Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: PWCWdomttEBYgZxzh7avrJHWqZRe4pwbne8QhIRhki0=
Subject key identifier: DB:B2:EC:B8:08:83:28:FB:CF:35:6D:6A:E4:B9:56:9D:06:83:0F:E6
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 01984B545FD8EB86ADD81BB476834A37D038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0B23
Signing time: Sun 27 Jul 2025 10:01:17 +0000
Manifest this update: Sun 27 Jul 2025 10:01:17 +0000
Manifest next update: Mon 28 Jul 2025 10:01:17 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: IGEY9b9kc6qTqi9uXj/+OT2zbVVy9OHuSqVTauuhFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:5f:d8:eb:86:ad:d8:1b:b4:76:83:4a:37:d0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jul 27 10:01:17 2025 GMT
Not After : Jul 28 10:01:17 2025 GMT
Subject: CN=dbb2ecb8088328fbcf356d6ae4b9569d06830fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:df:6c:d3:a8:65:12:08:0f:2e:b5:1c:1a:
9f:2e:ea:10:0f:63:22:78:f1:9a:44:bd:49:3b:49:
99:d1:81:de:68:1d:8b:98:46:95:73:7c:a1:51:1b:
cc:dd:06:e6:b6:d2:f0:22:43:48:0f:26:25:2b:96:
2b:0f:59:bf:5a:a9:ed:fc:d2:19:99:98:d8:6c:0d:
91:e2:6d:05:c0:fd:97:66:09:04:98:5d:db:d3:60:
83:e1:92:da:87:37:64:36:58:6f:6f:93:7c:ba:6a:
f7:ec:b4:89:36:e0:d7:89:67:67:84:32:16:f9:c5:
40:8a:95:98:f6:4f:57:66:df:c8:36:13:c7:d3:0b:
43:94:8c:b3:4f:ca:37:27:ff:5d:0f:b6:87:e3:6c:
2e:bb:56:3a:57:5e:f2:b6:44:80:d3:41:1e:26:16:
61:1f:16:36:cc:ee:58:fb:be:58:d9:45:b7:62:8f:
dc:df:a8:bf:a4:98:be:ab:88:72:19:0a:91:14:06:
6d:74:fc:5a:72:72:88:0f:58:b0:85:37:98:9f:f3:
d1:6f:b5:43:1d:07:5f:94:b3:29:0d:9d:2f:0f:7b:
90:87:63:c3:d1:70:1f:db:74:f7:70:eb:d4:89:97:
96:f4:68:ed:d0:ba:8c:f0:1d:54:2c:db:e7:32:cd:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:EC:B8:08:83:28:FB:CF:35:6D:6A:E4:B9:56:9D:06:83:0F:E6
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:aa:8e:96:8a:fc:c0:56:62:5b:04:b9:a2:d3:0f:e0:5e:
7f:b3:fd:c0:93:ff:75:0d:23:bb:ed:b0:f7:66:82:5e:c4:10:
c7:77:83:db:1f:30:84:a9:c6:48:e9:e6:3c:30:4d:04:89:fb:
30:e6:01:71:cc:9d:11:1a:d4:4a:1d:54:68:c6:b8:4c:f0:94:
63:82:a0:a7:31:5f:b5:26:d6:a9:2b:73:7d:0a:7e:b3:a2:c8:
fc:17:bd:ca:f0:6a:cd:ea:5c:b9:ee:ba:f0:68:1d:67:8e:77:
7c:fa:01:ee:aa:ea:bf:29:2b:f7:b0:55:4d:43:05:b0:d6:46:
b5:0a:e2:ac:c4:74:28:9b:51:e1:ed:5c:04:18:93:1f:54:1c:
ee:f4:c9:5a:bc:fd:4e:92:0f:cf:d1:f6:f6:9d:da:f3:23:70:
0d:db:30:d0:dd:3a:08:03:47:48:3f:67:23:22:ff:7c:63:09:
ba:e6:52:3c:54:e3:36:36:0e:bd:1f:54:17:ce:73:54:21:c1:
f8:d0:30:1f:4f:22:48:af:b6:4a:8a:d6:03:e7:07:37:78:37:
58:de:5a:ba:10:b4:1a:f6:7b:d9:fc:6d:5a:2a:d0:66:2a:85:
7b:0e:77:0d:37:d4:8f:bb:78:05:4d:dc:81:28:d3:cf:75:ae:
cf:e0:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:28 2025 by rpki-client