Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: jZ0v5R535WgNavLlP3RXaZL22dfIULusHE/R2t699dA=
Subject key identifier: 06:AE:F6:CC:97:00:13:D2:05:F2:B7:5C:0F:32:C0:81:B4:C7:83:AA
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019846D2719FAAE6423AAC0C1C965524EA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0E6D
Signing time: Sat 26 Jul 2025 13:00:53 +0000
Manifest this update: Sat 26 Jul 2025 13:00:53 +0000
Manifest next update: Sun 27 Jul 2025 13:00:53 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: GpCHZocVerTPbKgmJog6944BbCafvgC9AjwdzIlvjSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:71:9f:aa:e6:42:3a:ac:0c:1c:96:55:24:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jul 26 13:00:53 2025 GMT
Not After : Jul 27 13:00:53 2025 GMT
Subject: CN=06aef6cc970013d205f2b75c0f32c081b4c783aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:f5:95:a8:b1:4a:97:5e:fe:79:23:4c:d6:
8c:ab:5c:1c:92:4d:ea:7c:b4:bc:ad:3d:e4:16:0e:
d4:a8:c9:c5:b0:b8:a5:a3:2e:fd:c7:14:71:e6:bf:
15:42:26:79:19:96:0d:a7:32:a3:f3:a4:1d:da:fa:
2d:ac:f8:3a:c7:26:46:9a:02:40:c9:63:af:c2:0d:
65:52:04:c6:5a:62:3b:d4:63:92:32:3a:07:2e:21:
84:6d:6a:7c:66:2d:bd:0d:7d:f2:76:19:67:16:e0:
16:4a:f8:df:d6:a9:71:30:e8:2e:d8:5b:bf:1c:32:
cc:10:2c:7b:1d:47:de:a4:f1:26:cc:49:f8:13:76:
3c:4f:ea:01:46:20:69:d7:1c:70:56:f2:51:c4:a3:
2a:ca:8b:7a:6f:bd:e2:3f:73:36:c6:20:56:e3:e3:
c9:cd:a0:f4:06:ec:32:16:52:97:42:6e:75:be:aa:
d8:f7:7b:2b:af:6a:1e:8e:fb:73:a6:65:ea:47:b2:
bc:cf:26:ff:ce:88:99:9d:94:cf:36:01:ad:17:f9:
3e:d2:25:16:ca:bb:15:fd:76:95:b4:79:91:d3:84:
da:60:15:4c:c9:cf:b2:3c:c1:a1:63:0b:0e:62:ae:
f4:10:0c:40:7c:cb:22:a1:b8:9d:b3:63:43:64:0a:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:F6:CC:97:00:13:D2:05:F2:B7:5C:0F:32:C0:81:B4:C7:83:AA
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e8:30:20:cb:67:38:61:26:ee:d6:7e:5f:af:0f:ad:6e:99:
00:c7:91:07:5c:f8:eb:46:71:d5:f5:5d:7c:76:35:83:d9:34:
1e:86:02:fd:24:5d:b6:c9:68:7d:3e:7e:d4:af:f0:a4:e3:4c:
94:01:4b:06:08:40:9d:d3:00:62:88:27:34:85:41:e9:09:ad:
24:06:c9:b3:da:cc:b3:af:9f:92:a8:cd:85:42:a7:32:3b:a5:
4a:bd:27:ab:c7:d4:fe:5c:5a:9a:fa:b9:df:a3:53:42:08:7b:
b0:f2:34:d2:b9:a3:1b:69:9e:49:cc:31:88:9b:73:02:18:09:
06:6c:40:a0:e2:f0:9e:3f:79:48:0b:83:59:cc:61:b0:18:23:
f1:a7:63:c6:b7:1e:ba:d1:e4:4a:bc:7a:96:f4:d7:ca:40:fe:
a8:22:a7:42:8b:d4:cd:67:c5:4b:b2:0e:0a:8f:8e:88:8e:f1:
88:9c:71:38:5b:2a:62:84:15:f3:0c:91:33:20:ab:03:b1:3d:
39:42:6c:de:6b:3a:03:2e:a1:30:12:79:f7:2b:b7:2d:fc:54:
85:1c:9b:30:0b:dd:fd:dc:c8:f8:46:fb:cc:18:43:7b:d7:28:
dc:5b:dc:48:ec:32:7c:e0:81:3d:36:64:f0:09:d8:97:d4:10:
24:1a:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:58:21 2025 by rpki-client