Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: M5XdxYT9vFGandgE5GJkgbUOBwHWlXi5ibW9MkjYPyw=
Subject key identifier: D9:1B:56:CC:D5:F4:04:5E:0E:3B:90:7E:D5:81:CC:FD:F5:A8:3E:74
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 0198868D309036AD0033DDD3E675BF589A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 22:00:56 +0000
Manifest this update: Thu 07 Aug 2025 22:00:56 +0000
Manifest next update: Fri 08 Aug 2025 22:00:56 +0000
Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: 2gz4IXNcw/WkHz1woLRKmqw9orRQFA/KK/e/bvUkI/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:30:90:36:ad:00:33:dd:d3:e6:75:bf:58:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Aug 7 22:00:56 2025 GMT
Not After : Aug 8 22:00:56 2025 GMT
Subject: CN=d91b56ccd5f4045e0e3b907ed581ccfdf5a83e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:fa:cc:38:ff:c7:e0:3e:21:de:f2:7f:b6:
1d:8f:c8:81:02:93:7a:1d:3e:7f:53:05:77:8a:40:
ea:d3:55:5f:9c:da:f8:f7:a2:29:b6:1a:ae:dc:f6:
6f:29:ae:bd:2b:0c:ec:9c:c7:b9:1d:1c:30:4c:6f:
1a:bd:f3:fb:49:3a:cf:56:a2:6c:1d:ab:37:62:f7:
f4:76:31:6a:c9:56:1a:80:9b:ae:9b:ec:af:88:11:
54:3e:e3:4c:6b:4c:4e:4a:ba:69:a2:c7:32:34:b5:
ab:5c:7f:91:a7:7a:9f:81:36:92:97:bd:ae:27:54:
79:0d:b2:74:23:1b:ad:84:4d:74:69:d4:c1:88:27:
fa:91:1c:c3:2d:aa:c2:5c:ee:23:fb:91:9a:9b:4d:
f2:93:d1:a2:05:e0:4a:81:4b:4a:57:4c:a2:01:c6:
92:24:f8:99:25:42:e4:74:2b:f8:69:f8:a1:af:35:
94:1b:86:3e:e2:05:ca:a6:0b:92:46:ea:06:d8:be:
8e:b8:c9:f4:fc:09:75:29:19:05:41:b4:0d:8a:c2:
18:29:53:69:bc:db:dd:83:e9:af:b7:90:95:22:4d:
c4:9d:bf:09:a6:b1:0b:52:fd:8a:e3:ce:64:ff:00:
f9:82:e4:79:54:e9:56:e6:c5:5c:24:e8:80:a2:e2:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:56:CC:D5:F4:04:5E:0E:3B:90:7E:D5:81:CC:FD:F5:A8:3E:74
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:13:8d:14:63:09:d6:dc:79:42:33:bb:81:4b:4e:f8:1e:da:
c1:92:14:16:8a:12:fe:6f:ba:2d:67:0c:ae:99:57:44:75:43:
e9:5b:66:0e:0c:26:4a:3f:41:eb:55:66:5f:3e:e8:6f:48:a8:
b7:4b:9f:4b:08:3e:ed:f6:d0:c9:a7:0c:8b:28:83:ed:c5:fa:
ef:48:1a:fd:b9:ea:e3:1f:6c:79:a8:45:36:d0:d8:75:08:53:
16:94:df:d8:61:12:8f:22:dc:03:a4:94:32:64:5d:d7:b0:10:
2f:67:20:bc:42:c5:8a:b2:4c:8c:06:f9:5c:45:58:dd:1f:5e:
3a:52:5a:9b:65:20:8b:c8:97:9a:2a:3c:de:4a:22:80:55:de:
ef:c3:64:8a:41:12:f7:00:84:7b:05:12:ae:95:0b:a4:e2:1c:
07:43:5a:37:98:5e:16:f5:f7:e3:1d:0d:93:51:b4:f2:fa:d5:
90:58:fa:ad:67:af:d4:81:47:97:b6:76:da:4e:e2:11:1e:d7:
75:b7:fa:5d:cf:71:41:ff:5a:06:65:1d:ba:91:07:28:39:bf:
39:c3:83:90:d6:ba:4a:15:ec:f9:f6:48:76:3c:c7:3f:d1:34:
71:ef:75:82:b8:17:67:a1:b9:9c:da:af:6c:71:6c:5e:43:c5:
48:2a:53:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:23 2025 by rpki-client