Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: MbsZ0TNVMTxMg/YM3g010VpzOClajyVt/hm2DTseOTM=
Subject key identifier: F8:11:A4:82:82:90:0D:11:B4:52:C2:7E:F7:9F:0B:09:CA:FF:64:02
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 0198D6606058FCA9EECC2B5F8022E0BAE463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: 7QiGbl8Tvkk1qgKvdJN0XrnUlQ+RRZHysO8XUQ2zX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:60:58:fc:a9:ee:cc:2b:5f:80:22:e0:ba:e4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=f811a48282900d11b452c27ef79f0b09caff6402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:4c:c3:e2:bd:95:cc:b8:c1:a2:51:cd:6d:
27:ed:3f:31:5b:22:9a:97:c0:19:db:fc:e4:d3:9b:
e0:e3:c8:2b:fb:ee:49:f6:96:23:2f:4d:2e:b7:95:
84:75:68:37:18:3a:67:78:9d:36:e4:00:75:e2:9c:
c2:1e:64:30:1a:d6:53:56:ac:d8:01:64:07:59:95:
92:59:d2:e2:c6:5b:25:d7:b7:0d:89:f1:34:40:51:
0a:26:96:83:33:93:51:6d:d5:01:db:77:fb:fb:67:
f2:73:c0:a5:97:f1:71:ab:f5:0f:b3:2a:7d:f2:5c:
a4:44:ec:1a:37:cc:c4:84:37:fa:9a:dd:8a:0b:6e:
32:91:64:b0:27:5a:b3:3c:59:4c:d9:11:80:72:08:
ec:d1:c1:3e:b4:66:df:5b:57:ab:c0:1a:4e:09:d6:
70:a3:ae:12:09:6c:55:84:73:39:ef:2b:9f:0f:99:
29:10:54:d5:8a:a7:28:e1:95:11:5d:01:44:3f:2c:
34:86:b9:31:d9:96:a6:41:47:b4:ae:39:09:39:76:
39:34:c2:51:15:cc:48:01:1b:7f:e3:bc:48:62:dd:
35:a8:03:90:03:b1:98:79:23:3e:93:b3:3a:23:6a:
05:fc:c0:3d:7f:53:74:93:61:fe:56:cf:e6:1c:48:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:A4:82:82:90:0D:11:B4:52:C2:7E:F7:9F:0B:09:CA:FF:64:02
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a7:66:de:aa:c4:78:da:9b:23:7b:fa:a1:3b:67:0c:0d:cb:
0c:1f:ff:3b:d6:4f:e8:42:0b:ca:6c:87:9d:ad:70:9c:8a:4f:
ee:91:72:df:d5:41:8a:12:ba:51:62:3d:93:00:e2:6a:39:29:
8f:3a:ed:28:73:56:1f:58:e0:16:3e:36:24:74:ad:60:24:62:
1c:9c:09:1b:f0:bc:b8:d9:00:11:7a:29:c1:a2:b0:b9:a7:8e:
da:16:39:22:5c:fd:d4:75:c1:b4:11:4e:bb:61:be:5d:50:d0:
4a:ff:54:e1:38:41:c6:fd:b8:2f:bc:00:7d:21:8e:54:f9:45:
62:25:e9:ee:d9:9f:dc:0d:40:72:43:15:37:42:ff:1e:a2:39:
da:f5:bd:19:91:d0:75:e3:e4:8f:27:48:f2:a9:2d:8b:1a:39:
10:18:ff:23:85:7f:7d:91:22:f7:32:29:e6:67:01:a6:f6:9a:
ea:6b:48:37:15:77:78:e5:a5:f1:fd:df:97:c6:25:93:cb:46:
a9:f6:71:c8:53:7d:ce:34:c2:78:c4:9b:94:aa:52:79:05:86:
31:8a:ec:c9:05:e2:ba:b9:b0:aa:2a:77:0e:85:09:34:34:63:
c3:27:68:72:9a:ba:ea:41:f0:c3:d7:3c:69:aa:d8:74:be:f1:
cd:b0:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:37 2025 by rpki-client