Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: lAaF8jfvCl2YfGYyF9H9qgeTovmBW+PQPK5SKXC6DwU=
Subject key identifier: B5:0C:E9:08:D7:4C:21:86:9A:6B:D1:23:BA:34:79:EC:D3:3C:98:C8
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 0198C75BB90A862105623A6B022B1057681E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 02AF
Signing time: Wed 20 Aug 2025 12:02:13 +0000
Manifest this update: Wed 20 Aug 2025 12:02:13 +0000
Manifest next update: Thu 21 Aug 2025 12:02:13 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: 4EAr4sbXzEA9ISmt7sRo27K/0Ox9nWWeoi4NmkF0448=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:b9:0a:86:21:05:62:3a:6b:02:2b:10:57:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Aug 20 12:02:13 2025 GMT
Not After : Aug 21 12:02:13 2025 GMT
Subject: CN=b50ce908d74c21869a6bd123ba3479ecd33c98c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:0d:be:05:46:7f:b7:b2:8b:f9:21:12:2d:
d8:28:4b:0a:1d:e2:e5:5f:e9:b9:58:ca:c9:84:ca:
64:46:dc:11:27:f9:33:11:8a:a5:a7:ac:27:f7:b2:
0c:dd:83:5c:f1:0b:6c:4c:17:0b:90:d4:9e:45:80:
21:b3:e9:12:80:0d:28:f4:20:27:86:99:00:8a:d3:
1e:bc:4d:d5:4a:54:93:a5:c6:f2:d2:5a:7d:a0:31:
16:47:30:52:88:2c:f5:a5:43:fa:92:38:f4:f0:8d:
44:fc:bc:f4:24:e6:6b:20:ec:cb:04:3b:21:5a:b4:
dd:0e:19:bc:f6:24:3b:85:11:dd:1d:10:2e:79:e1:
7b:00:ca:29:65:9c:32:22:d6:9d:f5:be:94:e9:61:
57:dd:44:8f:83:18:60:8b:3b:23:fe:0a:b8:21:03:
28:ca:9e:18:da:48:e6:de:6c:a1:26:37:12:e5:6f:
b9:0a:ec:59:37:12:6b:20:00:f9:e5:22:88:89:78:
c7:19:96:7f:e5:82:57:99:aa:ea:7e:d0:ab:4f:41:
d8:84:7b:66:b5:8c:a4:69:c8:18:0c:0d:2d:31:e4:
6f:76:10:9d:0f:9b:b0:27:fd:6c:5c:01:0e:22:ec:
2f:fe:2d:77:94:10:b1:36:09:86:37:dd:d6:26:ab:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0C:E9:08:D7:4C:21:86:9A:6B:D1:23:BA:34:79:EC:D3:3C:98:C8
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:24:3c:4b:e2:62:73:cb:e7:4d:b9:48:26:8e:26:cf:46:ea:
9a:7d:0c:fb:6e:27:ce:4d:04:98:35:66:9f:39:24:56:7c:26:
8b:13:9c:1b:b7:45:ec:96:d4:b4:0a:93:ba:50:d8:b3:d8:2f:
ae:fc:e5:bd:4c:a1:61:49:bb:07:41:f7:25:54:79:4f:7a:6b:
36:04:17:ec:34:82:55:f1:c4:be:80:f8:22:0d:c0:13:3b:16:
b8:87:53:34:20:c1:51:8c:85:f6:17:0a:15:00:ad:21:3e:37:
96:aa:64:e9:2c:88:5e:b5:7f:34:9e:1e:24:5b:bb:97:0c:42:
b3:b7:63:45:b1:30:d3:b6:92:25:08:ae:06:fc:d1:df:13:bf:
f9:98:01:00:52:5e:2b:0a:e0:a5:61:9c:31:f8:1d:12:db:dc:
05:94:af:53:b9:1b:81:1b:44:1c:38:98:2c:3b:8d:b6:4a:42:
16:3c:9a:e9:7a:c1:ef:2b:42:bf:ca:c5:5b:61:99:2a:23:f8:
ed:e6:ab:40:dd:40:d2:59:50:56:d8:90:6a:7e:5e:8c:a2:ea:
8d:d2:64:f8:71:2e:75:b8:04:e1:58:2b:e4:0e:72:60:09:d4:
e4:ce:7a:d2:1d:32:54:b3:b6:07:aa:61:77:9d:3f:86:8d:ed:
97:d3:72:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:27:13 2025 by rpki-client