Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: sUAWIWsBamvt4eKYo2L0QzbG1Nql8yl1op0888DkzSM=
Subject key identifier: 80:0C:AB:63:B3:94:13:87:A2:D3:35:55:33:24:2C:AF:DD:10:AD:B8
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 019875D201EABB2266B023158C73CD902853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 02D8
Signing time: Mon 04 Aug 2025 16:02:33 +0000
Manifest this update: Mon 04 Aug 2025 16:02:33 +0000
Manifest next update: Tue 05 Aug 2025 16:02:33 +0000
Files and hashes: 1: 1-mbK63EZxL8v4V6vFmj_lwXzRxM.roa (hash: JWU55a5ri6Rn4UB9DqsCMDblGiRbnZJJXlkoHYetX7A=)
2: tUPB9TmrvRG46ngHubaYKYvn04E.roa (hash: rsksbLJqTJnjomTHQ1GVXbsT6pXd/mYYQ2loIuCMTYg=)
3: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: HL45/PYw1kcLvFoW0qlGBdBS2W970m2mmBLzjRgELII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:01:ea:bb:22:66:b0:23:15:8c:73:cd:90:28:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Aug 4 16:02:33 2025 GMT
Not After : Aug 5 16:02:33 2025 GMT
Subject: CN=800cab63b3941387a2d3355533242cafdd10adb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:4f:13:2f:5e:a0:c3:34:d3:3d:29:b6:6f:
77:27:61:5a:eb:95:ad:65:37:a1:7c:c6:18:70:70:
da:a6:3b:20:89:78:59:e1:d6:38:6e:6c:55:14:11:
c3:88:ab:08:cd:ca:00:01:c0:b9:e3:9a:da:a3:65:
3b:0a:5b:eb:56:de:6d:5c:c7:e2:7a:aa:1d:5e:1c:
24:dd:31:0f:ab:45:4d:3f:e8:cf:7e:42:aa:e4:11:
da:71:c5:e1:b6:4e:c3:ca:00:68:3e:4d:1b:3f:bc:
18:64:5a:0d:ee:8f:03:8b:17:28:89:eb:91:bc:43:
b3:d2:5c:22:82:c9:b2:4a:86:4f:43:1a:91:77:cb:
0d:50:f0:22:ad:ef:91:5a:75:95:09:40:6b:68:a8:
a6:e7:7e:16:a6:02:1f:44:91:cc:80:0d:19:2e:03:
22:03:a1:2d:ab:2b:30:04:c1:26:ed:84:50:07:ff:
02:72:28:e1:c1:1a:8c:c3:79:5f:03:88:9f:bd:32:
54:a2:e9:5d:c6:50:6b:77:b2:66:b9:e9:e9:4f:c5:
16:60:dc:f7:6b:02:42:9e:fe:85:5d:79:94:fc:65:
da:28:40:a4:87:97:dd:e6:e4:fa:fd:07:c4:4b:4d:
d4:5f:aa:f6:25:e7:21:96:38:0e:6c:08:eb:96:f7:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:AB:63:B3:94:13:87:A2:D3:35:55:33:24:2C:AF:DD:10:AD:B8
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bb:1e:83:5b:f7:62:7a:b2:aa:89:80:e2:4d:9d:77:1d:e2:
36:e7:01:79:c8:63:b3:d5:41:2d:03:20:27:04:e2:36:65:a5:
35:5b:a9:c2:c1:2a:29:b4:a8:20:cf:5b:05:6c:0a:a6:1d:d7:
cd:56:fc:74:f9:d3:64:e0:40:4b:a5:92:c4:85:9e:fc:fb:fd:
43:72:b2:78:fb:39:eb:dc:f0:f4:06:ab:1a:36:c0:8a:4d:cd:
91:bb:7e:f1:3e:cc:e6:ea:83:cb:39:83:ab:ee:27:1c:4a:ee:
3e:c1:0e:03:75:f1:3d:af:0a:36:30:87:1c:68:f8:e1:4a:8e:
ba:29:24:2e:d0:9b:6c:83:90:af:3a:5d:a8:0b:4e:3d:05:9a:
fe:4c:9c:20:a4:51:b8:73:94:92:50:11:b3:72:ee:dc:cd:b5:
29:50:90:56:68:49:2a:96:95:14:57:98:f4:53:fc:19:15:a9:
e5:12:d2:48:9c:2a:be:81:4b:16:56:7f:ff:51:89:61:c2:12:
53:3e:67:6a:21:6c:9d:a9:36:18:46:49:b0:12:97:92:e2:a6:
ae:4f:92:14:a6:4a:e0:9e:07:9e:a9:ed:75:b2:7e:e7:7b:76:
b0:05:fa:25:83:8e:20:a5:a8:b4:8a:89:5e:9d:f1:d5:e2:80:
03:85:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:00 2025 by rpki-client