Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: DiJ4XELeMAUf/5lhCxZaIrvLWpVxMHkkQF3ol0DiGxY=
Subject key identifier: B9:72:D7:E0:65:44:B6:A4:BA:F1:D2:66:41:F6:C5:0A:41:FC:F2:80
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 01984AE5FA14C6864E732972F6B3A449F3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 08:00:42 +0000
Manifest this update: Sun 27 Jul 2025 08:00:42 +0000
Manifest next update: Mon 28 Jul 2025 08:00:42 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: 61geFXwG6FIlXA2iLpwGm7UScGMGxZ9JM08fqrkIAfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:fa:14:c6:86:4e:73:29:72:f6:b3:a4:49:f3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Jul 27 08:00:42 2025 GMT
Not After : Jul 28 08:00:42 2025 GMT
Subject: CN=b972d7e06544b6a4baf1d26641f6c50a41fcf280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:6e:06:fe:41:9d:5b:f1:ba:c4:04:de:35:
30:9a:ba:7e:57:6c:ff:2f:c2:0d:d2:5f:d9:c1:c9:
1a:07:73:2e:7b:a7:4a:ba:f1:af:a6:81:ce:89:34:
34:69:37:0f:dc:6b:78:79:1a:92:b6:c1:16:04:d3:
b0:27:f0:ec:6b:08:e4:cc:25:35:ca:d5:46:7a:c5:
10:7c:47:ed:90:99:11:eb:58:c7:b3:67:30:a2:0d:
2f:d3:65:6c:a2:3a:ca:9e:2b:fb:54:d1:3b:2e:70:
5d:37:6c:4a:9a:62:58:c8:5a:c0:6a:2c:7b:f1:6d:
e1:1d:13:89:ed:c7:f9:cb:35:ad:4a:41:19:c9:d5:
95:1a:49:5d:67:2e:3b:de:ee:ae:76:eb:f5:16:a6:
3e:b6:2f:78:01:26:91:52:9a:aa:4d:52:53:85:27:
73:40:06:08:1d:e0:93:f3:95:67:04:a5:1f:36:49:
e3:19:8f:a2:da:48:99:59:67:5d:da:31:ae:4b:57:
d3:17:b8:92:36:27:fb:31:9a:17:1e:1a:07:a0:13:
5b:05:96:be:da:80:3a:74:30:22:e9:7a:ba:76:09:
73:93:c9:05:85:e5:30:17:3e:09:e0:dd:c6:c6:c7:
6d:9b:78:f4:99:db:29:77:86:48:cb:f7:d7:0a:9c:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:D7:E0:65:44:B6:A4:BA:F1:D2:66:41:F6:C5:0A:41:FC:F2:80
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:5c:ff:dc:76:78:20:8b:da:43:a9:b8:01:b5:11:84:8d:
64:a3:14:a3:cc:86:ce:a1:6f:99:3d:92:c0:d8:b3:63:02:62:
56:a5:e0:e0:fd:9d:88:61:12:29:cb:d9:32:a0:35:6b:a4:2b:
0d:af:79:3b:10:4b:da:97:fd:7f:b5:6b:53:5b:74:da:6d:03:
dc:4e:45:67:6b:1b:71:bc:b3:aa:c0:85:c0:61:cd:ec:45:0f:
30:e5:7a:69:88:75:67:06:59:f7:8a:cb:75:f3:d7:3f:9d:91:
e4:8d:b9:b0:44:70:6b:9b:92:a4:1e:96:e3:d0:3e:f8:bc:69:
be:91:36:11:db:f8:50:f2:0e:9d:1e:75:d2:90:48:40:78:85:
c3:f5:6d:ae:c1:75:b7:8c:48:4b:90:b0:82:97:ca:b9:a0:bb:
c2:0c:03:37:57:11:9b:cd:b7:6b:14:db:f5:cb:22:a6:a4:84:
43:24:c7:a6:b4:f9:95:1c:fa:1f:73:87:3f:49:ef:f6:4e:e9:
01:4f:fd:6b:95:66:52:4d:dd:d4:c3:39:fa:77:68:d1:cd:43:
94:ca:81:d2:bf:6f:34:f8:20:c6:c7:d2:5b:9d:3b:d8:e5:97:
db:51:2a:b5:01:34:72:46:2a:87:28:5e:a0:50:56:a8:72:79:
ee:01:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:03:43 2025 by rpki-client