Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: K7RLsX0l5+R4Y/3luMRU7A2TfvReOgMbylj24EScEMA=
Subject key identifier: 05:67:C0:10:00:2C:12:03:B3:8B:86:C0:D1:77:5C:82:1A:76:6C:E8
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 0198D583AE72C1B1B9A726A8E4C5FC90C0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 1331
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: HC3G9ANpGXNZ9yNKM/XtIL6Ue+LaQGjB+uI+5bqN89o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ae:72:c1:b1:b9:a7:26:a8:e4:c5:fc:90:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=0567c010002c1203b38b86c0d1775c821a766ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:31:b5:0e:d3:e5:2d:47:c5:92:a0:a0:ad:
ce:90:ed:70:63:2a:d1:84:d6:cf:ea:78:0f:f0:83:
07:42:37:4a:b5:d8:24:83:f6:5d:aa:36:d0:79:56:
7a:ba:2a:de:b4:61:47:cb:c0:73:da:06:f9:57:60:
00:65:13:e8:e5:d2:c0:f0:6d:08:21:4c:97:b3:40:
50:63:7b:bd:fb:46:f8:5a:f8:67:31:8c:8d:a0:1e:
c9:b5:e1:05:2f:b4:24:3f:cc:4e:c1:ad:24:88:e5:
d2:77:0c:36:a2:48:ca:44:44:33:12:c4:fc:30:d1:
a5:45:74:d9:6f:03:5b:ab:79:b9:63:ce:d2:08:52:
33:08:00:38:3d:d6:b3:19:35:d8:91:15:55:c8:79:
e3:30:d0:0f:a4:88:11:c6:5a:08:27:36:75:23:c3:
ca:31:7b:e4:60:45:25:10:0e:2c:86:9e:9b:9f:0b:
0a:b1:c8:a9:d1:ad:bc:a5:4e:4f:3d:ec:f8:d1:01:
60:a2:85:b3:db:a2:d5:14:cd:e4:78:3f:1c:93:40:
36:55:27:a3:f3:68:4b:55:a8:dd:44:61:6f:8a:53:
ab:87:46:b3:7c:64:49:18:71:60:b5:a1:10:be:60:
03:61:46:63:b5:c9:84:c1:5d:7d:90:9b:27:c8:a9:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:C0:10:00:2C:12:03:B3:8B:86:C0:D1:77:5C:82:1A:76:6C:E8
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6b:f8:77:b8:a4:76:eb:e5:bb:5d:28:3b:34:00:1a:46:52:
21:2e:d8:39:2c:52:ff:03:20:95:f7:d9:60:5b:ed:9f:09:f2:
16:f6:46:83:00:4e:3f:ca:76:29:7e:ec:36:40:fd:e8:ec:92:
bc:7e:b4:34:1f:5d:ab:53:ea:6f:ae:a5:ec:8b:51:32:85:aa:
53:46:47:7d:fc:19:49:34:9e:9d:a9:27:9c:5f:5c:2b:e8:02:
1b:c8:6f:01:d1:61:02:65:34:d0:c9:33:10:e7:6c:f8:1e:50:
1e:2c:06:df:e0:0f:77:18:b4:dc:09:f0:83:7a:63:cd:ba:0b:
de:67:cd:9f:9c:da:fb:2f:ac:64:de:42:85:83:8e:03:50:57:
cf:9f:48:f3:2f:be:de:40:18:28:04:72:7d:7c:2f:82:81:c1:
f2:33:9f:32:3f:e6:ff:d6:50:88:42:e0:26:3e:5d:7d:be:24:
af:da:6e:d2:aa:b6:f3:cb:f2:08:c7:6b:46:60:17:55:5f:87:
50:5e:b5:a0:d6:25:ab:ae:bd:7a:9c:e7:13:55:0f:82:ea:78:
09:c8:31:9f:32:a6:93:a0:ea:e3:11:53:f1:00:71:47:03:24:
4e:cf:1d:03:5b:eb:62:70:22:9a:89:6f:2b:36:1e:b0:04:ad:
a7:2c:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:49 2025 by rpki-client