Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: 0i8FHR0Jw8THmcA4xEp3TGSgoZ+4FnWhvVKI6nPkJ5Q=
Subject key identifier: E9:C0:32:15:D7:AF:85:C2:6D:73:22:B9:37:74:60:28:CD:62:6E:8B
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 0198529F6E8410FD6F11AB6E39F63638B82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 1299
Signing time: Mon 28 Jul 2025 20:00:36 +0000
Manifest this update: Mon 28 Jul 2025 20:00:36 +0000
Manifest next update: Tue 29 Jul 2025 20:00:36 +0000
Files and hashes: 1: J64w76zXIm6hBV_NCpHfs00xQ5M.roa (hash: tW24A+133JMJcQQWR3X2EMPjynjBMoPzLLODpQzP0s0=)
2: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: YbwdTMp734wBt3IBULs/VDAqqTLfY0xJCIjD403Os+0=)
3: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (hash: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:6e:84:10:fd:6f:11:ab:6e:39:f6:36:38:b8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jul 28 20:00:36 2025 GMT
Not After : Jul 29 20:00:36 2025 GMT
Subject: CN=e9c03215d7af85c26d7322b937746028cd626e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:95:6d:04:71:b3:f2:2c:9a:62:32:04:0f:
42:08:5d:6c:7c:09:19:c9:3c:30:e2:fc:28:9f:00:
99:eb:7b:cc:26:bb:57:15:87:05:dc:f6:b5:c7:9d:
a2:fe:1c:24:0c:28:6f:7b:fc:c7:8c:f9:75:c7:eb:
df:89:00:0f:3e:64:37:c3:ec:67:3a:aa:c6:6f:e6:
8a:ed:d0:57:86:ea:06:74:49:b5:60:56:4f:71:17:
c2:9c:09:da:36:a2:a0:ba:62:f7:44:ba:4d:4e:ae:
c3:e8:65:5f:8f:6e:53:67:a9:ed:e5:78:c3:22:94:
b7:67:04:69:5e:0e:33:0d:b3:a1:12:21:29:d9:ce:
04:9d:b2:53:4e:3d:68:07:26:06:6a:66:40:26:44:
53:59:5a:86:0c:0c:76:65:18:9d:d0:da:41:2e:09:
2e:bc:74:1e:c3:94:cd:87:2e:f6:de:37:c0:1b:85:
b8:cf:15:dd:b8:83:c3:4b:92:d9:e4:d3:f7:78:de:
05:5d:57:b2:a0:9f:6c:95:f8:28:9c:47:ff:ef:e6:
b7:2d:99:3c:dd:9f:82:15:f9:2d:be:e4:d9:f8:eb:
ca:7f:dd:64:e3:7e:33:a6:86:7f:f8:e1:2d:fd:b9:
3d:c7:34:fb:00:3c:3d:db:b5:11:fe:d0:06:c5:3a:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:32:15:D7:AF:85:C2:6D:73:22:B9:37:74:60:28:CD:62:6E:8B
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:53:b6:5b:c5:b0:3f:f8:e6:bb:75:36:d4:49:c2:98:19:dc:
85:24:22:1c:d6:fd:54:ed:29:6a:69:a8:2b:36:91:74:be:34:
2e:ec:a8:68:0e:cd:48:d9:cd:45:0c:e1:3b:88:7c:0c:5a:d2:
c3:44:91:ab:9d:02:0b:13:6e:4b:51:91:20:71:97:3f:03:68:
2c:89:f2:d5:8e:28:7e:66:ce:32:51:4e:30:a7:a2:9a:e1:5e:
a9:3b:e8:c8:f4:ac:c0:96:fd:bc:e8:94:d8:ab:7a:c5:b2:dd:
36:a9:b7:c1:e1:22:d8:a4:99:20:11:8c:cb:e5:34:f0:26:e7:
d7:a7:1a:a1:ba:06:15:fc:bd:f6:d6:bd:ee:05:1e:4a:9e:c5:
89:8a:c6:6d:8c:da:d5:f8:0d:fa:36:2d:2e:8c:e9:84:d9:84:
ce:09:a4:23:4e:9b:0c:ea:b9:1b:2d:a2:34:bf:38:7a:15:ab:
12:df:cb:5c:b2:3e:4f:3e:fd:f9:2c:d2:4d:56:4b:f2:31:79:
c3:8b:38:dd:ea:48:d4:5a:1d:e8:08:f5:c0:26:05:b3:e9:b3:
c2:0c:9f:a8:ee:ec:4a:a5:7e:42:9f:e0:cf:96:ec:b3:10:1f:
a2:d9:cf:51:73:55:2f:ce:27:6b:06:9c:87:bd:4a:ae:69:6c:
17:ff:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:55 2025 by rpki-client