Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
File: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json)
Hash identifier: TUrWbbe8ImQ9XTP3WNlmX8r3w98qBn6BGNK042tr5DE=
Subject key identifier: 03:B5:30:83:94:86:5F:6C:F4:97:C5:1B:29:45:39:1A:8C:B3:5B:CE
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial: 0198530EE44AF05A3904E953CFDBA3E60FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:02:21 +0000
Manifest this update: Mon 28 Jul 2025 22:02:21 +0000
Manifest next update: Tue 29 Jul 2025 22:02:21 +0000
Files and hashes: 1: NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa (hash: 1hCazZpKjVTtjQVFUWpkmXqPQOre2tDQ3dmWvgeOvfo=)
2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: kfMoBwRiipa9brp39dGbOnNpxRdTxytG65Ykb4E8auE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:e4:4a:f0:5a:39:04:e9:53:cf:db:a3:e6:0f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Validity
Not Before: Jul 28 22:02:21 2025 GMT
Not After : Jul 29 22:02:21 2025 GMT
Subject: CN=03b5308394865f6cf497c51b2945391a8cb35bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:eb:59:a7:a3:05:e2:23:e1:28:af:31:1b:
ff:a1:b7:82:65:be:0a:a8:29:8a:18:ed:a8:2f:1d:
93:fb:46:a2:d7:b6:97:25:e9:e0:70:c3:de:97:c0:
86:0a:a7:ca:ab:ac:a0:8b:4e:90:19:51:52:3a:50:
05:d1:60:2c:e7:7a:b8:f3:1a:e3:f9:16:77:04:6a:
d2:4a:56:4a:81:01:7b:2a:15:b6:33:0a:0f:55:b2:
5d:8c:1b:d4:ba:d6:58:de:cf:85:fa:57:c8:a9:ae:
f8:48:3f:14:3d:e7:94:35:d6:ca:1e:ae:a9:0a:6f:
03:58:51:96:8e:20:99:81:ca:79:b0:f9:0d:d0:b4:
79:af:61:d1:aa:61:03:e7:c2:f6:c6:20:57:44:2f:
d1:e6:65:0a:3e:24:8c:50:c8:4f:22:fa:6b:24:81:
58:f3:0a:aa:99:0e:de:ed:47:e2:18:dd:5b:00:6e:
d3:69:8f:28:b9:e9:de:b6:92:5d:6b:3d:fd:93:11:
05:21:2e:ef:33:39:d5:a7:d9:c9:6b:2b:03:25:46:
d6:9a:61:68:83:f3:27:37:10:ec:28:b5:08:a3:a4:
14:27:b7:a0:b6:b8:d5:8a:75:38:4e:f9:0d:1e:3c:
d7:98:8c:45:0e:46:57:0b:f0:b7:03:f0:ad:73:c6:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B5:30:83:94:86:5F:6C:F4:97:C5:1B:29:45:39:1A:8C:B3:5B:CE
X509v3 Authority Key Identifier:
keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:94:9b:73:c9:b4:b0:34:b5:47:51:5a:57:1a:98:0e:09:9c:
db:56:ab:5b:60:ce:2f:6c:1b:a3:ab:17:4c:78:ab:9c:86:e4:
1b:0c:6c:6c:f3:b5:2d:c8:8b:6c:f0:37:f5:60:eb:c5:e7:f2:
92:3c:3c:62:f5:1f:dc:d5:ef:c1:8d:c0:dc:d9:c8:ae:ca:b4:
6c:97:14:92:3b:44:c6:ce:43:e5:9d:15:2a:18:99:20:5a:a2:
fc:75:a4:2b:9a:54:92:40:a4:06:43:77:05:d5:b4:88:fb:d2:
66:89:ec:13:58:44:6a:78:f0:f3:91:ec:ca:44:3d:db:20:c7:
b4:e6:45:80:f0:68:c2:e3:9f:21:9b:53:7b:90:f2:b9:69:42:
79:4f:b5:7e:8b:7b:ac:c2:9d:bf:ec:dd:67:ce:5b:32:96:08:
93:4c:20:1b:ec:81:10:ff:9f:92:a6:69:96:6a:8d:ed:88:66:
11:ae:4a:8b:8b:ad:9c:5e:23:16:2e:11:3e:b7:a7:6d:b6:2b:
fb:18:5a:4b:19:ac:eb:d1:96:f4:a7:a5:e9:61:86:67:ce:4a:
f1:1a:e7:68:c9:45:52:ee:d6:4b:84:7c:0d:92:9a:b3:e3:9e:
19:d9:a7:06:87:5a:42:4e:c0:93:26:69:c7:39:a0:dc:b6:28:
23:f0:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:25:28 2025 by rpki-client