Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: RTrlzCf5hBYxs3dERcfYFT0fC7bRv2X2WOgrg/wI9/g=
Subject key identifier: BC:D8:6F:F0:B6:FE:50:58:62:B7:3C:20:77:2B:28:50:D6:12:69:4E
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 0198D6615FC85FFAAAFE4E169922CE1000B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0EF8
Signing time: Sat 23 Aug 2025 10:02:42 +0000
Manifest this update: Sat 23 Aug 2025 10:02:42 +0000
Manifest next update: Sun 24 Aug 2025 10:02:42 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: IuVlkO6uXGUXOXKuHR8Al/2gd6t76Z4XA0Phd2fikdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:5f:c8:5f:fa:aa:fe:4e:16:99:22:ce:10:00:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Aug 23 10:02:42 2025 GMT
Not After : Aug 24 10:02:42 2025 GMT
Subject: CN=bcd86ff0b6fe505862b73c20772b2850d612694e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:a2:d7:4f:f6:c8:ec:f8:e3:88:16:75:81:
f5:d7:b4:62:0b:16:9a:f1:06:48:8c:04:10:52:fb:
bc:2a:79:d0:e0:1c:6b:18:82:5f:13:07:53:da:3e:
7e:e8:25:e7:f6:f9:27:9a:73:13:3e:a8:e2:76:97:
fc:65:63:fa:64:f2:36:7e:31:ce:19:93:86:9f:47:
05:27:4a:2d:80:c5:fb:43:9a:62:ff:50:c7:3b:df:
08:9e:37:4b:98:44:49:4d:b5:c2:77:32:db:75:d3:
9e:5f:0c:70:f7:f4:c0:f8:79:63:8e:e5:6d:9d:21:
d8:68:25:32:26:7a:59:16:15:e9:b1:34:b5:b9:06:
08:7c:f2:ec:45:c7:20:0c:8b:87:a1:c7:49:aa:b9:
f1:60:54:5d:b7:1a:8a:3c:fb:d0:9b:29:3d:5b:3e:
b6:77:50:bf:ae:31:2a:fa:f4:52:67:27:85:24:cc:
ea:40:f4:a7:bb:de:92:d0:6f:0b:63:a8:d9:21:2e:
cb:ae:9d:a0:05:38:df:39:84:2a:b9:76:93:81:4b:
96:a7:c4:87:1c:62:b8:13:d1:37:20:40:87:56:89:
7d:70:12:71:ba:80:c4:08:eb:90:32:e5:96:10:35:
44:ed:2e:13:74:86:91:bb:d5:57:eb:86:02:d4:f8:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:6F:F0:B6:FE:50:58:62:B7:3C:20:77:2B:28:50:D6:12:69:4E
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d9:d4:17:34:09:d2:45:df:25:63:d5:40:43:07:f2:34:5a:
80:6d:e5:cf:33:29:2c:46:32:eb:ce:6f:ff:46:b3:fb:50:62:
a6:f0:ec:bf:4d:be:60:79:a8:f0:de:0f:77:22:b5:0d:49:c6:
dd:9c:2e:4a:ee:3c:70:77:78:03:7d:a2:56:6d:d1:92:6c:55:
0a:0c:50:bd:83:0a:53:e8:b8:46:dd:2b:cd:e1:e2:cf:32:2f:
56:a6:60:cd:32:c4:8b:86:aa:d7:73:70:2d:75:51:ba:eb:24:
5f:68:9c:3f:e1:bf:a0:a7:12:f6:92:ea:26:df:df:ec:d4:91:
45:25:57:18:e3:5e:1a:17:1e:cc:a1:e6:5a:ec:5f:a1:b9:ae:
95:80:55:cc:46:e6:82:a4:de:b1:36:c1:55:d2:a0:a3:0c:34:
41:f0:55:38:62:b5:7a:7e:fe:94:74:eb:6d:87:5a:e7:70:be:
4a:40:69:3a:db:5d:ba:bf:c8:9d:f5:36:2d:76:56:23:4f:a9:
56:e3:f3:15:e5:e4:4e:1d:b5:56:d8:89:b5:4f:4b:e9:8d:9a:
ba:61:b1:ae:aa:5b:63:34:d0:66:dc:67:46:e1:34:60:d7:28:
e7:eb:65:b2:77:58:a0:ce:27:39:0a:8e:d0:d8:29:17:60:66:
4c:86:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:55 2025 by rpki-client