Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: 1XHBjOZEXCTzC6fqB1GLrJ0u+ZFNtfB8PIr3Oihzunw=
Subject key identifier: 71:6F:4E:CC:8D:6D:89:AC:22:ED:B9:6F:21:17:12:FE:3D:16:4E:E0
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 019845F6505E8EFAFE673128A12BFFB8FA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 0DC4
Signing time: Sat 26 Jul 2025 09:00:26 +0000
Manifest this update: Sat 26 Jul 2025 09:00:26 +0000
Manifest next update: Sun 27 Jul 2025 09:00:26 +0000
Files and hashes: 1: Wg-bSrUatmukyH3xDDiSbozsSDE.roa (hash: +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: jFjKKo5e0Gi9HeqpITiOpcg+uh8nu9VUrUpw9bkmX9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:50:5e:8e:fa:fe:67:31:28:a1:2b:ff:b8:fa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Jul 26 09:00:26 2025 GMT
Not After : Jul 27 09:00:26 2025 GMT
Subject: CN=716f4ecc8d6d89ac22edb96f211712fe3d164ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:cb:36:5c:d2:9b:d7:69:b5:a6:98:1b:5c:
cb:bb:d6:d4:83:6b:5a:29:68:9e:47:10:b8:d2:54:
69:80:f8:2b:fc:53:cc:9b:9a:95:f8:e3:2f:24:1a:
ea:10:4a:db:19:0d:3c:b0:9f:b2:fc:0a:61:54:ae:
f0:a1:c8:ff:9f:d3:e0:9b:db:bb:6e:5e:89:bd:ad:
da:9f:af:5a:7f:f1:c0:60:61:35:18:cd:8f:fd:9d:
14:69:5f:c6:e0:50:2a:1c:60:12:21:32:06:c1:d1:
1f:c2:1c:2c:c1:89:20:df:d2:48:95:69:9d:ae:b0:
f1:ec:06:07:41:17:a9:da:f9:0c:ad:3d:0e:4e:0f:
d1:05:b8:d2:a5:b2:da:0f:29:4a:13:0b:d9:fb:5e:
06:0c:ab:3c:91:2d:82:47:5c:91:26:e7:ba:f1:02:
f1:d0:61:89:7b:df:b8:29:0d:99:a1:50:12:90:b7:
b1:7e:e1:c5:b1:4d:06:ff:ac:53:3a:4d:fe:15:31:
f8:80:5e:e8:84:94:1d:04:70:64:84:48:10:3a:dc:
0d:89:02:cc:ba:cf:e2:6b:8d:77:65:44:a7:59:a1:
7f:13:ff:54:42:a0:43:84:77:e3:cc:a9:6e:90:7d:
02:73:a3:aa:06:7f:e6:2c:e9:58:9c:c0:12:67:9b:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:4E:CC:8D:6D:89:AC:22:ED:B9:6F:21:17:12:FE:3D:16:4E:E0
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9e:5a:cc:d3:94:7f:cf:55:8d:ea:13:b2:ed:8a:77:47:0c:
16:b0:69:cf:3e:46:e2:3d:d7:32:2e:01:53:54:9b:99:7d:da:
ee:59:1e:d5:f4:65:11:3b:84:ff:06:3a:13:3c:f4:2b:c8:67:
8c:6b:c3:c6:b6:50:e7:8b:5f:f6:8e:95:67:06:96:f0:49:49:
10:24:5e:01:37:1a:4f:76:49:bd:36:f3:9b:22:ed:9a:fa:7a:
a0:81:4b:78:6a:d7:c2:fa:ec:02:8c:82:82:a6:60:5b:2e:b0:
a7:f9:7e:68:80:b0:03:6b:97:69:1e:e4:db:b8:8f:dc:7b:13:
4f:27:34:12:d7:ff:7e:0c:e9:dc:f8:74:48:86:7b:e6:96:f2:
92:8d:16:ab:c4:d7:5a:20:d2:d2:2b:b9:3a:66:46:c7:7b:23:
51:d7:9c:0c:4d:33:d0:42:4e:06:81:ee:20:74:fe:c7:7d:4b:
4b:48:dd:33:55:6d:12:2e:dd:bc:29:43:67:31:14:05:6c:e4:
6f:92:1b:a3:76:13:7e:24:5b:47:b4:b7:b7:f1:c8:7a:2b:ed:
30:ce:4b:43:aa:f4:de:23:14:a8:ad:ba:99:80:94:26:56:92:
9d:78:09:a9:82:31:98:32:ff:d7:0a:ff:da:98:c5:02:33:c0:
00:8b:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:17 2025 by rpki-client