Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: aJ1WxdydzC2wm6OsNIewPKXZcaw3ryPxZcGGtmXw8LU=
Subject key identifier: 0F:0D:86:E0:E0:F3:B7:97:73:7A:AF:C6:44:2E:43:88:73:5C:7B:FF
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 0198D54DE3F54695637ACB7BD03693042B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 12CE
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: erQaj4+ZcbWYZzpNwV3/kKVihWtZhuoq3U+/O5V/Acc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e3:f5:46:95:63:7a:cb:7b:d0:36:93:04:2b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=0f0d86e0e0f3b797737aafc6442e4388735c7bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:e1:5a:db:79:8e:3b:f9:b3:2a:74:48:91:
d1:f7:f8:78:68:60:b3:f1:a8:8d:80:0c:98:ca:fd:
b1:b7:bb:4a:2d:70:55:7b:43:2e:30:ff:5b:75:fd:
90:c4:7a:14:a7:90:55:be:c3:ca:fb:d2:bb:f7:03:
d8:bd:50:a3:f7:0c:af:2b:6e:28:d1:97:52:a3:c7:
a0:d5:c3:3b:b6:83:7e:c9:79:ac:ad:73:94:de:be:
d5:b7:65:e9:2d:ca:3b:88:71:d3:de:08:9d:87:7c:
84:92:bd:37:14:25:04:dd:ae:bc:7f:1c:47:61:60:
04:26:fe:7d:d9:09:31:b9:37:56:f9:f2:76:83:dd:
1e:ca:f3:9f:9f:dd:b2:06:3d:47:bd:51:c0:fd:1c:
c4:32:a1:92:08:77:47:5d:18:05:3a:20:65:8d:25:
09:63:da:2f:e1:7b:8e:52:26:0a:65:05:09:19:0e:
7c:a8:68:b4:60:ab:e0:cd:26:f1:17:87:4e:91:3a:
a3:3f:44:27:a0:1c:b6:70:76:f9:1d:75:7f:29:3b:
3b:b5:3b:a0:8c:bd:50:7e:72:85:cf:9e:5e:c4:62:
ed:57:c9:f9:26:9b:ba:47:16:84:46:9c:c9:b9:e7:
bc:39:f8:8a:42:50:dd:93:88:0d:b2:7a:43:e4:98:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:86:E0:E0:F3:B7:97:73:7A:AF:C6:44:2E:43:88:73:5C:7B:FF
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:be:c5:5f:c2:13:e3:49:ac:72:53:80:a7:09:3d:35:a4:e5:
13:f4:1d:ac:fc:4b:6e:21:0f:d5:40:53:fc:f4:31:93:82:00:
93:b4:e2:f9:f7:3f:18:7b:46:6c:81:6a:28:20:91:df:12:e0:
88:7e:0f:6d:d4:88:0f:c5:33:bc:ad:5c:b4:89:39:97:f4:19:
a3:f9:bc:c8:5f:7e:68:18:7f:dc:b4:56:d6:8c:1d:e4:9f:cf:
1a:db:02:d0:98:fa:9a:f4:49:82:fe:3d:d8:0f:a7:1c:3e:50:
06:71:05:7a:4c:7e:63:a1:45:2a:7d:6e:8b:b4:a5:30:86:9b:
36:9d:09:e2:32:c1:18:54:c6:af:29:20:4c:fd:7e:0f:4a:5e:
1d:69:9c:dc:18:2b:fe:d5:1e:1c:12:84:47:b1:be:52:12:dc:
1a:a3:45:c0:aa:f9:3a:ec:f8:bd:5d:b9:8a:da:c8:72:15:e8:
8b:a7:4b:46:57:cf:3b:7e:87:bf:6d:f2:23:68:7b:b7:4e:b5:
74:e3:31:1a:5b:e3:72:f6:5c:1c:eb:70:20:56:ba:2f:6c:5c:
2a:bd:42:5d:ea:d0:d3:12:91:58:16:63:2f:81:78:a0:3a:15:
e2:ee:26:a9:30:f1:88:eb:2b:e8:dd:8e:82:4d:8a:f3:4c:17:
8f:c4:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:31 2025 by rpki-client