Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File: yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier: EqxcNoeWRxU5az382C6ZsucJGQ4Bifi+qgGfucn4RlY=
Subject key identifier: D3:96:B0:D9:8A:32:F7:AC:4C:01:95:D7:83:A2:24:E4:51:23:7B:AC
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 01984B5490F86D76AFCCBC692E41AD257825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 10:01:29 +0000
Manifest this update: Sun 27 Jul 2025 10:01:29 +0000
Manifest next update: Mon 28 Jul 2025 10:01:29 +0000
Files and hashes: 1: 3OPKqlzsdO_6FnnigdjEBtH5MGI.roa (hash: TGXodn+4ZnMS0vB8YcYqILiualGqtvptFZ+aYltyIls=)
2: DSP2YiR4WzjHqSWGSS08rUQRgbE.roa (hash: wRqBcz801mLsMlnqTiS+wIo1U44VP4wBktKdtKLPifQ=)
3: L-DhFAOlHk5rFENU35v4H6Y8kC4.roa (hash: es/wTE6LdxRXaEI3U8d6ZJo/4QzkGb/m+lXYCfWMDmo=)
4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: 023y+MYmAzfDBGcj6PRuJMba/79bvgDqR4qvXYnxlcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:90:f8:6d:76:af:cc:bc:69:2e:41:ad:25:78:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Jul 27 10:01:29 2025 GMT
Not After : Jul 28 10:01:29 2025 GMT
Subject: CN=d396b0d98a32f7ac4c0195d783a224e451237bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:63:43:ad:82:ff:4b:d0:aa:af:19:15:7f:
38:91:24:f2:fb:10:16:6b:e5:8b:fe:d2:7f:76:05:
94:e7:43:5f:d5:60:7b:26:cf:5d:89:09:10:97:52:
9f:b2:cc:a4:8f:dc:e6:1b:a9:d7:78:b6:d4:20:cd:
c6:81:91:13:74:83:ae:d2:87:63:a1:85:53:77:d4:
d3:0b:24:de:92:d8:fc:6a:1a:20:ff:fd:52:be:74:
69:eb:2a:b1:f9:de:aa:2b:d5:52:29:7e:da:90:dd:
07:1d:8f:d1:16:69:8d:6c:8f:86:97:fd:d3:67:67:
ea:bb:17:e4:00:c4:4c:db:82:b4:d3:28:99:eb:69:
44:b4:15:aa:c5:59:13:71:84:a6:e9:64:10:57:97:
64:50:77:93:f1:bf:1e:bf:86:aa:01:44:0d:51:06:
91:d9:69:b3:83:1b:29:32:2c:53:86:3c:0d:6c:77:
0c:5c:32:f3:5a:e9:d1:f1:e5:1d:9d:df:96:a0:ae:
eb:2a:2b:67:ce:9f:28:76:69:82:25:65:b5:0c:e0:
95:0f:fc:ee:f3:59:ae:c1:63:21:a1:a8:36:dd:5e:
6d:d1:48:5e:86:a9:40:48:f3:2a:08:0d:dc:11:82:
0b:89:a7:86:c2:f9:91:19:ab:08:73:fe:7d:8b:bc:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:B0:D9:8A:32:F7:AC:4C:01:95:D7:83:A2:24:E4:51:23:7B:AC
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d1:46:67:30:ef:39:95:b7:81:a2:3d:27:1d:26:28:3c:e6:
50:ca:56:b9:95:9b:ff:89:36:6d:91:b0:c3:83:0d:fa:30:e7:
85:d1:f7:08:50:98:f0:8c:73:68:aa:82:0a:e0:b3:93:ee:e8:
fb:fe:7b:3c:0b:25:5a:69:7f:9e:98:a2:06:5b:79:8f:bd:28:
db:ab:26:2f:d5:3d:dd:20:53:76:33:15:d4:1e:ab:0e:f0:8d:
e2:8c:8d:7e:52:27:b6:7d:1d:98:96:bf:8e:d9:d9:9e:c7:66:
17:6e:fd:57:be:fc:df:e5:e8:93:5a:b2:ca:2d:04:fc:94:bf:
f9:d1:53:1f:d5:27:3a:02:99:51:87:25:c0:4d:11:2a:bb:ca:
61:d9:f0:9c:f0:06:41:a1:c4:66:68:a1:63:1b:20:e8:6a:4c:
2f:e8:4c:e9:54:64:5c:c3:82:ec:47:e1:a8:14:77:c5:ce:a6:
8f:2d:70:06:68:5d:41:ad:a5:ba:07:e5:4a:24:83:ca:c9:49:
ff:ca:ea:56:1b:8e:ae:ef:6c:37:9f:cc:1d:19:9f:bc:0e:1d:
b9:97:92:dc:de:02:68:76:b6:33:14:a2:c5:be:02:50:95:93:
69:be:e8:c1:86:29:7b:a9:8f:a9:2f:8c:fc:42:28:cd:d6:fb:
ad:5b:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:25:54 2025 by rpki-client