Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: 4ULNQZ7i4Fo+lLRbIdskZ/1djokzZ59NH+q41ogpRY0=
Subject key identifier: 7D:C6:FB:21:65:8A:E6:DD:AD:6D:CF:5B:71:EE:A8:5B:5F:58:E4:5B
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 01992255D326C5123D2AD9C0B7530D3A49F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 04:01:13 +0000
Manifest this update: Sun 07 Sep 2025 04:01:13 +0000
Manifest next update: Mon 08 Sep 2025 04:01:13 +0000
Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: Z3wd05SqXXzrlnIcRHi6ZC05jgflPavZFS5KEitnk14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d3:26:c5:12:3d:2a:d9:c0:b7:53:0d:3a:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Sep 7 04:01:13 2025 GMT
Not After : Sep 8 04:01:13 2025 GMT
Subject: CN=7dc6fb21658ae6ddad6dcf5b71eea85b5f58e45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:34:a4:93:eb:c8:6a:9a:05:7d:57:24:72:
e6:00:33:6c:d5:20:1d:8e:5a:87:66:48:10:f1:59:
86:e8:47:d3:23:c5:33:1c:78:b2:e1:47:f8:5e:6c:
c7:69:45:63:5a:17:f4:83:91:c3:0d:7f:ff:9e:5c:
dd:70:87:38:a2:68:0f:75:51:cb:37:a4:48:28:3b:
63:25:d0:24:28:dc:1b:c0:86:75:0c:0a:6b:52:e4:
d0:d5:e7:c8:c8:7f:31:7c:92:3f:b1:2a:a0:bf:4a:
0f:ed:8f:cb:93:6f:ca:1c:eb:d1:d0:28:ed:e6:31:
96:c7:b7:4d:ef:d2:6c:ae:89:cb:f3:7f:06:7a:44:
a2:eb:dd:4b:45:dc:5f:9f:13:64:fa:04:50:ea:01:
45:e9:86:16:13:b1:1d:d0:de:4a:eb:dd:92:4b:bc:
5e:f3:eb:c9:db:35:99:4e:00:df:57:c4:03:6b:4f:
f2:7b:b7:e6:1a:c4:42:b0:5f:25:08:f5:dc:4b:6e:
f2:35:72:05:b5:9a:c2:32:11:9c:d8:ce:8b:16:0a:
f6:c8:80:6b:be:b5:9a:b9:e4:9d:68:6e:53:dd:4a:
fe:05:0b:6b:a0:1a:ec:54:c4:6b:7f:8b:86:b7:ee:
ea:b7:6b:ab:b3:84:e5:4c:eb:9d:db:50:85:84:04:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:FB:21:65:8A:E6:DD:AD:6D:CF:5B:71:EE:A8:5B:5F:58:E4:5B
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a1:a2:78:37:57:76:1c:22:2a:85:1a:4d:05:10:52:f1:7c:
a0:44:ff:e7:84:1c:d3:07:57:53:45:da:10:16:45:99:fc:be:
61:4c:69:64:7e:24:dc:f7:b5:26:bb:5e:8e:cb:27:4b:dd:7b:
13:09:1b:b3:96:0a:4b:75:a4:15:ea:81:2a:70:f8:63:e3:30:
a2:12:37:eb:02:c4:bb:cf:39:53:c8:70:c9:9e:4a:bf:f9:a9:
6b:fd:01:14:cc:9e:be:eb:95:cb:c6:ae:a8:72:50:cf:64:80:
11:a2:e7:80:f5:90:44:87:98:a1:6b:9e:48:b2:99:15:82:69:
44:f7:f3:aa:ef:ec:15:c7:e8:a7:c3:62:c8:f7:b3:d4:bf:6b:
e6:45:8a:00:55:6d:b4:c8:06:3b:dd:89:52:67:0c:ff:92:c7:
80:5e:08:e5:28:2b:83:07:bb:84:6b:99:ad:a0:8d:88:dd:24:
54:82:10:73:91:bd:37:32:e2:31:31:53:de:63:bc:93:90:3e:
bd:44:1c:d4:89:3b:80:5c:d2:50:b5:b6:98:7b:2a:a8:9c:5a:
0e:d5:3b:55:05:9b:77:a9:d8:14:eb:4d:0d:c0:d1:9f:3e:03:
d4:8d:4f:94:bf:c2:b1:c7:d5:d5:f0:99:8e:01:50:2d:0b:7d:
b5:ea:52:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:45 2025 by rpki-client