Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: 58qqk5AWLHe+FRwfekit9qUPgbq8u08w1XBid4QxiVg=
Subject key identifier: CB:0D:8C:49:CD:65:7C:39:93:A3:ED:8B:58:A9:E3:0F:BC:5D:B8:46
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 01993794A977B5652D65400036C6B50D533F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0DB1
Signing time: Thu 11 Sep 2025 07:01:53 +0000
Manifest this update: Thu 11 Sep 2025 07:01:53 +0000
Manifest next update: Fri 12 Sep 2025 07:01:53 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: bCud60aspWLjKTcVFx4vtkuHWRGpp/XxI86YiE906mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:a9:77:b5:65:2d:65:40:00:36:c6:b5:0d:53:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Sep 11 07:01:53 2025 GMT
Not After : Sep 12 07:01:53 2025 GMT
Subject: CN=cb0d8c49cd657c3993a3ed8b58a9e30fbc5db846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:37:91:13:33:dd:d3:6f:4c:a6:88:2b:d2:
c4:e0:d3:fa:f9:b4:fa:c2:02:bb:55:7c:b0:7b:f9:
a7:ef:e9:4f:58:75:db:b2:5b:41:ed:bc:e1:a0:bc:
80:69:e6:08:91:bb:79:a1:97:ce:97:f5:aa:61:da:
7b:4e:c5:d8:ac:59:d9:81:13:9a:73:d0:70:89:6a:
26:29:fb:95:6f:56:18:33:50:08:b7:d8:3f:6e:fc:
c7:ec:69:fc:f6:02:b3:d3:ff:46:8d:9e:94:cc:f4:
fe:d7:ae:8f:03:b8:20:ae:80:9c:2f:a0:6c:82:92:
34:93:f1:59:37:69:a2:6f:42:b5:b3:e7:d2:f8:13:
ff:97:aa:41:88:39:37:19:9f:24:90:e2:23:89:4a:
b2:d4:fe:af:88:1e:39:34:48:ef:bc:6e:7d:81:93:
2a:a5:6c:07:ac:e6:3d:f8:a1:b2:d3:73:92:87:98:
f4:5b:c1:9f:59:88:f1:72:85:ba:cf:e0:8b:f9:0c:
af:b0:09:9e:8f:ba:98:8f:fc:93:a4:dd:71:87:65:
55:7f:41:9b:cb:48:5d:6b:dd:db:b5:f2:9c:2c:66:
62:a0:d1:86:1f:82:91:57:af:c7:4a:4b:dc:26:f0:
38:5e:08:14:76:3f:e6:f0:79:40:6c:4b:67:03:d0:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:8C:49:CD:65:7C:39:93:A3:ED:8B:58:A9:E3:0F:BC:5D:B8:46
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:19:ba:d5:7a:a1:a0:67:a8:c8:1e:30:d2:e9:92:06:4f:9f:
8c:d5:6f:9d:5d:57:3c:1d:11:4a:d1:76:2f:af:f5:32:dd:2d:
ca:6a:6f:5c:7a:9b:e0:f9:a2:c1:74:f0:d9:fb:e4:10:bf:32:
8f:4e:0b:24:f3:79:18:16:40:4d:01:36:24:e1:9f:cf:76:82:
49:08:18:00:43:a7:6f:c0:f2:38:f2:2f:8e:bb:59:68:73:99:
80:d9:99:23:86:7a:09:71:ec:ce:dc:61:66:18:cb:8a:12:00:
fa:7a:61:0b:a2:d0:8d:84:82:4b:21:16:59:91:90:dd:39:f0:
77:bc:11:72:de:42:f8:4b:a5:3d:86:ee:93:a1:0a:a8:e6:70:
05:26:aa:c6:3a:a4:c4:4e:21:6e:e7:c0:a7:16:f0:c6:7e:3b:
e1:7c:ef:8f:ab:97:3d:43:05:0a:2c:b9:c2:1c:5b:23:24:31:
29:c1:98:b8:9a:02:f6:cf:c0:82:c4:0c:b7:e4:78:ee:ef:ec:
bd:68:0c:a9:2d:d6:2a:e7:bf:53:b9:5d:f8:6d:b0:eb:18:cb:
63:f2:5e:33:cc:ea:7c:5c:68:af:81:d5:10:25:a5:d3:c6:88:
48:7a:e6:5d:bb:bf:51:de:bf:7e:c7:13:a8:5b:92:0a:bf:f8:
46:ea:bf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:20:14 2025 by rpki-client