Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 5PZGJQMzEu5Ab/r0Cqywj7JxjYBTrZ25Pb2zVIbfT4A=
Subject key identifier: 94:DE:8D:90:D4:2E:B7:11:27:0A:EB:C0:76:F5:75:D3:04:93:88:94
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019851C3ABC669ADF88A00FCD701076FA374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1311
Signing time: Mon 28 Jul 2025 16:00:34 +0000
Manifest this update: Mon 28 Jul 2025 16:00:34 +0000
Manifest next update: Tue 29 Jul 2025 16:00:34 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: IKxHS2CpCkgI0gyMU1GZd6zeUlRgOeECCrZ3goJyDzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:ab:c6:69:ad:f8:8a:00:fc:d7:01:07:6f:a3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jul 28 16:00:34 2025 GMT
Not After : Jul 29 16:00:34 2025 GMT
Subject: CN=94de8d90d42eb711270aebc076f575d304938894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:74:39:da:29:38:c9:ce:d2:15:22:e4:42:
3c:a9:80:c3:8e:58:d8:5d:9e:a9:eb:a4:13:a8:31:
49:d5:a5:7f:92:02:9e:4d:9e:fc:3a:12:97:5b:df:
96:3a:49:e7:f7:ea:53:f6:e4:17:29:1f:3e:7a:6c:
5b:ae:93:cc:5e:6e:97:99:62:19:30:bb:f2:df:82:
d4:ff:b2:77:8f:ca:84:2e:3d:e4:bf:73:d8:20:ab:
90:81:e0:0a:a5:bd:2a:36:69:06:0d:e2:cd:05:94:
ae:8d:56:01:ac:d0:68:21:b3:bb:d3:b6:b9:5c:ba:
45:16:27:11:b5:1a:2f:c0:4b:6d:35:63:20:b2:3a:
09:96:60:48:78:96:7e:54:f3:14:b2:f3:8d:77:2e:
2d:ad:03:93:84:06:cc:88:7e:72:e6:85:9c:31:77:
ba:61:5b:7a:8e:f4:e7:a0:05:db:16:6b:51:04:cb:
5c:1d:85:18:86:82:92:32:57:50:ee:9b:ce:0a:86:
eb:76:85:7e:cc:58:70:27:e1:f3:a9:92:3a:42:85:
e1:c1:6f:e6:f9:86:a4:50:f1:fb:ce:e7:f3:5f:8e:
0a:39:87:b3:af:da:e8:63:e4:d9:11:49:4d:66:0b:
ea:30:f5:3c:01:97:39:c2:02:fb:22:d7:ee:a0:57:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:8D:90:D4:2E:B7:11:27:0A:EB:C0:76:F5:75:D3:04:93:88:94
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:d5:25:f3:51:1a:37:df:fb:57:2a:32:9a:9f:73:8d:e5:
fa:97:2c:9b:33:39:ae:05:b3:95:3b:c5:10:7c:c9:b9:40:de:
ea:0e:e1:b5:98:aa:6f:19:80:db:c3:f7:89:a9:6f:94:e6:08:
a7:70:9a:53:63:dd:4f:1e:93:cc:61:c8:f1:0a:eb:dc:f5:4a:
11:d6:cf:9c:b8:15:a8:20:5d:09:85:c3:91:23:a3:0b:6e:7a:
06:f9:b4:35:18:3c:9a:a4:dd:a6:90:e9:b7:7d:12:0d:43:73:
9d:2a:c1:f2:e8:6a:72:8b:02:25:b7:96:bd:aa:95:c7:ec:6b:
44:f7:b1:16:7d:88:5c:21:bd:23:8b:a0:53:92:2b:a7:46:bb:
97:46:cf:d0:e5:c2:87:97:71:55:bd:af:6d:08:a6:d8:91:13:
4a:c1:37:fe:fa:ab:a6:9e:f2:5d:9b:fb:4e:9b:34:fd:e5:33:
8b:9b:90:5f:7b:8b:9a:8c:da:66:e0:fc:34:84:ff:34:cd:ee:
b6:36:a2:02:24:da:79:df:0b:ec:66:b3:95:2c:3a:8b:41:bc:
b0:18:c3:d9:52:fc:9b:e8:07:b1:fb:ed:f1:8f:b2:fe:7d:89:
a2:c9:75:f6:e8:4d:2b:b8:2b:25:5e:26:43:11:32:6a:af:6a:
9a:4f:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:05:19 2025 by rpki-client