Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier: un/qdLNdKwts/g7LruwQ2gi4oA7wIbS9darQ9Rkj2M0=
Subject key identifier: BA:FA:94:67:CF:6A:15:A3:84:C9:94:7C:89:CA:67:4B:66:4D:2F:2A
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 01984AE5F6BE23010057715C86E72F88ABF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number: 1296
Signing time: Sun 27 Jul 2025 08:00:41 +0000
Manifest this update: Sun 27 Jul 2025 08:00:41 +0000
Manifest next update: Mon 28 Jul 2025 08:00:41 +0000
Files and hashes: 1: SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa (hash: FllvrAA0IFuRu04U/PVVcunONsM/J0wPDkjc5E97TCo=)
2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: ScufuEEf+1NpbCA+/OduEt4vh8FlMON1dgGoeO5JqxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f6:be:23:01:00:57:71:5c:86:e7:2f:88:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Jul 27 08:00:41 2025 GMT
Not After : Jul 28 08:00:41 2025 GMT
Subject: CN=bafa9467cf6a15a384c9947c89ca674b664d2f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:b8:55:47:c5:8b:43:b2:9d:f1:27:e0:ff:
86:39:bf:24:d2:da:f2:77:eb:86:49:e6:f1:1e:fe:
0d:77:be:ff:67:04:db:b0:74:30:05:1d:88:a1:c7:
bc:67:a6:54:59:bb:bb:fe:c8:94:7f:ae:c5:2e:51:
38:6b:f8:1f:14:b8:ea:97:e2:d9:78:6c:b5:8c:e5:
67:d0:7d:3d:e3:18:64:e3:78:0b:38:d7:91:da:16:
7d:e4:e1:d3:bd:9c:5e:b6:ad:64:17:8e:d9:2a:8a:
a9:df:76:3d:73:e5:14:21:a9:c9:da:d5:cc:22:58:
58:79:d1:fc:a5:d7:a7:28:c4:e0:91:82:82:1e:7d:
c8:42:d7:30:aa:dd:ac:2d:d5:c1:46:2f:39:bc:6d:
ba:06:03:b7:42:42:6d:77:03:36:65:ed:12:22:3e:
b2:7c:c0:27:5d:c9:62:f0:29:34:58:ba:bc:5b:7f:
8d:f8:67:dd:33:09:18:1a:bd:8f:b9:c1:44:7e:a7:
6b:26:21:ad:62:c3:13:ed:1f:82:36:2c:3f:e3:35:
bc:25:d5:ee:c7:36:18:9f:7a:79:35:2d:8a:d6:85:
47:d3:bb:54:9b:4e:87:d3:ca:c1:ab:73:83:49:11:
95:49:18:9d:6d:ba:a7:18:2a:21:ac:73:38:72:05:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FA:94:67:CF:6A:15:A3:84:C9:94:7C:89:CA:67:4B:66:4D:2F:2A
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fd:c6:88:75:a5:0e:af:e4:28:7b:58:34:e2:36:39:16:00:
92:cf:cc:35:9d:dd:81:58:b1:08:2a:2b:5b:f8:00:50:4a:c8:
7f:3d:e8:ec:a1:cf:a5:a1:2b:65:b2:22:75:32:28:31:17:d9:
d3:96:70:e7:0a:90:9c:a2:fc:6f:27:e2:cc:3b:e3:1a:41:65:
da:90:b5:25:c4:da:41:c4:42:d1:dc:5f:30:d6:a9:43:2f:91:
5c:99:ff:84:25:af:85:62:67:59:fc:32:80:0c:5d:cb:4b:89:
f6:62:f5:f4:49:58:fa:f3:db:89:13:ff:71:85:a9:a4:f0:aa:
a4:d2:98:f4:d2:00:a2:1a:da:f3:69:d1:46:58:22:73:02:48:
06:8d:03:b9:58:c3:66:db:78:45:a4:e5:dc:cf:20:7e:d4:c3:
ed:51:c1:4a:da:73:bc:f5:d7:d0:02:fa:36:8a:e4:5b:8d:01:
03:6c:95:39:33:c9:45:a6:01:ee:37:4c:9f:45:f7:97:b5:a8:
44:7b:70:b4:aa:cd:18:67:f7:59:d3:46:87:41:9d:f7:c4:e0:
4d:6d:f0:b4:06:5f:36:6f:44:44:00:3c:90:f3:fd:b4:be:a6:
3f:bd:ca:dc:f8:d4:a8:e5:4d:ce:3f:79:a6:8c:3c:07:2f:5e:
f7:23:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:06 2025 by rpki-client