Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: PKWHyC6drqW07BS73iMeiWnYs2wY+DPSZjLsvjFitso=
Subject key identifier: DE:CD:DD:4D:52:3F:CE:54:A3:8D:2B:C9:46:A8:99:68:84:C7:4A:B3
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 0198D4727CF0527502D49793F88E62D0E29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 0720
Signing time: Sat 23 Aug 2025 01:02:09 +0000
Manifest this update: Sat 23 Aug 2025 01:02:09 +0000
Manifest next update: Sun 24 Aug 2025 01:02:09 +0000
Files and hashes: 1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: 6ybv1F2wfW6OeuWPNlj//mbhPg4ez25js9M85OOXceU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7c:f0:52:75:02:d4:97:93:f8:8e:62:d0:e2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Aug 23 01:02:09 2025 GMT
Not After : Aug 24 01:02:09 2025 GMT
Subject: CN=decddd4d523fce54a38d2bc946a8996884c74ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:b7:e2:16:49:ad:91:18:18:d0:12:9d:a6:
a6:2c:d9:3b:83:89:09:aa:f4:58:de:5f:cf:89:62:
81:db:3e:7c:d1:a1:ec:12:c9:1c:f5:7c:e9:78:82:
59:32:06:87:22:a8:ea:b9:fb:39:67:92:a4:b8:58:
11:05:8b:3e:4b:74:6a:f0:4a:fd:c5:ef:1a:95:a9:
63:82:32:b3:d3:3c:5b:67:fb:be:b9:95:39:c1:44:
db:84:83:56:d0:7d:d9:f0:83:6b:bc:21:b3:ff:b3:
43:50:ed:dc:fa:79:32:fa:40:72:90:c9:ae:10:8b:
94:e9:e8:87:02:a1:01:5b:e0:c3:43:6c:8f:ea:a0:
87:9d:9e:d5:3b:39:6a:95:3e:e7:77:4b:fc:a1:37:
f7:b8:97:db:e0:29:e6:ca:c3:a0:62:45:bb:26:4b:
e7:b6:ac:f1:88:5c:3e:58:cd:4c:4a:34:1d:da:19:
0e:96:18:73:df:7e:b1:ef:09:36:a3:34:7d:a2:a5:
21:ae:bc:f2:be:70:df:f6:11:d1:ea:88:cc:33:b9:
8d:fe:6a:dd:ef:37:0c:f0:ba:bb:87:2b:70:e3:11:
29:21:48:51:1d:f1:84:31:8f:d9:cf:a7:4f:ad:b0:
50:ab:87:ce:33:d5:e7:e4:65:d7:03:6b:42:db:39:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:DD:4D:52:3F:CE:54:A3:8D:2B:C9:46:A8:99:68:84:C7:4A:B3
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2c:e3:64:63:5a:e8:06:f0:18:d6:58:bf:c6:54:a7:57:92:
aa:9f:8e:e3:1e:69:c4:73:06:a1:09:39:be:1b:69:72:ba:e3:
4a:59:ed:7e:2f:38:00:19:ec:d1:1c:af:2d:d1:b2:c2:3d:d0:
3d:93:85:86:03:08:b0:ea:12:c0:88:4d:b6:5f:82:34:33:ec:
42:a3:c7:f1:20:1e:8b:d5:53:df:80:81:cd:2c:97:a9:3a:e9:
5c:1a:fc:cd:8b:6f:1f:63:00:04:16:e7:92:3d:42:cb:91:1e:
23:49:44:a4:b6:6b:fe:c8:bf:70:e0:ed:12:fe:0e:76:8b:01:
1b:2a:2a:d4:da:1b:c8:ac:26:c1:cc:c1:75:c8:3b:13:10:01:
36:97:3a:b1:4d:de:87:1b:43:7f:04:71:a0:f5:cb:6d:60:cd:
6f:a0:7b:0b:7e:34:3c:a9:58:d1:a5:2e:a1:ca:f9:a4:4a:cf:
68:1a:45:65:4d:c1:a4:72:07:9c:ae:8f:23:5f:93:ac:de:3e:
69:b0:a4:5d:90:8d:26:df:a4:42:14:38:52:f6:d9:ba:65:60:
4e:df:74:78:3d:ba:3b:4c:13:fa:c9:ee:16:66:3d:a9:f2:fd:
4e:6e:b5:47:01:cc:44:96:47:5a:a3:09:2f:cb:27:4e:ff:c1:
21:d9:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:25 2025 by rpki-client