Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: Rjh8weHlxitcY7sSijC5T2FUz52GbAF+EmabwNoOFFY=
Subject key identifier: E7:78:DD:31:E2:54:F2:B4:A1:54:1F:03:19:46:C0:DB:0E:B4:FD:31
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 0198D40443E8CE323822138ED9CCC8FB6CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1646
Signing time: Fri 22 Aug 2025 23:01:45 +0000
Manifest this update: Fri 22 Aug 2025 23:01:45 +0000
Manifest next update: Sat 23 Aug 2025 23:01:45 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: kMyIlVkVI1yPOu9dt80nwgMNAQ0APvqEHe/JUCoq+Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:43:e8:ce:32:38:22:13:8e:d9:cc:c8:fb:6c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Aug 22 23:01:45 2025 GMT
Not After : Aug 23 23:01:45 2025 GMT
Subject: CN=e778dd31e254f2b4a1541f031946c0db0eb4fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:90:cd:c8:a5:80:66:0e:4b:ab:2b:9f:4a:
14:5f:b7:02:bb:b6:75:af:fc:ff:40:96:6d:89:c5:
a1:79:f9:f0:9d:e8:1d:8f:66:e3:12:3c:f4:2f:4a:
e4:a6:9b:90:5a:05:dc:67:25:f8:cb:44:ba:66:4c:
f1:4c:4e:60:03:3f:06:94:80:46:ca:0a:18:1a:32:
6d:e1:ad:22:8c:18:c8:11:00:7c:f0:20:ee:73:17:
cb:e5:3a:5f:7e:64:cb:d2:7e:71:93:77:dc:bd:0d:
07:c2:42:89:ee:c3:8b:1c:db:42:1a:8d:ad:67:0d:
d2:4e:0c:d0:0d:f7:16:10:14:2a:67:f5:de:2b:22:
ef:e6:43:e1:74:85:87:e2:21:04:cc:30:44:2e:fc:
c2:96:79:c7:77:a3:51:d1:47:5a:f3:df:40:98:02:
7d:19:e6:6f:a3:d7:a7:b6:3f:0e:12:e2:95:fa:7d:
ea:15:08:05:71:22:c4:1f:b5:f5:a3:04:7c:e3:a1:
93:08:c8:f1:c1:27:21:73:50:ca:6c:0a:05:19:f5:
4b:3f:b9:58:4e:42:26:26:6d:1e:8c:ef:98:e3:61:
aa:22:2a:f0:32:7c:bd:db:d8:24:a2:34:7d:c4:2f:
3f:a5:8a:95:51:a8:d1:e6:a3:e3:11:8d:58:d3:54:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:DD:31:E2:54:F2:B4:A1:54:1F:03:19:46:C0:DB:0E:B4:FD:31
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6f:86:f6:b4:60:0e:21:86:6b:4d:c5:cd:5e:26:f2:78:ae:
07:65:f4:d3:28:12:90:ec:82:ba:02:6e:86:a2:03:56:0e:f9:
0a:8c:80:19:60:6e:33:01:c8:e7:7c:f5:fe:69:bd:80:3a:92:
96:30:9f:8c:d9:05:47:ce:b0:43:42:42:f7:96:c8:fc:cd:b9:
c0:3b:ae:63:13:0d:1c:f6:db:b6:94:ae:6e:68:81:71:1a:53:
29:f5:a6:d9:61:a7:28:1a:76:2c:e6:81:eb:94:ff:88:7b:02:
51:bb:2e:b0:55:0d:cf:c6:51:98:ba:28:be:18:ac:59:d3:47:
02:fc:79:9d:8d:8b:00:42:50:fd:72:01:14:88:a7:66:6a:12:
8a:21:66:92:46:8d:c3:19:c1:5e:a0:34:de:07:a2:07:f4:23:
de:32:27:f8:e2:06:5c:00:d1:29:b0:0e:91:29:22:e6:96:b1:
94:a5:09:f3:d4:40:15:2f:c6:ce:18:bf:04:28:87:fb:f8:e0:
34:a7:2b:24:09:c7:f2:fa:cd:ed:31:d9:e4:64:9c:cd:e6:3b:
b6:64:99:ae:54:1a:93:fd:40:4b:08:d8:16:fa:d2:96:56:30:
17:7c:c0:f4:0b:c5:97:90:ae:bc:8f:8b:3e:a9:5f:f9:4b:df:
e7:9c:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:44 2025 by rpki-client