Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: AeuJWhH8iNYKX2tZY7GcebWy1A+UvAgTK6jIj2Vb+Pw=
Subject key identifier: D8:9A:AD:20:CA:29:D6:B7:07:60:C6:7C:02:17:70:74:27:4B:48:89
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 0198C8DD945B3CADB1CD309825722E85B38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 0303
Signing time: Wed 20 Aug 2025 19:03:41 +0000
Manifest this update: Wed 20 Aug 2025 19:03:41 +0000
Manifest next update: Thu 21 Aug 2025 19:03:41 +0000
Files and hashes: 1: 1-mbK63EZxL8v4V6vFmj_lwXzRxM.roa (hash: JWU55a5ri6Rn4UB9DqsCMDblGiRbnZJJXlkoHYetX7A=)
2: tUPB9TmrvRG46ngHubaYKYvn04E.roa (hash: rsksbLJqTJnjomTHQ1GVXbsT6pXd/mYYQ2loIuCMTYg=)
3: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: wFLQHwcwRv3THjdOVIHgw8vCk0GL/qXdgjzl3v1OapU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 19:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:dd:94:5b:3c:ad:b1:cd:30:98:25:72:2e:85:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Aug 20 19:03:41 2025 GMT
Not After : Aug 21 19:03:41 2025 GMT
Subject: CN=d89aad20ca29d6b70760c67c02177074274b4889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:f2:ba:d4:96:e7:58:53:61:84:47:0e:7b:
ba:4c:9a:f8:9f:59:4e:64:44:52:5e:dc:c8:66:f5:
f4:61:73:87:b0:60:1d:c5:85:5c:f4:4c:85:f5:6a:
6c:27:91:d8:07:24:19:46:c6:d0:56:dd:76:8c:3d:
03:98:0d:72:9c:ff:e0:c9:93:44:f8:3a:59:8f:68:
46:44:0b:6d:86:68:b3:2f:eb:99:fe:1f:18:f5:27:
8f:78:81:70:cc:e6:99:60:60:bc:12:5b:0e:b7:24:
cf:d8:29:aa:2a:33:b4:f5:4f:51:da:1c:d5:32:55:
58:69:0d:aa:ac:e7:e8:a1:00:ba:6b:71:67:a8:b6:
94:a5:8c:f3:63:eb:f6:d2:f6:92:85:36:47:02:56:
13:c4:00:2d:b6:8e:1f:ad:f2:eb:87:3a:50:c9:3a:
49:20:c5:d5:d1:09:bf:29:00:8d:2d:9f:44:1a:7b:
21:c4:f1:aa:e2:57:e5:e2:24:26:de:e3:a6:b0:39:
8a:1a:07:a5:32:22:4a:58:14:73:1f:ab:42:c3:b8:
8e:bb:04:0e:29:02:b2:21:ba:44:19:e5:28:d0:28:
67:b3:c6:45:b3:4a:0d:e2:62:6c:13:1c:60:86:d1:
21:ae:de:6c:82:51:c0:5a:2c:be:72:3b:3e:98:70:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:AD:20:CA:29:D6:B7:07:60:C6:7C:02:17:70:74:27:4B:48:89
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:26:30:94:76:73:63:46:bd:fb:f8:18:d3:b5:c4:b7:d8:6d:
74:ce:ff:53:b2:67:5e:1c:da:6e:f0:7d:90:d6:3d:ed:1a:72:
ab:96:1d:87:61:e0:d7:be:80:2f:5b:1b:01:ef:d0:a0:25:ac:
c1:11:18:d9:36:a3:6d:07:e4:6e:6e:99:96:b1:e6:d9:84:36:
17:a5:aa:b3:46:f8:52:0a:2a:22:bc:2c:c4:36:ac:c1:89:cc:
d9:d2:fc:e5:be:ff:4e:d0:bc:cf:3f:65:43:67:c9:61:f1:4d:
65:86:4b:55:f0:1a:74:58:4e:5e:a8:58:58:45:f5:ef:d3:ce:
ac:c2:a6:59:e6:0d:95:30:4c:9b:48:73:2f:e0:84:6a:28:9e:
73:0b:56:17:13:a6:f9:57:01:3f:fe:25:cd:0e:e7:78:d1:e1:
03:9f:26:1d:0c:75:2b:09:a8:ec:3f:3d:8c:72:63:ef:61:d5:
ea:e5:1b:b4:21:6f:2d:fc:61:b0:ad:ea:d7:21:54:13:00:24:
98:7f:03:17:c4:31:c9:e4:32:fe:e3:2a:41:63:f6:c3:2f:eb:
9f:9b:d5:f4:25:92:cd:2a:03:b8:42:25:79:ce:eb:2b:64:c5:
c8:8c:d4:bc:81:a9:1f:0d:bb:56:48:c3:a0:d1:e8:e8:e1:e0:
7e:d3:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:51:42 2025 by rpki-client