Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: ICYZvEuPsUyCS9MhY1jjEWOM8KMVBodpYT8yQ5vYnNo=
Subject key identifier: 66:6A:27:85:D4:A2:16:11:27:6F:17:9B:96:EF:E3:48:9A:87:1C:EC
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 0198D47347A6775BDD1C6FDB820881FB7CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 014C
Signing time: Sat 23 Aug 2025 01:03:01 +0000
Manifest this update: Sat 23 Aug 2025 01:03:01 +0000
Manifest next update: Sun 24 Aug 2025 01:03:01 +0000
Files and hashes: 1: 39eMlym5-vUY7eWOJGWxfmeXbRY.roa (hash: WY0sOOmZNXOfMNrzfd1Jh0Sr1ckGzWAuxPnTphEkb9w=)
2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: IrcuknDTvym2VMRiEbmD6V4zx5pac/2IRt0ADKs22AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:47:a6:77:5b:dd:1c:6f:db:82:08:81:fb:7c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Aug 23 01:03:01 2025 GMT
Not After : Aug 24 01:03:01 2025 GMT
Subject: CN=666a2785d4a21611276f179b96efe3489a871cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:f9:f4:9a:ba:91:7d:66:bd:03:54:c5:aa:
64:0e:01:d4:f1:49:6f:b7:65:b1:cf:ed:70:99:cb:
42:09:52:f3:2d:38:0e:7a:71:de:33:c7:6c:d9:e4:
48:1e:d1:c7:64:12:55:37:83:4b:e8:48:63:b1:2d:
02:0b:c1:81:fb:e6:7c:bd:e9:45:fb:a4:47:4b:f8:
37:e9:48:d6:bc:b2:e8:6c:99:01:b6:7d:45:1f:98:
8a:24:ee:6a:f5:82:47:68:70:92:ba:3c:22:c3:e3:
d6:8b:2f:df:2c:65:7f:89:5f:7e:fc:9b:b9:6b:25:
64:53:09:15:af:82:4e:7b:26:82:c1:78:08:1b:84:
99:15:b5:99:90:34:5c:02:19:02:6c:19:f1:7d:71:
2b:f5:6e:bb:c0:8e:0f:2c:db:a0:02:ca:5e:5e:35:
e8:76:72:8c:3c:9d:b3:d7:2a:7c:64:a6:61:f5:55:
a4:f6:7a:6a:f3:05:37:9c:52:71:78:86:c5:24:39:
92:4f:9d:41:cb:69:85:a0:42:d1:74:96:f2:c8:41:
fa:10:fb:42:9f:79:a2:11:d3:03:9d:22:5e:a5:47:
75:cf:36:88:9a:e5:e9:1a:af:70:f7:e8:59:58:b0:
18:fc:65:11:b3:43:5b:f2:ce:bc:3d:24:b1:3d:c2:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:27:85:D4:A2:16:11:27:6F:17:9B:96:EF:E3:48:9A:87:1C:EC
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:1d:7a:79:b7:8d:e1:56:7d:71:5b:05:f1:76:92:55:39:
81:bc:07:4b:d0:00:29:61:b1:dd:2d:b8:e9:34:92:28:95:13:
7a:37:53:a9:ce:6f:cc:e5:c8:15:4e:66:75:5e:5f:1c:1e:da:
30:b1:1a:c7:e2:54:cb:12:d7:74:31:b3:9a:84:e7:ea:69:a2:
c9:91:db:00:a6:76:53:ac:70:45:94:d1:85:e4:99:a3:47:be:
5f:04:6f:d9:ca:53:c5:72:6e:62:ff:9b:0a:8e:60:ff:92:d7:
87:ef:47:73:4f:97:f2:44:f2:13:e6:fa:6f:dc:9c:5c:2e:2f:
3e:0f:2d:4c:cc:70:ea:63:d8:82:c4:23:d3:5e:5b:a6:8e:c1:
6f:64:43:c9:f1:81:5e:9a:2a:e7:21:0c:b4:5e:bd:67:0c:c9:
06:33:74:c9:8a:5e:b7:07:f5:52:c8:66:65:c5:39:70:ad:4a:
4d:c8:cc:53:71:f2:a2:7b:82:5c:27:df:3c:f5:ef:2b:b5:8d:
5b:eb:e1:b7:53:30:48:fd:1c:a9:f2:97:0d:eb:48:82:ca:a3:
e8:60:3d:8e:02:b4:69:60:6d:fa:bd:86:8e:a8:8a:e6:20:c2:
89:bb:a7:0d:77:17:6d:36:5b:f5:8b:0e:dd:99:dd:e0:80:51:
a5:d4:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:59 2025 by rpki-client