Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: tLzME+yXMM93MXOLlmeTHmULmwpJYLlfswYBPlSIiiE=
Subject key identifier: FD:68:6F:B9:3D:4F:F2:78:6E:10:BC:36:19:AF:95:E0:BC:A0:06:2F
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 019847E4DFE070C53C1F23F2D6288836C4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 18:00:38 +0000
Manifest this update: Sat 26 Jul 2025 18:00:38 +0000
Manifest next update: Sun 27 Jul 2025 18:00:38 +0000
Files and hashes: 1: __KLjvjgMO1LuKrx6zZXZJBcRtk.roa (hash: kZSjdOtgx956Q9WcOxsnl5QBMbkPJAPdg2gED1ZbQy4=)
2: xmOvbRNpbfTNvGRi0NGmoChwF8k.roa (hash: 7oU4y3FJaTZ6zlZMUwxbLqzJR9lqEVzJSwfHVW5xI4s=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: DJK0RnAht5Yr5UPXO+HCB6sAXgZ0VkiEtzgc+vng3m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:df:e0:70:c5:3c:1f:23:f2:d6:28:88:36:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Jul 26 18:00:38 2025 GMT
Not After : Jul 27 18:00:38 2025 GMT
Subject: CN=fd686fb93d4ff2786e10bc3619af95e0bca0062f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:81:24:9d:1e:a3:e8:7e:fa:2e:08:77:b3:95:
35:63:82:f7:23:5f:77:06:67:cf:87:23:11:8d:a1:
7d:46:93:69:ef:b6:92:ea:cb:c8:5a:cf:da:a0:4a:
fa:d7:6a:72:04:98:b3:de:9a:f4:c6:55:6f:b3:e2:
44:ed:21:c8:1f:ca:2e:e6:55:09:17:fe:87:a6:bc:
8f:67:12:95:3b:95:0d:99:a0:3c:e2:7b:7e:d1:49:
19:b7:cf:5e:fe:4a:51:17:4c:8a:91:7a:b3:d8:32:
3f:e3:ad:c8:ea:e0:d1:0e:ee:1f:ff:6f:0f:02:46:
91:d6:85:2f:34:ae:d8:91:4a:f9:87:61:34:8f:d8:
97:c8:f7:2b:9d:cf:4f:3b:66:5f:38:e3:2c:cd:41:
ff:40:33:4d:60:21:4f:62:52:1c:64:0d:48:2b:9c:
dd:e8:b4:68:cc:32:db:f4:d2:ff:49:08:a7:d9:ba:
80:f7:7a:42:93:b2:e0:2c:6d:1f:06:06:99:9f:f9:
af:32:09:df:29:65:84:43:6a:0e:08:c5:dd:86:23:
a7:7c:db:61:f2:18:32:94:df:61:f3:2b:9b:57:a0:
bd:40:13:6c:fb:e1:c9:90:d4:5c:25:ba:34:a4:7f:
0c:f5:0e:73:70:4b:e6:c8:1f:d7:6d:ea:a9:d5:54:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:68:6F:B9:3D:4F:F2:78:6E:10:BC:36:19:AF:95:E0:BC:A0:06:2F
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ae:6a:d9:2f:65:f7:03:d5:98:65:9e:14:73:f2:9c:9c:7b:
40:73:f7:80:55:f8:91:65:a8:c9:f7:80:52:ef:4a:8f:47:cc:
0e:0b:9c:b8:16:c9:2d:23:0a:e3:e4:33:10:38:98:e3:68:25:
de:28:65:4d:9a:10:ca:c4:41:f2:38:23:23:c7:80:0f:9c:a1:
e7:38:31:19:9d:12:05:2a:34:6e:bc:27:ec:5a:c5:4e:e7:f1:
e1:21:92:f6:29:f8:32:cc:ae:2d:52:d3:62:d2:b5:18:8c:20:
0d:55:77:6a:27:c6:51:8a:5b:b0:35:5b:c9:50:52:4e:8a:97:
06:00:cf:f3:07:34:19:ae:6b:8d:eb:ec:2c:82:39:8e:67:e1:
68:c4:4a:f7:2f:a2:bd:0a:62:ab:6d:7e:b8:ee:0b:41:78:c7:
90:4f:f9:38:44:fe:f9:a9:4d:13:ae:17:62:2a:64:9c:9c:a5:
f3:d1:57:5a:56:98:83:34:e9:a3:0c:63:de:1a:c6:79:67:3a:
74:6f:71:54:90:7b:99:3a:38:f8:b2:b6:26:cf:54:ab:35:7c:
dc:29:36:6a:eb:53:52:30:27:9f:09:98:4a:83:f6:bb:1d:37:
f2:25:07:59:a2:48:7d:72:36:dd:53:49:fb:d1:71:83:5b:88:
05:3b:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:31:18 2025 by rpki-client