Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: FHxHyzaTXTzHOvPzZnU3lDcRsfolaGEquXPJKYlWar8=
Subject key identifier: B7:F5:EA:65:03:08:D5:FC:43:63:07:0C:96:3D:7E:09:C4:E5:E0:67
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 01984589882DDD1304FA1EDFF1D63F793F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 03B2
Signing time: Sat 26 Jul 2025 07:01:37 +0000
Manifest this update: Sat 26 Jul 2025 07:01:37 +0000
Manifest next update: Sun 27 Jul 2025 07:01:37 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: A3Q6KXVf3tRvWRb5D8TGgFOUyRkrICEKueSFUY3SNrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:88:2d:dd:13:04:fa:1e:df:f1:d6:3f:79:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Jul 26 07:01:37 2025 GMT
Not After : Jul 27 07:01:37 2025 GMT
Subject: CN=b7f5ea650308d5fc4363070c963d7e09c4e5e067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a1:41:bc:32:e0:cc:a6:3c:b9:cd:46:d8:b5:
24:7c:71:b9:15:aa:03:fa:07:7f:dd:ca:96:98:14:
48:92:41:94:ec:a4:04:33:f3:ac:91:a2:77:e2:07:
2b:dc:90:b5:9e:a1:2e:e6:76:52:af:f0:ca:f6:cc:
51:d5:0c:07:05:ed:1b:d2:81:37:5b:28:81:91:5a:
af:1d:3f:a2:d1:16:10:a5:74:51:6d:f8:69:a6:d5:
ba:05:7f:97:ef:f4:b0:dd:38:e4:26:f1:15:98:02:
e7:b6:09:22:7c:0f:e4:9b:08:35:d4:af:c6:0a:f4:
80:a4:c4:91:e3:29:f3:8f:da:53:a4:26:4b:7c:7c:
48:97:bb:2a:7b:53:9f:17:1d:43:02:d1:d2:a0:4a:
98:1c:66:26:0f:06:c5:52:5c:a3:f4:99:95:33:ce:
41:52:d1:bb:e2:ab:6c:4e:bf:7c:29:d3:cb:fd:6a:
e2:bc:32:c0:13:9c:a9:9a:b3:84:5c:84:67:8c:6d:
0b:52:15:8e:68:b7:04:d4:1b:af:f6:9e:cb:c9:39:
45:51:d5:50:60:fe:bd:9a:b0:95:df:59:27:0b:5e:
26:00:80:70:15:5c:e4:6c:54:b3:d3:e2:db:34:b2:
ac:2a:3e:a2:76:79:ce:90:c9:1e:76:1a:35:27:4d:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:EA:65:03:08:D5:FC:43:63:07:0C:96:3D:7E:09:C4:E5:E0:67
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:22:25:96:44:0a:f7:94:ac:27:5c:06:c8:5e:c0:4e:50:99:
1c:ce:9f:a0:3b:22:1b:d6:1d:c3:9f:63:80:1a:21:a1:18:99:
57:69:f0:f5:67:1e:dd:12:ad:86:0c:95:73:c9:23:33:37:68:
23:9e:70:07:45:ff:0a:78:34:7d:10:25:46:c1:58:33:ca:77:
25:85:98:9a:7d:c8:9d:c9:b4:fb:74:f1:19:ef:ba:03:53:53:
2b:ff:37:4c:9d:8c:21:74:9e:bf:97:c8:56:dd:79:d1:71:ea:
78:60:6f:4d:53:5b:73:be:93:78:f4:93:4e:49:70:7a:af:2f:
ce:f4:52:11:98:75:33:70:85:f1:29:f4:32:fe:71:75:6c:dc:
4e:ef:b8:ae:c3:ae:47:30:a6:ea:09:30:1a:98:3e:83:09:23:
72:bc:8e:e6:e2:e0:0a:0e:8c:a6:06:da:2a:81:ea:0e:63:21:
b0:7a:77:64:87:1e:00:22:01:d1:de:81:c4:3b:6f:e0:66:cd:
c6:99:07:79:81:7c:10:69:e1:c2:c4:b7:ed:c6:1b:b9:17:5f:
46:9c:52:49:69:76:4e:41:01:ae:91:42:bc:ea:fe:50:09:95:
40:b8:0f:7a:e5:19:9a:f6:e9:aa:82:af:4e:a1:98:05:d5:8c:
73:35:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:56:59 2025 by rpki-client