Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File: yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier: fcLbxdogWlBiFIeFQpbJWK0frt+ADaSjfBSwq2Pk7BY=
Subject key identifier: 36:89:B7:99:D5:C4:9B:72:BC:FD:A5:FF:16:49:2A:44:C6:5A:A8:76
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 0198443F341978E38410627E6D73F9C2FC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number: 0C2C
Signing time: Sat 26 Jul 2025 01:00:49 +0000
Manifest this update: Sat 26 Jul 2025 01:00:49 +0000
Manifest next update: Sun 27 Jul 2025 01:00:49 +0000
Files and hashes: 1: gZMQxr61w0P4Si-B6lBsVj_b8vM.roa (hash: 3Vc/pW8ygtdQIimX5iqQ/MSW6PLhJ2nbGCIzRJsZshI=)
2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: V0pvV9aT+2yTJYcLUxx8U1ZnEXEbvdyNIYgyreOQECA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:34:19:78:e3:84:10:62:7e:6d:73:f9:c2:fc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Jul 26 01:00:49 2025 GMT
Not After : Jul 27 01:00:49 2025 GMT
Subject: CN=3689b799d5c49b72bcfda5ff16492a44c65aa876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:64:60:e5:ef:11:27:e0:e5:b4:a6:7a:a6:
a5:35:c5:6d:88:94:6d:33:fa:d0:9c:91:7f:d2:1e:
75:f5:54:f0:40:d1:36:40:a0:e2:80:3d:69:b6:c0:
58:b1:a1:07:91:ba:b0:e7:1b:42:ba:06:58:37:ab:
2e:a1:c0:92:8c:7f:c6:5c:c7:4a:e5:03:ff:5f:a2:
56:89:e5:83:07:a5:7b:c8:4a:51:7b:f9:a5:21:f2:
54:66:03:fc:1a:24:61:24:d6:c0:15:ba:4e:2f:12:
ac:7f:b2:30:38:f5:a5:7c:47:fa:c2:f8:b5:02:2c:
e3:3f:7d:1a:86:68:3e:ed:25:3e:a2:a3:df:dd:e1:
e4:2d:2f:8b:52:7b:4b:c8:66:40:a3:ca:c7:69:4a:
39:2e:f4:91:4e:02:12:1e:f4:f3:fe:4a:40:ce:d0:
b4:0e:6e:16:37:98:c8:d9:36:a5:62:11:f1:a7:cb:
da:d1:66:f8:55:6a:63:f9:e1:85:57:d5:fa:1f:31:
5e:2c:e4:8e:81:ce:fd:15:75:17:60:06:bd:1d:99:
d6:db:74:07:f7:48:b9:f3:15:cd:9d:74:ee:b2:bb:
fa:cb:19:f9:48:9f:1f:b6:a6:c5:a6:4c:99:cb:54:
0f:88:73:80:69:63:a1:c6:c6:b6:7f:ef:e5:f6:51:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:89:B7:99:D5:C4:9B:72:BC:FD:A5:FF:16:49:2A:44:C6:5A:A8:76
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6d:a2:e3:1b:2b:23:98:bd:1f:ab:ef:e4:1d:de:90:af:d4:
f7:67:1c:d2:5b:b4:3e:a1:94:49:e0:e8:b1:03:7b:0e:2b:ec:
3a:50:90:71:87:23:78:81:42:e7:7b:7a:72:2d:8c:ec:7a:bc:
93:b5:fa:ec:a9:b3:48:97:4d:1f:5a:31:ea:6a:bc:ee:c4:e2:
85:43:a9:96:8b:dd:52:35:47:5e:27:04:ff:c9:20:f2:9a:ee:
73:3c:1e:01:d3:6f:fe:b5:fe:44:6b:fe:3e:5e:d7:22:a2:6b:
c6:95:e8:c2:51:4c:58:a2:65:45:22:6f:6b:e1:7c:15:1c:e2:
0a:66:0a:fe:6d:6a:94:e7:65:69:10:86:09:9d:d5:89:de:c2:
4f:88:a5:e8:ef:11:ae:21:48:ec:53:47:50:43:d9:bd:4e:53:
5d:6e:72:51:8b:76:8e:12:48:a0:5f:b8:27:cb:22:8d:6c:81:
05:26:ad:e2:04:2e:66:fc:48:5a:51:03:f1:a7:34:a6:5b:7e:
b9:f4:aa:e5:8d:1e:94:21:d0:ba:e4:af:ca:a2:15:ff:5b:c4:
37:5c:72:e2:bd:15:a8:60:ee:ec:74:9f:11:24:a0:93:2c:c7:
66:fa:db:54:24:29:29:78:7f:bd:66:a0:6e:b8:14:6f:eb:1b:
70:71:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:13:01 2025 by rpki-client