Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json)
Hash identifier: Sureklz93XjBRfYPzssQyW/eGUI2/zj6L+qzvd/LdF8=
Subject key identifier: 4E:54:22:56:89:9B:82:E2:D7:B6:04:91:DD:AF:48:A5:E3:01:6E:73
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 019846D1BDE7EF5D93B58A2E1CEA391E879E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
Manifest number: 1070
Signing time: Sat 26 Jul 2025 13:00:07 +0000
Manifest this update: Sat 26 Jul 2025 13:00:07 +0000
Manifest next update: Sun 27 Jul 2025 13:00:07 +0000
Files and hashes: 1: kNwo0JsX3ICm84nVo9dsXQUG9kE.roa (hash: NK1ts8W0/zMpiUmbhnMjlz816+vYjFkNttYVHl02NWQ=)
2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: ENSW9hyuDndmphO3V92wpxLkhjKNh23oiqNcaE+49jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:bd:e7:ef:5d:93:b5:8a:2e:1c:ea:39:1e:87:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Jul 26 13:00:07 2025 GMT
Not After : Jul 27 13:00:07 2025 GMT
Subject: CN=4e542256899b82e2d7b60491ddaf48a5e3016e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:42:77:69:b1:97:96:4b:d9:48:0c:ca:08:
71:f5:b0:d9:7d:c0:cb:b1:d6:c7:9c:09:05:c5:56:
ef:dd:ea:3c:a9:ae:37:e4:dc:c4:fd:7e:d0:d2:e3:
e4:5f:0f:17:91:7e:70:87:65:e0:dc:ca:67:23:7d:
bc:ea:aa:94:82:fa:25:c7:93:f8:f0:fb:a5:5b:9f:
e4:5c:48:15:aa:de:83:9c:c8:81:27:62:d5:bb:88:
31:a1:43:c3:16:a0:ef:79:2c:f4:78:60:32:1e:35:
2f:7e:d8:fa:6a:c3:93:2f:e4:f5:2e:23:29:ff:3b:
22:38:02:3d:6a:db:22:b0:0d:5f:30:3a:29:9e:84:
98:ad:e1:03:5d:78:01:be:0f:5d:ba:92:60:62:14:
0f:12:a1:44:ac:66:e2:03:d7:b2:3f:25:92:05:bd:
b5:66:10:62:b5:0c:21:49:fd:c7:c7:da:f0:66:50:
e3:26:24:87:b3:6d:d6:8e:4a:68:45:4f:0e:09:0f:
41:50:9b:4d:60:89:fd:9f:6a:df:60:ad:3c:bd:02:
86:5f:6a:56:45:b5:fc:91:31:17:8b:7c:4d:91:82:
9f:88:6a:70:0e:4d:b7:c3:25:8f:f7:93:ea:16:96:
58:1e:19:4a:ab:c1:f3:1d:8c:5f:13:09:7f:2f:35:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:22:56:89:9B:82:E2:D7:B6:04:91:DD:AF:48:A5:E3:01:6E:73
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e1:17:86:4c:20:40:89:e4:a0:26:24:8b:47:1c:92:a9:2c:
f2:48:a0:7e:fc:9a:e8:84:91:a0:dc:34:f9:02:03:9e:10:25:
bb:6b:a6:32:0f:91:75:cc:7a:9e:f2:70:f0:fd:ba:75:9f:2e:
0d:0f:c0:e3:e7:d5:be:fb:23:e9:24:ba:74:a7:f1:a8:3a:c6:
90:72:e6:5d:0c:32:1d:92:e3:3b:19:9c:c7:97:aa:b7:22:34:
43:bc:49:3b:93:12:bc:52:ea:8a:7b:16:33:d6:17:ca:89:58:
cb:23:a8:bb:3b:34:29:cb:f3:cf:c0:71:82:0d:3b:7e:29:24:
98:d7:e9:e5:53:be:c2:99:b5:a3:fb:c5:46:e7:34:2e:3e:af:
f9:3f:15:f3:6d:bb:0d:90:4d:8a:4a:c2:c6:e0:0f:38:ec:98:
35:70:c4:39:ac:30:83:55:45:f8:7b:06:7b:ec:a5:a1:34:33:
e2:d3:45:5c:3a:20:ff:57:80:2e:2f:49:77:90:82:8d:26:97:
8c:41:2f:bc:5e:cc:ab:51:26:18:70:63:f4:b8:40:d9:c2:e7:
a1:c2:9c:bb:29:43:99:e9:e2:88:d5:ff:33:78:7c:d1:67:5b:
87:b4:9f:c6:20:e5:7a:90:04:70:1d:c6:7f:ca:dc:bb:63:9a:
81:e4:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:40:28 2025 by rpki-client