Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: 4v4VhI/w/is8K8+hC2wqjR4gGps969njleHdgKccmC8=
Subject key identifier: D9:22:4A:64:7C:28:B7:4A:DB:C6:4C:47:F3:E5:EB:FC:C1:26:25:77
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 0198D5BB99B9A7393CBAD0A88F73371F9FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 120B
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: R7LBGsG+7O6Y+AQBRMpDTsmKsd+i0ZnqJOTjv45iPdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:99:b9:a7:39:3c:ba:d0:a8:8f:73:37:1f:9f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=d9224a647c28b74adbc64c47f3e5ebfcc1262577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:18:3d:a6:50:90:34:cf:5c:44:61:25:45:
0e:85:54:2f:6c:94:5b:c3:72:c4:de:ff:ad:76:26:
14:28:48:c4:2a:43:88:cb:8e:a8:ee:e1:99:80:00:
33:ca:75:18:54:d1:95:a9:c2:e1:df:d3:8a:8a:83:
b8:8f:9d:8b:b3:d6:d1:6a:60:e4:2b:10:bf:41:12:
67:58:55:c9:05:5c:4e:34:37:9f:96:bb:d2:c5:db:
30:55:ac:46:63:16:75:d8:6c:f4:3a:18:1f:ff:c2:
74:db:10:38:91:db:27:be:46:81:78:50:7f:b6:8d:
fd:0f:cc:d1:90:94:66:36:b4:9d:4c:70:c6:11:e3:
c6:eb:cb:e6:0b:ee:7b:82:ef:4b:85:fe:8c:89:c7:
54:d9:e6:a0:8a:72:bc:e4:43:7c:4b:20:c0:07:7a:
f2:6c:ce:69:63:68:ac:32:10:60:01:f5:4c:b0:0c:
54:2b:af:e6:b8:c6:75:31:af:0f:fc:66:4f:80:5d:
68:92:cf:d2:44:2f:d2:5c:88:a9:21:4d:c3:24:1b:
3a:4e:f5:bd:2b:37:7a:1e:96:28:4e:8a:c3:d9:94:
f2:fa:88:fb:7c:44:93:95:cf:6a:2b:e0:e0:01:28:
e3:96:ad:a7:32:ee:bb:c7:ec:46:88:c0:25:7c:fb:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:22:4A:64:7C:28:B7:4A:DB:C6:4C:47:F3:E5:EB:FC:C1:26:25:77
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:0f:bc:25:a1:c6:10:d2:6e:83:35:16:4c:b5:85:e3:70:
89:5f:5d:82:d1:9c:0c:4c:20:2c:3a:1b:2f:6b:98:07:bd:28:
ef:57:5b:e7:68:75:33:3d:1a:1f:a5:4c:51:37:9e:89:6e:bb:
fc:1d:a1:db:15:83:69:7e:20:b7:61:72:b0:84:95:73:3e:e5:
43:46:c2:01:ff:9e:16:09:92:a6:22:c8:7b:04:bf:38:a8:d7:
ae:f6:9f:2f:91:0a:e4:c5:9e:58:2b:51:5c:3d:ea:c5:7f:4d:
48:1a:5c:48:ae:fc:0d:0f:15:1b:1c:6a:88:09:40:4e:4b:29:
d9:08:68:d9:6d:28:60:75:3b:f1:bf:b8:c2:6a:a9:14:53:2c:
ae:de:39:dd:b3:49:cd:5b:c0:6d:d4:ed:71:c8:ba:6c:fd:a9:
b4:fa:ee:0b:d6:67:51:dc:0f:00:a0:a7:2b:cc:54:c6:5c:5f:
da:81:5f:4b:07:1d:c2:18:ca:0a:82:44:d1:17:1e:1c:b3:c9:
3f:cd:b0:ad:4d:34:b3:e3:66:8d:c7:c5:07:8d:85:91:a2:f0:
c4:c6:5e:ac:d3:eb:a0:83:9f:51:64:7c:a4:0f:64:cf:0d:67:
c6:55:0f:27:00:31:c2:00:7d:05:3f:b8:ef:34:59:78:23:fd:
ba:c9:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:16 2025 by rpki-client