Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: dfE1aMNPl/48Sopgi0+Gr8FLkSEShWzHsDze9O8WY50=
Subject key identifier: 88:8C:DB:52:DC:8B:E9:09:2F:8B:A9:42:5B:A4:48:C8:8B:FB:AF:FF
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 0198D884A0223A92D09E19F7A97B14BAC025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 20:00:27 +0000
Manifest this update: Sat 23 Aug 2025 20:00:27 +0000
Manifest next update: Sun 24 Aug 2025 20:00:27 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: ukYzQ1vL/WcpoDn+2hH0pushgdAxX+C1kwSddCgNhu8=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:a0:22:3a:92:d0:9e:19:f7:a9:7b:14:ba:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Aug 23 20:00:27 2025 GMT
Not After : Aug 24 20:00:27 2025 GMT
Subject: CN=888cdb52dc8be9092f8ba9425ba448c88bfbafff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:28:14:72:33:0b:d6:0d:d3:df:69:4b:a7:
99:f1:a1:d7:8d:e6:58:b7:ab:50:b0:46:a8:b2:cb:
22:f3:c9:62:99:01:bf:46:d2:76:38:d8:71:8b:64:
12:49:cc:6a:4e:3f:bc:5d:1f:f3:f3:fe:95:dc:af:
18:0c:82:2e:11:26:60:78:23:f4:fc:fc:8c:18:84:
43:ad:da:54:ec:dc:98:1f:6f:38:3d:7b:ca:c5:83:
8a:48:b9:85:42:e8:9a:50:d0:da:e2:71:dd:e1:59:
0c:40:c9:d6:a8:29:1d:f8:ec:76:da:a6:5a:d7:9a:
3b:07:13:15:55:a0:d6:45:09:ec:9b:45:02:d2:e7:
a5:c6:19:df:62:14:21:fd:bf:74:b6:a6:75:4a:79:
86:de:ab:4a:1c:a0:2c:8a:ab:ac:c5:6b:01:2e:91:
3b:7c:46:2b:55:aa:0d:e2:40:96:8b:d6:4e:ef:c0:
c0:e1:a2:a0:ac:63:77:37:6d:38:d4:ed:83:3d:3d:
1a:3c:93:03:b9:3f:ec:99:33:76:26:e3:53:6f:87:
6c:a6:46:20:ef:0f:a5:13:33:da:a1:33:b8:22:71:
0e:10:0e:36:0f:b7:ed:d8:6d:1d:67:c1:1f:f9:ef:
51:59:98:34:ab:8e:e5:1a:31:1b:59:bd:1e:ef:f1:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8C:DB:52:DC:8B:E9:09:2F:8B:A9:42:5B:A4:48:C8:8B:FB:AF:FF
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:63:31:72:97:a6:5a:03:e7:84:0a:0c:b7:ed:ef:ca:68:98:
e6:2f:99:5b:b1:4a:6f:05:24:84:07:ba:0d:16:3e:97:e6:70:
dc:ce:2f:1f:6f:cb:48:5b:d8:5d:a3:71:30:b9:1f:76:2e:2e:
59:77:2c:ba:75:ef:ff:ee:57:19:dc:9f:b8:91:4d:81:ba:10:
be:a2:48:21:be:b4:7f:83:95:48:e5:2b:0e:6f:f7:75:e2:41:
97:96:d0:1d:43:25:de:e1:75:cb:ca:70:76:a4:3e:82:cd:e5:
9f:2a:ec:1b:8d:ed:0d:13:72:dd:1a:6e:e9:db:e7:ff:ba:b3:
4b:7b:bd:f3:ea:f9:a0:89:c0:c4:ac:ef:41:d9:42:c8:49:9e:
bd:9b:d8:4a:e0:3b:b9:d6:e3:2a:fb:45:4d:df:89:bf:ff:ec:
ef:18:b6:44:21:f9:e0:ff:90:49:ac:e7:7a:a6:69:c0:d1:29:
c8:d1:b4:33:13:b2:91:ec:da:60:c8:00:f2:17:a4:a3:56:2b:
a2:cf:65:23:e9:26:95:64:ce:dd:0c:ec:19:a3:e2:5e:4f:7b:
07:45:ce:de:dd:e9:5b:62:60:2f:d6:4f:4e:7a:ce:f6:87:fc:
d1:fc:d0:b2:21:4d:ed:4c:3d:0c:4a:5c:d9:de:0c:c7:b7:c9:
d7:9d:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:11:06 2025 by rpki-client