Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: 9/4sAHyZzDXQFpsx+ApJa8zzVIOQi5LeU3Y/t+wqzWs=
Subject key identifier: AF:7D:94:00:88:8A:77:A6:60:F5:93:F3:8E:9A:01:0F:EB:4E:57:33
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 01984852C2E45EB86FB4680FECDAB4DC908B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 1285
Signing time: Sat 26 Jul 2025 20:00:40 +0000
Manifest this update: Sat 26 Jul 2025 20:00:40 +0000
Manifest next update: Sun 27 Jul 2025 20:00:40 +0000
Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: icUKMAPJvNd2o3gwRqx8DVo2JTbiGC5ZerdzyyS67b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:c2:e4:5e:b8:6f:b4:68:0f:ec:da:b4:dc:90:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Jul 26 20:00:40 2025 GMT
Not After : Jul 27 20:00:40 2025 GMT
Subject: CN=af7d9400888a77a660f593f38e9a010feb4e5733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:12:8b:56:4a:64:67:28:c4:6f:36:f1:96:
c6:2a:52:82:0e:95:f3:a4:14:46:b5:20:0f:9d:52:
4c:b1:27:3a:7f:bd:be:7e:10:2f:a6:ef:c5:4c:0f:
22:2e:21:f5:e3:35:fc:82:3b:01:99:5c:4e:c4:58:
b7:5f:e7:07:0d:a4:8c:9e:c5:aa:66:23:13:fb:36:
01:ad:70:9f:78:da:c4:65:04:ed:32:86:ad:51:8c:
ed:e2:72:c6:e8:42:87:03:8d:e3:4d:2e:f2:7f:21:
2a:db:a7:9b:b7:56:31:74:a1:7c:5f:d1:ba:0e:69:
72:5c:1c:46:eb:b6:9f:01:a6:06:7c:e2:50:30:5e:
dd:0d:65:d3:3b:98:02:73:6c:19:a4:7c:d7:db:c0:
4f:33:67:87:6f:d3:65:7e:75:74:b9:65:23:48:6c:
51:6f:af:b7:d0:01:7b:32:d9:5f:a2:a8:2c:a3:a6:
fc:0c:74:d8:0a:31:10:80:c5:0d:fc:39:a2:9f:58:
a1:3b:f3:36:29:18:96:b4:89:23:93:24:d3:f4:aa:
ac:95:ac:73:d8:3f:48:2a:5b:70:81:1d:35:fb:91:
b7:a7:9b:84:b7:fd:0a:98:72:a6:cd:3b:77:fd:f1:
96:bd:42:f4:15:31:d8:2d:70:b4:21:2a:75:c7:73:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7D:94:00:88:8A:77:A6:60:F5:93:F3:8E:9A:01:0F:EB:4E:57:33
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:69:2e:08:df:7f:f7:f9:55:fa:9b:d5:e6:5e:fc:25:b5:b6:
2e:1d:aa:f9:34:c0:9e:db:ac:ee:d4:86:a1:36:e6:55:65:c6:
f9:0e:06:1f:8b:49:99:21:09:a2:a2:f1:2a:f3:fc:68:e9:d7:
d2:fb:b1:4f:7e:74:f9:b9:2b:fe:91:49:dd:55:a1:67:10:bc:
70:89:00:ae:ae:45:97:74:a8:5d:78:e0:e1:9a:ee:83:c4:cd:
4e:d2:19:74:7c:56:21:b6:95:01:52:99:95:7d:dc:57:df:d1:
c3:e9:58:9b:a2:db:fe:d3:fd:f9:c1:33:ee:a0:85:f0:3a:32:
49:6f:16:f8:67:ae:0c:76:19:03:62:3f:41:7f:27:f2:f4:28:
2a:18:29:9e:53:c2:7c:ee:a8:57:4f:90:88:2c:56:d4:d8:b6:
49:11:68:4e:2b:3b:b7:d3:f3:f1:a0:49:c0:7b:8a:b7:c0:5f:
93:e3:22:09:38:79:b6:14:95:19:fb:2a:e8:7f:e3:d6:05:d6:
aa:35:d0:c7:3d:b6:8a:75:ab:fa:f3:1f:2f:9a:e9:92:2f:00:
98:89:98:f0:d0:06:de:6b:31:43:8b:aa:62:0e:ca:9d:b2:d0:
59:b5:ac:02:3d:c1:0e:6b:1d:78:ea:c7:30:95:04:fa:ce:27:
0d:96:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:06 2025 by rpki-client