Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: oa0VWlPpjBvkKy2Y9j4qAlbz1aFudUSwT01txlFIruU=
Subject key identifier: B5:DD:BC:3C:1A:60:89:CF:4C:12:BF:45:F7:AA:B4:AC:CA:B5:A4:A4
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 019849D30F0F18744597DEA891CA81C653DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0BFA
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: 6xISa5/7F9s/GX3F3vQM3ePmnBe1u5FqB5Jjo5htY/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0f:0f:18:74:45:97:de:a8:91:ca:81:c6:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=b5ddbc3c1a6089cf4c12bf45f7aab4accab5a4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:db:be:99:c0:d4:b8:cf:5b:5e:69:ce:7b:
ab:6f:87:04:53:8a:3f:5e:8c:82:db:09:3c:40:7e:
4b:11:c8:10:8e:4f:34:d0:4f:66:62:52:62:08:9b:
30:f3:04:57:81:3f:ef:e3:81:b5:e8:87:2d:16:29:
77:f9:ca:7b:49:bd:76:f9:30:bb:1b:bc:d3:8d:4d:
a7:8c:fa:6e:cd:52:00:42:27:79:38:41:ec:52:71:
de:ce:1e:ff:20:3b:7d:10:3f:d2:27:2e:bb:19:84:
10:90:d4:fa:00:ce:c4:10:e2:2a:76:21:43:f6:2e:
10:75:39:d1:9e:f9:bb:57:e4:c3:e9:29:83:52:35:
4c:87:00:90:64:ec:49:bc:63:27:91:ca:a2:2e:22:
39:9f:5c:3b:27:dc:9f:e4:e3:fb:49:34:1c:c4:99:
dc:0e:a2:78:dd:3a:6c:18:f4:9c:56:cc:cb:98:2b:
b3:52:81:9e:9e:99:09:37:34:18:02:0c:89:7e:34:
e1:2a:75:e6:a3:4d:d5:57:cf:10:da:f0:c2:70:66:
ba:34:33:f5:1d:a9:66:00:d4:f7:be:4e:b7:92:d3:
61:bb:fc:89:a7:55:31:a6:e9:b4:30:a0:6e:02:2d:
0f:48:69:4e:b3:e7:bc:d8:15:49:cd:bd:80:90:0d:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:BC:3C:1A:60:89:CF:4C:12:BF:45:F7:AA:B4:AC:CA:B5:A4:A4
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:ea:c5:57:72:ea:b9:5d:7a:c9:bd:f8:95:4e:66:85:13:
72:2e:9d:5e:3b:42:57:7f:4f:b4:d5:33:1b:7e:5c:38:e9:3e:
93:c1:9f:f7:75:24:84:38:3c:47:ff:79:18:69:c7:74:d1:f7:
61:72:cb:23:c2:ae:2b:9b:7d:79:ba:86:b5:b9:d6:89:96:7d:
2f:79:67:cf:7d:ff:a1:d8:b7:14:b6:79:1d:c3:3a:0b:9a:58:
92:3d:b9:48:66:a1:62:81:b6:18:45:c9:cd:d6:31:b2:ce:07:
bd:99:cd:9a:0c:aa:47:d3:de:ee:3e:91:a4:44:00:f3:b7:ce:
a2:a2:e4:e7:f5:b0:68:4a:3d:76:5d:0b:c6:dd:a6:8a:8a:f9:
6e:b2:1b:79:1e:82:1a:69:87:b1:b0:7b:11:b2:59:93:b6:00:
fb:1b:a6:01:2c:a0:51:88:ce:2a:55:99:ae:4b:71:93:09:48:
d4:d0:25:c3:26:ce:a3:90:fa:0e:bd:5e:98:cb:54:d3:b3:48:
a3:32:bb:6f:1a:f2:06:2b:0a:f2:c4:3c:1b:13:46:6e:e3:19:
b7:0f:e9:e4:24:35:e2:ae:b5:09:cf:47:0a:cf:40:dc:fc:7a:
04:05:3b:b3:af:24:86:52:7c:da:2f:e1:bb:49:fd:42:38:f0:
31:50:41:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:55 2025 by rpki-client