:0a:c4:f2:ad:a5:1b:44:3f:eb:e6:cb:99:6a:52:
58:f0:c4:25:7b:c0:66:fa:96:e6:67:8f:8f:51:23:ec:9d:8d:
ba:dd:76:f1:ee:bf:b1:bf:28:75:f2:e4:62:30:5a:6a:52:aa:
02:91:7f:d0:6a:78:6e:b2:85:b7:40:fc:72:19:1d:c8:8c:e4:
63:7d:98:40:c6:c4:95:a3:e0:9e:86:0c:cb:da:a9:8a:8e:0a:
1a:fd:bd:4b:cb:63:61:71:08:1f:d3:01:87:ed:a9:8c:d2:bc:
29:ae:1c:37:7e:c0:81:f7:09:63:ff:1d:f8:b4:89:db:84:01:
76:bc:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:16 2025 by rpki-client