Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: W+o62K1R5vxTCqI+sTqBFubIBSkvxMrW/WLGRFQ8mow=
Subject key identifier: 8A:4F:C3:86:D9:20:16:B5:69:84:83:01:8A:ED:A4:35:37:89:DA:1D
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 0198D65F47B1E3EEF8A51065F738E36F4B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 044A
Signing time: Sat 23 Aug 2025 10:00:24 +0000
Manifest this update: Sat 23 Aug 2025 10:00:24 +0000
Manifest next update: Sun 24 Aug 2025 10:00:24 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: 3Uka4DkAq2XqfBpjFCqSfZELs6+uZ4YAQCN30pTnUh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:47:b1:e3:ee:f8:a5:10:65:f7:38:e3:6f:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Aug 23 10:00:24 2025 GMT
Not After : Aug 24 10:00:24 2025 GMT
Subject: CN=8a4fc386d92016b5698483018aeda4353789da1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:7e:d6:2a:47:0b:24:60:60:4f:6d:e0:33:
33:01:db:66:dc:11:b0:37:fa:dd:9a:cc:a3:be:02:
86:18:1e:1c:be:7e:9c:86:27:fa:b7:7c:3d:ac:e1:
bc:9c:ef:a9:91:30:df:b9:2b:31:9b:84:78:41:88:
b3:17:30:17:fe:06:84:c9:23:23:55:e4:e7:04:bc:
af:4c:62:27:a3:83:b0:e0:17:cb:6b:71:9b:03:04:
ca:0f:51:f0:8f:51:73:9c:7d:09:83:9b:1b:1f:f1:
cc:3a:7b:e7:a9:7f:09:13:15:34:86:24:1a:29:a9:
fc:c4:a5:3e:07:02:35:aa:04:fe:62:28:67:31:3a:
cd:85:4f:c9:94:8b:97:4e:ee:13:1f:0f:bf:b1:d2:
0d:80:40:50:eb:8b:d2:1f:53:55:22:5a:42:f4:a7:
a3:e9:9d:5f:48:4f:fa:b5:10:a5:a3:83:e9:88:d0:
b0:0e:d4:12:74:5f:7c:af:78:73:39:ab:69:0f:80:
58:81:e6:6b:0a:ae:90:1c:d7:da:17:66:bc:7d:4b:
05:0f:04:52:b3:cc:64:4e:e3:b9:af:2f:63:13:88:
e6:16:09:46:d6:bd:e8:b1:3a:f0:43:9b:ef:30:ee:
a6:32:63:21:51:6e:fe:a3:f7:9e:0b:87:b7:0b:d6:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4F:C3:86:D9:20:16:B5:69:84:83:01:8A:ED:A4:35:37:89:DA:1D
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:82:5f:95:68:31:9b:11:0b:1c:c1:e6:1e:aa:5c:4c:b1:12:
aa:a4:4c:a1:c6:06:8b:db:99:2e:df:51:a8:b2:c4:84:e5:a4:
a4:c0:2b:7e:3c:b1:22:a8:56:b8:11:08:f6:93:e9:cc:0c:0d:
70:df:35:a8:64:9d:29:5a:93:bf:d3:66:42:c3:28:2c:68:6e:
df:56:9e:e6:65:b5:48:bf:99:80:ed:5b:ef:4d:96:63:bd:17:
91:f7:c1:61:8d:98:02:a9:ca:67:95:37:05:23:a5:ed:67:4a:
66:28:3e:23:f8:1b:65:04:e2:87:e2:b9:c8:61:b7:56:fa:cf:
64:f9:9f:98:b6:50:b1:1c:2f:a3:d4:59:cc:28:16:96:08:95:
2e:34:14:a9:85:6c:eb:9a:d9:11:d0:6b:ad:22:b0:03:c7:88:
3f:17:41:3d:88:ae:2b:ca:89:c3:5a:9c:bb:fa:55:da:d2:e2:
79:bb:5e:d0:cf:2c:f5:39:f2:1f:fc:3d:d2:6f:61:b4:6d:3e:
b6:87:21:90:05:0c:42:f7:48:19:0a:24:32:ee:76:c9:fd:9b:
d8:fd:47:37:e8:0f:3d:a2:dd:8d:11:c8:6d:9e:f8:91:de:33:
fc:00:27:14:78:3a:73:ed:90:c4:99:35:68:90:14:32:6f:e4:
c4:f7:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:52 2025 by rpki-client