Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: 24CZsT3A19dTHggzwwejL+iFv+cUd9/9kgvisZGzOrg=
Subject key identifier: 2C:08:BB:21:A6:B5:71:D8:32:85:2F:0A:C0:04:04:9C:67:96:9D:CC
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 0198469AD152DA2C023DE22BFCBCE35840F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 12E7
Signing time: Sat 26 Jul 2025 12:00:07 +0000
Manifest this update: Sat 26 Jul 2025 12:00:07 +0000
Manifest next update: Sun 27 Jul 2025 12:00:07 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: UQx5fNNm1vkURJ2rS4CYEXmxUep13zK5oF2WAtD4PG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:d1:52:da:2c:02:3d:e2:2b:fc:bc:e3:58:40:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jul 26 12:00:07 2025 GMT
Not After : Jul 27 12:00:07 2025 GMT
Subject: CN=2c08bb21a6b571d832852f0ac004049c67969dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:cd:ed:f2:be:7c:01:5b:85:55:ef:5a:3b:
68:23:d0:f8:8c:33:56:b5:0d:3a:03:ec:3c:7e:87:
f6:62:53:b2:38:0d:e1:d5:99:9f:ff:78:d7:36:6b:
30:59:96:3f:45:53:7b:52:f9:06:f1:9a:57:66:01:
b3:8d:af:ae:c4:4e:6d:7c:2d:11:c7:4d:70:5d:a0:
41:ff:ae:1f:71:29:8c:26:54:2e:f2:05:9e:af:a0:
f1:77:b4:40:9f:9d:c9:35:02:7b:f2:a9:c2:5a:b9:
23:cd:8e:77:f2:52:fe:9f:36:78:4c:d7:24:e6:33:
29:42:74:d6:3a:2f:9e:44:18:dc:cf:f3:be:9d:d9:
6c:66:42:46:b4:f1:50:a3:e2:57:0a:72:a6:3c:31:
9d:45:69:4d:bb:94:39:38:bb:9e:ab:ef:0c:af:c2:
cd:80:cc:ad:fa:4b:ed:a0:3f:2c:b1:82:2f:90:bb:
8d:d8:e9:4b:f0:be:39:af:e7:48:80:5d:34:a3:bf:
10:5d:c3:0f:be:14:88:36:dc:13:aa:70:fb:95:61:
00:19:f4:d7:5a:28:cb:10:64:de:9b:73:12:6a:3e:
06:22:50:f4:15:31:5d:dd:04:3a:2c:0e:33:3f:52:
55:e9:62:ce:82:62:54:ac:4e:a0:3d:6a:24:45:7a:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:08:BB:21:A6:B5:71:D8:32:85:2F:0A:C0:04:04:9C:67:96:9D:CC
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:6c:f1:57:66:e1:f2:6d:f7:43:11:d9:e1:c2:67:01:b7:
ab:e8:c5:66:2b:74:43:63:c0:66:64:a3:56:bb:58:21:b5:6d:
1d:17:f7:1c:36:c6:dd:af:2c:4f:48:68:70:41:65:78:df:6e:
22:de:95:b1:37:f4:02:3d:a1:fa:f5:8c:a0:5c:fd:6b:89:54:
cd:35:8f:38:47:ab:fe:ba:90:17:ab:e8:4f:97:cc:f8:5d:09:
0f:14:10:6a:9e:fb:4a:8b:67:b9:b1:cb:45:40:69:62:1f:5c:
d0:1e:cb:dd:ee:dd:7c:84:fb:6e:c2:05:64:da:13:9c:ad:87:
29:a0:e5:9e:26:ac:f9:e8:b6:eb:5e:94:cd:b4:dd:1c:d6:2a:
27:c3:23:7e:a1:92:e1:67:0c:bd:21:ea:74:f8:78:f9:93:3a:
cc:36:b2:f7:17:6a:f7:76:98:51:81:6b:29:d6:7c:e1:ca:27:
b7:f2:c1:43:c0:06:44:5b:ed:62:b2:52:9c:57:d2:7c:fb:33:
25:61:14:a0:2a:d4:3d:6b:53:6a:68:c2:f8:b9:6f:df:82:e5:
1d:c0:5f:86:42:e5:7a:2b:b6:10:53:c9:93:ac:1a:ec:d3:bf:
b0:9b:e1:43:2f:7d:80:ad:4c:93:83:79:b4:82:71:ca:cb:1d:
99:0f:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:40:24 2025 by rpki-client