Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: HjcAzyBctoiIpSD9HED8wKlfvD3Vs3bQ84yp071Vlxg=
Subject key identifier: A3:9C:ED:37:EA:1C:27:2C:79:34:4E:CD:68:94:A9:76:F4:88:EF:26
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 01984AE6011CFD91FC7148D8FD66E0FD6859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0B07
Signing time: Sun 27 Jul 2025 08:00:44 +0000
Manifest this update: Sun 27 Jul 2025 08:00:44 +0000
Manifest next update: Mon 28 Jul 2025 08:00:44 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: BPhj69PmX1tqY0qYNRwsY9x1F3HbmoGx+iL8tUdEIXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:01:1c:fd:91:fc:71:48:d8:fd:66:e0:fd:68:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Jul 27 08:00:44 2025 GMT
Not After : Jul 28 08:00:44 2025 GMT
Subject: CN=a39ced37ea1c272c79344ecd6894a976f488ef26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:da:db:17:5e:78:86:5a:92:93:e8:3a:ae:
c6:89:89:f5:df:de:74:b4:91:4a:d3:c1:a5:8a:94:
58:f4:95:10:77:9e:4a:70:c1:9d:7a:bf:a9:e3:51:
e9:35:5c:72:be:aa:2c:09:cf:df:04:5e:cd:c9:0a:
23:a7:54:30:cc:aa:2e:01:b9:fe:ae:8d:e1:08:e4:
13:75:49:29:53:cf:d6:d8:6f:43:e4:58:b5:de:31:
8b:bd:ef:7f:e2:bd:fb:b2:0d:bb:bf:ad:aa:6f:b4:
7a:94:29:a3:b3:18:d0:09:2c:ce:d6:76:d3:c6:3e:
cd:c6:f8:a1:23:ed:cb:8c:4c:39:44:04:80:24:ce:
62:de:76:38:74:13:08:3b:17:e6:38:75:66:dc:5f:
22:ac:a0:73:a2:01:d7:10:82:dd:24:36:16:e1:20:
eb:fe:90:31:e1:b3:4a:df:76:74:f4:ae:ca:1a:55:
e5:47:58:3d:93:2c:50:b3:73:e2:94:8e:5a:22:e2:
ed:13:6a:32:e7:64:69:0f:0c:91:c4:b1:b0:fe:7c:
17:cd:17:85:d6:c3:c4:1a:d6:0f:32:dd:98:d1:09:
53:2f:8e:8b:a4:d8:a7:f4:9a:90:62:04:ba:3f:0b:
aa:4b:bf:88:5e:da:2d:4d:2a:72:15:b1:bd:12:23:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9C:ED:37:EA:1C:27:2C:79:34:4E:CD:68:94:A9:76:F4:88:EF:26
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6a:a3:d6:bf:9c:e1:39:0a:e9:3e:8c:e3:45:45:c1:4e:41:
d9:92:6a:3e:e8:dd:53:ad:0d:9b:a6:c3:55:84:a6:1c:86:12:
77:11:1a:8e:d8:cd:02:aa:88:62:f4:82:fd:b8:cf:22:ca:8b:
32:cd:93:3f:0b:f9:a3:fb:fd:d2:66:a5:07:02:f6:38:25:fd:
6f:e3:23:38:96:64:7c:1c:20:03:17:a9:20:e3:ac:76:de:9e:
21:4e:e3:ab:2c:47:d5:7b:41:38:b4:40:7d:96:98:3f:bd:a9:
12:f3:fe:16:37:48:3d:66:6a:12:55:22:ed:b9:31:9d:55:39:
fd:19:ff:95:b8:82:ad:f6:cf:95:65:2f:a5:58:ac:5e:0e:55:
42:80:b1:15:3a:38:91:3b:d5:7e:0f:3d:e4:61:32:b0:83:71:
4a:af:b9:05:e7:e1:43:23:80:0f:e9:1a:f6:3d:54:da:bd:c8:
e3:65:0a:be:75:5f:94:4d:0e:19:ed:1b:8a:23:5a:67:8a:19:
05:73:b1:26:4e:d6:d3:a1:c3:5b:a8:3d:4c:50:34:9e:c2:5c:
d2:67:65:2a:41:3a:68:67:73:68:e7:d8:4f:a5:08:16:97:a5:
dc:7e:70:43:46:dc:a6:83:7e:43:0c:6e:4a:61:63:71:07:52:
fc:ba:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:42 2025 by rpki-client