Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: 4auxYtPKbBxmwFzLLKEo7WmNd1n8UEw2InZcYi5wKlA=
Subject key identifier: 8A:96:06:44:CB:0F:59:37:FB:82:B4:83:26:EA:47:67:6C:DA:E2:F2
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 0198D3967CF4D194180A69187FBE650CB818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 134A
Signing time: Fri 22 Aug 2025 21:01:51 +0000
Manifest this update: Fri 22 Aug 2025 21:01:51 +0000
Manifest next update: Sat 23 Aug 2025 21:01:51 +0000
Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: dMH7NzfKWrajjm0GhG6bTodjgwq9xnTwlBrbDU+oXek=)
2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 21:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:96:7c:f4:d1:94:18:0a:69:18:7f:be:65:0c:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Aug 22 21:01:51 2025 GMT
Not After : Aug 23 21:01:51 2025 GMT
Subject: CN=8a960644cb0f5937fb82b48326ea47676cdae2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:3a:c7:8c:b0:66:96:36:7c:7f:8e:98:bd:
44:ab:8e:6d:45:63:7a:dc:6b:ef:ac:37:e7:14:38:
20:e0:3c:a7:ac:de:c0:ac:5a:c8:a5:31:21:19:ab:
54:01:ab:6c:d3:8a:ae:4f:5d:75:00:01:53:5f:6c:
4a:8c:d2:f0:f6:8c:58:74:32:ae:28:cc:0b:84:e9:
80:ed:e9:c1:26:f9:4d:3f:70:c9:46:f1:3e:2b:cc:
f5:c7:1c:2f:6f:2b:04:87:0e:5b:0f:8b:f5:d2:e5:
d0:f5:d0:90:f6:d8:e6:00:06:df:0b:11:78:a2:32:
49:28:90:de:11:6a:fe:c0:80:1e:26:04:9e:37:3a:
8c:f4:8f:60:e7:4c:38:c3:78:9b:ea:fd:db:4d:57:
b0:6b:86:bb:ae:df:60:03:fa:75:54:5e:73:d4:b3:
ef:b0:7f:c8:e4:b2:9c:28:ad:eb:66:d4:38:1e:87:
8a:67:b3:17:8b:63:02:58:0f:05:39:a3:f1:ee:c9:
6b:a2:7a:d8:6b:4b:38:9b:83:0a:ca:bb:19:e4:af:
22:c4:72:ed:7c:23:96:b5:2c:10:45:3d:ad:53:52:
7e:79:9d:d3:b1:82:60:37:f7:5f:66:e2:7a:bb:4d:
19:0b:99:8d:69:ba:f0:3c:47:d0:6d:60:bc:33:ff:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:96:06:44:CB:0F:59:37:FB:82:B4:83:26:EA:47:67:6C:DA:E2:F2
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ae:27:f2:95:f4:a5:6c:33:9c:24:e9:43:75:a0:84:89:ac:
de:b7:fd:50:40:bf:a4:74:a9:cb:60:0c:8b:bb:9b:99:4e:d4:
06:6e:bf:fb:6b:7e:14:54:3e:18:81:b1:db:eb:94:fd:e0:9a:
3a:07:4b:a6:74:67:a3:6b:48:1a:28:17:1b:fd:b2:8c:e5:7b:
26:90:fd:83:a5:02:11:3b:66:17:de:69:af:54:0c:7c:4d:13:
59:b3:c5:ee:f2:cc:0e:69:67:82:a6:83:83:a7:8e:57:9d:0b:
93:42:5a:dd:d1:a0:c4:4b:e4:e2:01:96:d7:d0:13:18:55:3c:
9d:8d:2c:bb:73:07:08:cf:bd:74:ef:4a:58:9a:1d:b0:6c:9a:
88:8a:5f:e8:be:d1:a4:e6:f1:dd:f9:12:3a:65:1b:ee:9f:56:
4a:82:31:73:48:d0:95:f4:27:63:82:6a:6e:78:20:02:01:fd:
15:d4:a6:48:3e:db:e2:1a:1b:9f:a4:52:00:eb:17:ca:bc:99:
be:3d:ac:dc:47:22:27:22:ed:22:14:4c:d0:de:50:8c:2e:d6:
94:83:6b:a1:d2:a6:83:01:95:73:d8:be:ec:16:2b:ba:eb:bf:
7f:37:ab:92:0b:2b:e6:5c:fc:d1:73:b8:b6:97:b6:a0:95:b1:
30:7e:0c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:22:38 2025 by rpki-client