Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: 8EVVopJxvagmsfs6HAK0ltoF/OFKhzVihQUSzRSro+o=
Subject key identifier: 68:75:FC:B2:50:76:CF:56:62:B4:C2:A9:0F:24:96:1B:EF:CD:1C:59
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 01987E9C92BB7362496BC50A0B109BB99EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 0BD6
Signing time: Wed 06 Aug 2025 09:00:47 +0000
Manifest this update: Wed 06 Aug 2025 09:00:47 +0000
Manifest next update: Thu 07 Aug 2025 09:00:47 +0000
Files and hashes: 1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
2: qQtVwx26Q11uVtNfnJzbmJUlIFc.roa (hash: Us6KZhFay/pkNMEXF/JAjIY/J6B0ztmxrmyXEzSbCqU=)
3: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: h583E2WzlMC7d5NETe7tkUojyThlEwFMNL8RqCT+LmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:92:bb:73:62:49:6b:c5:0a:0b:10:9b:b9:9e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Aug 6 09:00:47 2025 GMT
Not After : Aug 7 09:00:47 2025 GMT
Subject: CN=6875fcb25076cf5662b4c2a90f24961befcd1c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:f7:a4:63:1d:24:53:61:53:c2:9c:8f:90:
0c:14:43:cc:9b:c6:87:9e:b2:bf:5e:0a:a7:6b:a8:
ee:bd:f6:e6:70:62:70:07:48:86:39:a8:a0:70:3b:
1d:ef:55:0e:e1:30:c9:a8:3b:5b:4f:a6:45:aa:9a:
33:5e:6d:66:b8:29:59:15:28:c3:e6:9a:60:13:e9:
43:49:10:90:6f:60:a7:7a:e2:91:b8:38:f1:34:38:
38:ea:b4:92:00:de:c3:eb:a6:1c:c9:16:02:24:75:
db:29:59:74:38:56:1b:8d:1c:8a:c0:da:f3:0c:32:
17:c6:3b:9c:bd:12:fd:26:66:b1:53:f0:94:9b:2d:
09:49:1a:61:f2:73:40:a5:cf:31:b3:d0:69:91:4a:
4b:42:89:35:ff:0c:48:ab:2d:6a:ec:aa:f7:ae:ba:
fb:4f:56:0f:59:09:78:7e:97:7d:64:40:a5:37:0e:
d6:1c:1d:19:8a:e4:cb:83:83:2f:57:14:7d:e3:f0:
cd:12:32:f4:95:18:7b:83:f0:63:61:df:da:b4:7f:
7d:09:85:25:2f:99:6c:17:ff:4d:04:6d:69:bc:07:
24:21:84:da:da:1a:b8:9e:83:d3:ff:9c:c1:46:66:
fe:e8:6b:c1:b0:43:58:8a:90:a7:19:8c:3b:ff:00:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:FC:B2:50:76:CF:56:62:B4:C2:A9:0F:24:96:1B:EF:CD:1C:59
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6f:d8:20:c3:8e:60:19:57:7a:2e:ed:cb:ca:37:1b:23:7d:
b3:5a:41:0f:36:ba:d0:df:16:1a:99:b3:f6:92:67:7d:64:10:
18:11:4a:43:9e:11:e6:25:12:85:68:23:60:a5:d6:dd:4a:6c:
83:e9:bf:8c:27:14:cf:40:06:3b:c3:6b:bf:ab:7f:90:91:b8:
dc:e4:63:4a:5c:a4:cc:55:5e:35:ff:b8:41:50:c4:fa:24:d5:
8c:0a:24:1c:3c:b1:b8:ef:11:79:6d:2a:f3:5e:cd:be:33:34:
0d:9a:0e:49:6d:75:1f:e7:08:1b:62:3a:ae:54:f6:0d:60:53:
18:e9:09:e1:2e:be:91:09:db:1a:f0:91:59:a0:b6:fb:05:1b:
d8:bc:80:53:a4:8e:f8:56:f5:e2:fc:46:86:04:4d:55:34:24:
49:2c:c3:5b:67:25:62:e1:e6:14:7c:f4:1f:93:13:4d:5a:80:
ca:ce:25:18:20:d8:a0:30:31:01:39:44:54:53:05:74:c5:bf:
fd:c0:6b:ae:90:be:21:fe:c4:57:32:56:26:93:dd:0d:e7:15:
b4:d7:99:23:81:4e:06:7f:a1:32:f3:40:43:71:8c:e3:56:30:
c7:8c:25:19:eb:57:6d:71:5e:8a:37:42:34:01:e5:02:2a:61:
e7:eb:8c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:49 2025 by rpki-client