Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: KYoQ/oeyyAiZwUVLBAgwUXh9Pt9bg8tFP50OM0NBt7c=
Subject key identifier: 0C:56:AA:B3:2B:54:8D:72:1D:99:32:90:FE:98:D5:65:3E:37:53:37
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019848C0E73B13CF30F8C95F57F56C222BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:58 +0000
Manifest this update: Sat 26 Jul 2025 22:00:58 +0000
Manifest next update: Sun 27 Jul 2025 22:00:58 +0000
Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: osdFQ1rtnhnCV8bXgEmlV2PJTUdYR+zAyN3zDNyQiw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:e7:3b:13:cf:30:f8:c9:5f:57:f5:6c:22:2b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jul 26 22:00:58 2025 GMT
Not After : Jul 27 22:00:58 2025 GMT
Subject: CN=0c56aab32b548d721d993290fe98d5653e375337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:bc:16:1c:6c:9c:42:72:a4:d5:68:bc:07:
12:7b:01:57:0f:93:71:f9:e9:c7:d0:41:c8:6c:c9:
f2:1c:04:fc:f4:49:f0:db:16:7d:b6:c7:f0:06:fc:
9c:27:3f:6f:3e:5a:75:5e:e7:81:5a:dd:72:a1:7b:
de:cf:2b:0d:48:43:5b:46:5b:19:cc:f9:16:4c:8b:
10:64:a0:bd:a5:5c:01:bc:3c:0b:2a:ca:2c:2f:19:
c1:ee:05:5b:b6:b5:b4:51:4e:f3:39:72:bf:38:41:
4d:12:b2:01:2f:8c:60:80:28:f0:57:ec:9f:6c:56:
74:a3:a3:b7:61:e2:85:4c:6d:80:bd:55:44:62:8c:
c0:af:aa:9b:0d:ab:e7:cf:d3:13:fb:72:c7:a3:46:
6b:3c:a3:91:41:ce:e7:92:db:69:e6:2a:e2:c2:d3:
c8:5d:c8:22:c6:cd:41:48:c4:bb:40:d8:46:8e:4b:
e5:91:de:ce:02:f6:b1:90:41:f2:26:ad:4a:f8:90:
c4:d3:ef:40:8d:80:8d:c9:be:f4:9d:bf:50:47:57:
1b:18:4e:37:94:c8:cb:aa:c2:6a:a2:6e:4c:17:49:
9e:62:38:db:da:85:09:72:f6:d2:85:19:05:bb:57:
53:61:55:23:b9:34:59:c3:48:85:0f:95:9b:dc:43:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:56:AA:B3:2B:54:8D:72:1D:99:32:90:FE:98:D5:65:3E:37:53:37
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ac:a8:b7:33:56:ba:a3:22:b2:83:1c:76:ae:81:46:8a:96:
df:90:cc:02:98:b0:fb:87:57:65:c7:02:b8:24:c1:fe:2e:47:
a0:29:8b:61:f2:84:7a:8f:0a:c6:65:f6:af:fd:96:29:5b:85:
07:55:fa:39:18:49:06:f6:3b:99:66:57:27:6b:c8:b7:d4:3f:
f9:c7:91:6b:7c:d5:cd:88:9c:a5:6f:1c:36:9a:88:28:b9:95:
ed:f2:4e:70:99:c9:14:fe:29:fa:e3:e2:53:a9:71:6a:5e:b1:
8a:e2:c0:da:0a:47:f1:57:65:ef:55:a5:80:05:e7:c9:00:bd:
e4:d4:4d:98:f4:df:6e:9c:24:22:1e:7a:a4:08:00:9a:3b:f5:
17:30:ef:f2:4b:e1:25:9b:ac:06:74:69:db:72:f3:99:31:fe:
25:f7:dc:59:eb:65:f2:90:93:05:5c:aa:dd:44:96:99:fe:20:
48:79:22:de:31:ee:7b:c6:0d:89:1b:f5:a5:02:38:74:d8:5f:
d8:6a:14:42:d2:e7:d5:95:f6:4d:cd:17:5a:5f:25:16:f9:52:
2c:65:a5:8d:22:28:cf:f8:46:08:48:37:e0:bc:2d:01:da:d6:
cc:65:65:ab:73:a5:9a:76:79:d9:81:77:61:ea:8d:17:7e:95:
e9:ea:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:29:43 2025 by rpki-client