Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: jOdlunc3eya9kkBX/aHjy3PqK1/GFHymMH+28GV9l44=
Subject key identifier: DA:0A:DB:C8:2C:91:49:18:39:11:74:95:D0:DF:39:D5:6E:C5:77:B3
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 0198D65F8E206007FEC527FD330EF46D52EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 1221
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: L74MxgJ89edtAjZVnb9dMc0TmHZXvIf5x5gLPkuenYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8e:20:60:07:fe:c5:27:fd:33:0e:f4:6d:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=da0adbc82c91491839117495d0df39d56ec577b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:71:5f:ce:13:cd:f9:13:41:57:aa:83:45:
b9:63:eb:a1:6a:78:82:9d:49:38:fa:ad:2c:a3:07:
36:80:c3:1a:77:a4:31:2b:8c:8f:d3:f1:61:cd:21:
05:f6:ca:56:03:48:cc:2e:29:22:b7:3b:81:0e:62:
56:fb:e0:d3:11:69:76:8c:f2:fd:43:ab:d9:9b:8d:
19:25:24:70:4b:46:ae:f0:92:db:4f:06:da:9b:8b:
de:03:dd:ca:65:a0:46:13:50:6e:f1:8d:33:b8:07:
59:ae:64:a2:fa:50:51:81:d1:e0:6f:88:1a:a6:23:
a7:7c:01:64:27:bd:9f:28:5a:c8:55:0b:70:fa:5c:
63:94:39:6a:38:ab:65:87:d4:61:ac:65:69:92:4c:
ca:93:61:ae:f5:0e:05:d4:db:81:35:d7:a8:71:01:
3a:b1:26:80:65:62:ff:3c:56:3e:8d:c4:6f:9d:ce:
ba:58:6a:e3:c5:97:6e:66:e9:77:b1:c0:86:7a:fe:
06:93:10:a3:1c:75:8c:b6:b7:d3:95:05:a6:be:7e:
a0:75:bd:8c:58:30:62:02:04:07:e2:f0:c5:af:11:
09:7a:e6:8d:e4:34:48:09:85:a8:c0:ca:c6:ca:03:
38:66:62:b6:0f:04:36:77:b1:6a:f5:b3:ec:37:e8:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:DB:C8:2C:91:49:18:39:11:74:95:D0:DF:39:D5:6E:C5:77:B3
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:24:2c:cc:8b:71:97:b6:ec:02:e4:da:28:f1:20:f6:5f:ed:
08:0c:39:3c:4e:b5:fb:e6:88:d0:89:74:6a:6c:8a:ee:5a:d1:
4e:4b:bb:24:c8:75:f4:67:8b:81:16:62:70:ee:33:16:57:32:
1e:4b:57:24:79:07:49:53:29:07:3b:eb:e2:a1:66:81:1a:18:
c7:79:82:7e:8a:fb:24:58:e3:ae:b2:ed:63:6f:e2:eb:cb:6e:
0a:5a:27:bd:24:d0:22:d9:ec:8e:11:d7:16:b4:67:ba:72:b3:
80:50:98:7a:a1:9c:f7:ca:cb:2d:7f:20:31:d7:d1:96:d6:f8:
11:e6:b4:d4:41:d2:3c:8c:39:34:50:f3:fd:c3:1c:69:6f:7d:
57:95:22:48:db:20:ef:1d:a2:37:10:1f:f7:90:f4:b9:4b:52:
3e:a3:d3:94:95:1e:3c:fc:05:50:70:9c:8a:0d:1d:5e:b3:31:
76:61:f4:0a:b6:56:1d:51:18:e6:ae:5e:40:bf:14:da:6b:1b:
74:d6:87:30:cf:a5:70:50:b1:8a:4a:d6:c5:42:45:07:76:ae:
29:9a:8a:0a:93:b2:f4:91:07:b8:b6:eb:4c:4c:5d:ea:68:99:
61:96:45:05:68:f8:03:82:4c:56:08:be:7e:57:3b:34:61:6f:
a5:f7:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:48 2025 by rpki-client