Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: bw5DoWZswDjJB8ugEjV9KAU++qEL7J6UbY7MCPbSMOc=
Subject key identifier: 4E:D0:86:91:F5:CE:94:63:CF:84:C1:76:EF:A9:D1:35:39:09:AD:27
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019896A4E21DCE903F117A5F50CB9E6FA09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 1148
Signing time: Mon 11 Aug 2025 01:00:44 +0000
Manifest this update: Mon 11 Aug 2025 01:00:44 +0000
Manifest next update: Tue 12 Aug 2025 01:00:44 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: 28U6iF58ZUEg1xzxselDdiaee6RzzXL3Vm2tVPAsI5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:e2:1d:ce:90:3f:11:7a:5f:50:cb:9e:6f:a0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Aug 11 01:00:44 2025 GMT
Not After : Aug 12 01:00:44 2025 GMT
Subject: CN=4ed08691f5ce9463cf84c176efa9d1353909ad27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:b7:dc:63:e3:ed:15:32:f8:20:2e:26:aa:
98:61:50:8e:79:0e:b9:90:62:74:37:7a:f4:84:ad:
90:15:4b:d2:b5:42:e4:e2:98:e8:eb:b3:b6:26:e2:
11:ba:57:2b:71:a5:dc:45:b6:75:e3:61:30:99:55:
db:90:c3:9e:07:cc:a7:26:b5:ac:b2:38:b1:91:86:
11:14:9e:5e:da:23:de:26:e6:7e:e8:ca:ee:89:61:
f5:06:aa:1c:17:d2:e1:c7:b5:52:17:04:32:fb:93:
49:ec:15:d4:e8:a1:06:23:15:d1:40:01:41:b0:61:
11:e6:c9:ba:a7:f7:d4:ac:de:75:e8:bc:fc:2e:43:
b1:ee:a2:00:05:11:f2:a3:76:4e:42:8d:27:1f:d2:
84:83:5f:2b:ee:78:86:c4:3b:c0:69:80:94:47:4c:
3e:e1:a3:84:37:39:9b:3b:0e:45:db:ba:63:aa:a9:
44:99:87:fa:78:96:2d:ca:b0:62:4b:29:f7:a5:df:
43:10:27:f5:8c:8b:d0:86:1c:56:24:e5:6a:40:62:
b4:f5:b6:e1:9b:e9:80:b5:e5:8e:2b:a8:59:e0:ae:
0f:d6:79:cb:74:f3:f5:4f:4a:b4:d4:13:20:1d:6c:
a4:53:1a:c0:86:9b:99:a6:85:ba:b2:6d:fa:9f:1d:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:86:91:F5:CE:94:63:CF:84:C1:76:EF:A9:D1:35:39:09:AD:27
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6c:80:97:61:02:c5:1d:af:d8:38:c8:b7:76:5e:a4:14:02:
63:2b:09:f6:7a:c2:93:41:2d:61:74:e6:66:07:21:d7:f9:4c:
31:5c:42:12:03:56:af:cc:e6:e1:37:71:72:2c:23:2d:0e:e8:
ab:71:81:82:85:70:ff:3e:72:82:03:35:6d:6f:9a:72:5c:39:
f2:38:58:0c:e9:cd:81:50:2b:5a:5b:35:f9:95:d6:47:85:8b:
f3:40:f5:3e:97:20:f2:f1:56:b9:3e:cb:de:79:82:74:97:f5:
55:6a:f3:4a:89:44:0b:b8:7f:4b:7e:27:6f:a7:7c:bc:b3:45:
0c:b4:91:68:dc:d5:2f:cf:61:f2:74:25:86:81:27:37:24:27:
47:43:4d:73:eb:9b:50:29:6f:ff:3c:26:2d:7d:a8:be:31:e7:
18:3b:33:d4:b5:49:67:bf:b9:4e:5c:50:05:39:42:30:b2:4f:
2e:fd:9d:6c:e1:91:9e:78:c0:97:01:b1:04:2e:51:c5:27:fb:
b2:9c:91:58:e8:98:9f:0d:e9:9a:e9:cf:09:b1:f7:c0:79:d5:
52:bd:8e:5a:e2:4f:0e:64:6e:ec:bf:74:8c:9b:63:f4:bd:bc:
9d:3b:0b:32:dc:5c:25:f0:f7:54:fc:97:e0:11:b2:aa:fd:af:
52:6c:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:32 2025 by rpki-client