Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: J8o84EU6KP19Bk/CTbHYs8Q2cX2yCfE+TgGjHx1bWfU=
Subject key identifier: 2D:84:D9:91:47:31:13:87:62:55:BA:52:93:C9:F0:FB:F6:4E:BD:F3
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 0198D472C27102324139259824686AFE68FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 03FC
Signing time: Sat 23 Aug 2025 01:02:27 +0000
Manifest this update: Sat 23 Aug 2025 01:02:27 +0000
Manifest next update: Sun 24 Aug 2025 01:02:27 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: Fxkcizh6uSDDQHRfLgq5I4xCw5E2VDwWOEFEhRxDXVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c2:71:02:32:41:39:25:98:24:68:6a:fe:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Aug 23 01:02:27 2025 GMT
Not After : Aug 24 01:02:27 2025 GMT
Subject: CN=2d84d991473113876255ba5293c9f0fbf64ebdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:fe:1e:1f:c0:05:f8:a6:b8:52:37:4a:b9:
e0:ce:f5:3c:33:0d:2a:73:d4:5f:b7:1d:f4:8a:99:
60:f3:71:82:75:c8:15:b2:9e:29:bf:e9:03:cb:7a:
4a:d8:a0:e0:22:bb:29:fd:11:21:4f:a1:25:75:ef:
b0:4f:a5:e5:d3:5a:06:fc:82:fd:78:11:c4:d2:b8:
e7:d9:48:f2:2f:1a:05:81:53:61:08:c3:1b:c6:12:
79:d5:e0:8a:84:5d:00:a2:2e:1f:6f:25:7b:49:3d:
aa:ed:61:de:69:31:b1:fb:58:88:54:d5:ee:0f:f2:
d0:a5:02:60:13:3c:8a:a4:b2:6d:c9:db:18:da:77:
69:65:86:60:e2:42:c7:3c:25:6b:da:f9:10:68:97:
d5:e6:22:93:bb:e2:af:26:96:4f:99:fd:2f:9d:33:
cb:09:e7:bb:69:d7:5a:bb:42:92:18:3e:c9:04:dd:
4c:37:88:6a:88:46:f5:46:96:d5:75:8c:ce:4c:f9:
0e:89:91:26:d7:d6:34:2e:c8:87:16:09:f5:44:f9:
31:d5:38:dc:da:af:cf:be:6f:23:be:40:5b:bd:c8:
22:37:f7:10:2a:1a:1d:6c:74:a5:0c:36:93:c3:8c:
63:bb:73:c6:04:9b:62:16:6f:0f:34:7d:42:a6:cf:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:D9:91:47:31:13:87:62:55:BA:52:93:C9:F0:FB:F6:4E:BD:F3
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3a:73:ee:8b:aa:da:02:4b:de:6c:03:45:e9:a8:f0:86:0d:
2e:a6:a8:61:04:7b:78:c4:51:db:7d:da:15:f6:9f:83:86:a3:
a5:bf:de:3d:35:a4:05:da:af:38:4b:95:3f:30:3d:16:11:f8:
6b:3d:37:5b:c4:ff:88:98:5b:78:e6:63:76:b8:24:45:7c:c3:
5c:de:45:c2:bd:4f:33:b2:38:37:bc:11:85:05:90:87:ac:36:
b0:66:03:2e:0d:2e:54:58:a6:e1:44:dd:5c:27:7d:18:99:d9:
a7:bc:f0:f3:08:4f:03:7e:dc:df:1e:f2:19:16:82:96:3b:de:
7a:c7:54:72:56:2d:3a:82:ba:57:c9:68:17:f6:a4:25:93:b7:
7e:e0:b8:d1:2e:5f:76:4a:75:3b:cb:84:ca:28:b2:54:ba:94:
82:1d:db:4d:c6:0b:a3:ad:f1:fc:bf:73:1e:10:e4:9e:b6:17:
4b:a3:5a:e8:13:40:3d:be:c4:76:92:7d:bf:94:cb:2d:0d:20:
92:8a:62:a0:19:08:29:7d:f3:0f:de:46:17:67:b0:6a:60:22:
a7:f3:e4:07:7b:1a:d5:d7:f1:94:f5:d0:93:8e:58:09:0c:95:
73:e9:01:d6:0f:79:22:02:06:d6:0a:85:94:32:31:c3:2d:03:
88:24:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:29 2025 by rpki-client