Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: stOLmsMJwV/7nutGRFI6iqNk7898ftq38q/9d1SrK+U=
Subject key identifier: 64:48:B4:B8:FA:95:47:B8:8D:FA:28:C2:15:B0:56:56:54:30:41:92
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 019848C0386EC88742ABBAC7FB4709303D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:13 +0000
Manifest this update: Sat 26 Jul 2025 22:00:13 +0000
Manifest next update: Sun 27 Jul 2025 22:00:13 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: pMbUtosqHOuvKHExLVYYYFGM568kCve5xUYGBFdlCks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:38:6e:c8:87:42:ab:ba:c7:fb:47:09:30:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Jul 26 22:00:13 2025 GMT
Not After : Jul 27 22:00:13 2025 GMT
Subject: CN=6448b4b8fa9547b88dfa28c215b0565654304192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:5d:86:ff:8d:c8:02:8a:9b:7b:a4:77:d8:
39:c8:15:c6:1a:bc:23:7e:8a:33:a9:10:ad:e4:a0:
60:fa:ae:f9:ea:80:8b:55:77:3f:79:4e:e2:23:93:
5c:97:51:af:40:0c:8e:ca:60:69:33:c1:5e:d9:0d:
41:d9:f8:9d:40:51:98:d8:3d:97:99:db:f2:e4:aa:
d3:05:61:8f:f5:69:f8:1b:31:a4:78:92:bd:70:29:
d7:c1:dd:12:4e:81:54:be:4b:7a:5c:a1:55:09:d9:
63:f7:36:e0:4b:6f:b3:b0:c5:be:65:bc:aa:43:9f:
6f:e9:26:9c:8d:fd:72:3e:df:b5:92:0d:b7:bb:d7:
24:d8:59:e9:28:77:11:71:a2:7e:4a:ee:6e:ba:7a:
4d:d8:6c:ee:f6:f0:06:5d:a6:8e:4f:08:48:5d:ce:
42:31:b0:77:7e:9f:55:e4:f3:d9:b9:1f:b8:d6:9a:
18:da:9e:f4:17:4c:0b:0b:dc:c9:b8:88:bd:42:c9:
6d:cd:1d:0c:53:83:f5:75:ba:f4:b5:b9:f4:4c:77:
e8:95:9b:cb:07:9c:9e:4b:87:c7:e2:bb:c7:ca:e5:
b3:0a:44:91:11:b3:c0:5c:7b:cf:7b:55:57:4f:3e:
e9:49:c0:11:8a:28:b8:e5:a2:89:24:15:e1:29:0f:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:B4:B8:FA:95:47:B8:8D:FA:28:C2:15:B0:56:56:54:30:41:92
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:28:3a:f4:c0:49:74:00:6c:89:7b:bf:0a:27:ab:fb:96:fb:
f1:9a:ca:65:ff:e3:a2:f3:8b:68:b1:d4:04:af:59:eb:1c:92:
03:95:4a:91:82:c2:e1:ae:ac:3b:3a:91:1d:81:e9:cf:32:11:
51:b9:1e:0b:4c:2d:64:eb:cb:8e:f8:8d:9e:7a:ae:b0:34:67:
6b:f5:58:ec:3c:b3:a4:9d:7e:4f:4a:c3:13:b9:c5:fb:b1:4e:
13:f2:e1:ef:64:ad:47:54:39:59:28:de:10:1f:d5:de:a3:86:
62:f6:67:e1:80:71:22:71:99:d7:ae:44:71:43:2b:44:88:4c:
04:83:e1:c9:bf:3c:31:58:16:95:2d:62:29:d9:9f:e0:f1:52:
12:fa:a6:11:77:55:0e:25:95:41:c7:62:05:d2:dd:7a:d6:99:
b4:49:d7:6c:ab:2b:7e:2d:98:b8:c9:21:07:fe:0d:71:6e:37:
2f:13:63:96:a4:6d:35:58:1d:a3:e6:71:46:2a:b9:5d:61:50:
fa:4d:66:8e:6f:e4:dc:9b:76:76:3e:af:0a:9c:28:da:bd:4e:
b6:ee:6a:a6:16:80:1e:0b:2a:ab:e2:54:0b:6b:0d:73:9e:71:
8d:4d:05:fe:c3:6d:31:e7:df:ba:63:43:9c:84:7f:f6:ba:8f:
e8:96:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:04:38 2025 by rpki-client