Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: aIQDO8UOjK9oVtlBOIGK498pbIQo6HtMslkZk60RI4o=
Subject key identifier: EB:07:4A:D0:BF:DD:10:6B:49:EC:A1:23:D9:96:35:5A:04:22:C0:83
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 0198C610888CA2A88134060063421FEA5F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0563
Signing time: Wed 20 Aug 2025 06:00:28 +0000
Manifest this update: Wed 20 Aug 2025 06:00:28 +0000
Manifest next update: Thu 21 Aug 2025 06:00:28 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: +8jk0grO6dzIVQFTXbmM1acVfTdYyEv3kuJu3Uwmnms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:88:8c:a2:a8:81:34:06:00:63:42:1f:ea:5f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Aug 20 06:00:28 2025 GMT
Not After : Aug 21 06:00:28 2025 GMT
Subject: CN=eb074ad0bfdd106b49eca123d996355a0422c083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:82:90:2e:c4:ce:a2:fb:13:9e:f1:78:93:
4c:fa:2d:4e:05:84:8d:65:49:6c:bc:19:0d:69:ec:
4b:98:df:69:21:c1:a8:16:cd:55:d0:16:e2:59:a1:
c4:4f:f7:e9:bf:f7:71:26:00:34:76:a1:1b:45:95:
42:25:37:86:b0:da:ca:94:7e:26:11:9c:26:d3:fa:
40:94:64:8e:61:71:1d:a5:07:31:af:13:2b:a6:51:
d7:53:0a:2f:20:8d:af:a4:47:c5:c1:8a:06:bf:81:
74:ae:f6:d0:4e:8a:72:85:f4:73:ee:21:24:c6:ca:
aa:70:47:cb:3d:e2:34:11:6e:d1:7b:c0:c6:e7:ad:
11:b2:65:ce:19:7b:13:9d:83:e9:de:42:9b:a2:20:
3e:42:e4:df:3e:ad:b6:27:c1:da:dc:fe:10:a5:2d:
14:0e:e7:1e:50:17:b1:6c:bc:3d:aa:52:7f:13:a1:
de:54:0c:6d:ff:bb:20:90:45:cc:03:5f:67:8d:99:
f3:f8:3a:23:52:70:ab:a6:77:37:d7:7e:83:74:b4:
c9:11:e5:89:52:06:ef:48:7b:61:d3:77:b2:e1:8c:
99:78:83:ef:41:b8:79:f3:bf:a0:67:c6:31:81:a3:
95:70:14:33:ea:5b:76:5a:88:b2:85:fe:e7:a8:0d:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:4A:D0:BF:DD:10:6B:49:EC:A1:23:D9:96:35:5A:04:22:C0:83
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:b8:d4:ac:fa:2e:b2:95:07:83:f9:29:bb:37:05:2b:66:
19:f8:98:f8:02:fb:d4:62:8f:0a:aa:f9:19:63:be:30:9f:16:
97:a6:4b:31:78:c0:5a:08:38:92:f9:83:1e:01:7c:6e:a0:b4:
06:89:26:e0:e2:9e:14:81:07:eb:2d:42:cb:59:b9:1f:cd:6b:
b9:88:1b:f0:56:07:20:db:7c:93:90:c7:75:ec:10:ae:5f:d1:
de:59:a2:c7:56:7e:79:a2:f2:31:68:f1:2f:34:0e:5d:1c:74:
34:d5:18:9d:29:75:de:f6:01:fe:30:40:4c:55:b5:cb:13:b7:
43:84:10:55:bc:ee:f3:5f:24:5b:50:30:6e:8b:2d:5a:16:e4:
66:25:08:33:09:3e:bf:b7:ec:5c:65:41:8f:18:08:7c:95:c0:
60:44:d2:a5:34:dc:49:85:ac:a6:ff:e8:a7:96:43:24:cf:52:
c4:5b:05:b2:28:59:44:ca:c9:fd:0e:4c:dc:35:ee:13:11:87:
0e:4e:74:44:30:78:43:c3:ff:0c:8d:d9:13:38:c6:f6:f0:54:
2a:5e:48:bb:19:fe:6b:8f:fb:9c:cc:7f:2c:e3:89:cb:70:f2:
45:f5:1b:06:81:80:f2:4f:3c:d6:66:34:0d:db:b7:62:d4:f5:
95:7f:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:28:14 2025 by rpki-client