Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier: esVmtTlXXh7x9po2u6rCOZh+KdL5k7AYcsoghPJi9+U=
Subject key identifier: D2:B4:5A:E0:1A:AF:EB:0C:74:65:8E:9E:5F:60:75:77:D8:D0:10:B3
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 01987450AB152619D56CCFB1FA17D9F1D4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number: 1611
Signing time: Mon 04 Aug 2025 09:01:40 +0000
Manifest this update: Mon 04 Aug 2025 09:01:40 +0000
Manifest next update: Tue 05 Aug 2025 09:01:40 +0000
Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=)
2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: +yqon0j769gpQs+5MqlIfjwZ6PAC6eiSYSv98dvDrhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:ab:15:26:19:d5:6c:cf:b1:fa:17:d9:f1:d4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Aug 4 09:01:40 2025 GMT
Not After : Aug 5 09:01:40 2025 GMT
Subject: CN=d2b45ae01aafeb0c74658e9e5f607577d8d010b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:26:68:03:f6:37:f0:a8:74:5a:9a:af:19:
dc:5f:92:f7:97:31:c2:b9:4a:5c:ee:b7:d4:79:bd:
db:a6:4f:e6:0c:35:e8:a1:8c:e1:19:4a:e6:ee:ce:
01:04:00:c3:2d:a6:46:4a:f8:81:b0:9e:b6:1a:b7:
d8:89:9f:22:a7:0c:fe:d6:4b:45:b9:3a:ab:c5:45:
03:3a:4a:2d:a7:70:80:6f:86:04:92:be:02:65:a3:
d8:9c:7c:9c:70:73:82:16:dd:a0:10:ee:d1:c6:f1:
07:a2:6e:92:b6:2f:0d:2d:9a:5a:c0:a7:3f:9a:c5:
93:ed:b9:56:4e:67:b6:f3:14:bf:ea:f6:af:9f:97:
0c:51:be:a9:fa:dc:27:e7:b7:08:df:55:64:51:77:
eb:3a:ce:86:39:fe:6f:5d:76:e6:06:3f:2c:5b:f0:
a8:9c:68:dc:3b:28:0d:cb:76:93:ef:9c:24:17:ac:
c5:3e:bf:7b:c5:cf:f0:dd:d9:18:b5:e0:63:0d:b8:
85:8c:5c:a1:a3:53:8f:a7:42:44:41:26:6d:a2:02:
78:12:d7:00:2b:fe:fe:14:e6:3c:09:9b:2f:41:02:
79:90:10:56:42:81:01:93:94:70:49:26:f7:35:71:
fe:3b:8b:de:61:60:18:0e:8e:34:a7:84:f4:53:90:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:5A:E0:1A:AF:EB:0C:74:65:8E:9E:5F:60:75:77:D8:D0:10:B3
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c9:54:30:da:b9:a2:20:02:0b:fe:55:b0:f9:fd:48:04:bd:
4c:56:84:58:ae:83:d9:30:fe:6f:d3:c9:f2:58:0d:33:9c:c8:
b7:13:ef:c6:fe:4b:9a:4f:d5:7e:cc:3d:8b:c4:bd:6b:b6:00:
71:b0:6f:4e:ab:b1:5f:26:80:fc:c9:b6:1e:7d:62:d7:82:ce:
e7:cb:da:ab:2a:71:a3:5d:bb:b7:4a:5e:b4:87:5a:61:ba:e7:
d1:5f:6c:a7:fa:09:e1:6f:ec:99:99:08:ea:d5:29:fb:51:1e:
d6:b0:49:43:87:dd:93:c3:86:02:73:7d:74:ea:cc:c4:53:5e:
87:7a:57:68:53:6b:b9:7a:0c:3a:84:ab:54:1b:2b:64:cc:f1:
c0:bf:69:45:6e:4f:60:d9:a2:68:28:5f:4a:23:72:8e:a1:dc:
14:4e:2c:97:02:8f:61:29:da:42:a1:24:df:eb:f5:35:45:8e:
22:59:cb:a1:f3:4c:3b:99:ae:a5:dc:dc:c6:3e:40:00:92:53:
a0:ca:36:34:ff:44:84:ca:28:d2:d6:2e:f2:6b:56:04:c6:5e:
05:56:0b:fd:de:0a:03:b4:36:ff:f8:e6:c5:30:cd:56:16:36:
03:bd:63:4f:57:ac:41:0e:c1:93:44:de:b4:b7:67:8c:29:cb:
0a:32:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:54 2025 by rpki-client