Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: 7AH7lTmI/s+1OhKYvEr68/CiJYrwhJs59/OmE8F2V6Q=
Subject key identifier: 20:90:8A:53:A7:15:E3:F0:C1:A9:4C:DC:9D:59:4C:15:5C:78:74:A2
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 0198A1CD6F092B31FD25520899BB514E3DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 047E
Signing time: Wed 13 Aug 2025 05:00:51 +0000
Manifest this update: Wed 13 Aug 2025 05:00:51 +0000
Manifest next update: Thu 14 Aug 2025 05:00:51 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: dS1EnAtKFB6FDlTdUQMmeFXfWsOC2YwF2AGAJoRmSvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:cd:6f:09:2b:31:fd:25:52:08:99:bb:51:4e:3d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Aug 13 05:00:51 2025 GMT
Not After : Aug 14 05:00:51 2025 GMT
Subject: CN=20908a53a715e3f0c1a94cdc9d594c155c7874a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:43:94:9b:41:62:8d:d2:7b:7a:0f:48:de:
a6:73:39:fe:77:aa:72:e7:f5:4f:5c:19:c2:6d:4f:
cf:4f:b2:b4:c5:58:22:53:04:54:3e:3e:df:bf:2c:
91:be:ca:c8:16:71:17:63:cd:b8:4b:6b:77:dc:c5:
64:fe:ca:25:17:41:66:4d:e1:5c:bd:14:77:ec:01:
7a:1f:7f:db:b2:eb:e7:01:4f:08:31:ef:f9:38:d3:
ea:e1:5b:57:13:66:0f:d0:4b:29:a0:b1:d4:e7:a4:
bc:73:0e:5a:d4:a6:b1:36:bc:9e:cd:bd:f5:5e:d9:
12:27:09:6b:e7:0c:10:47:c1:d1:0c:18:a8:fe:95:
01:ee:57:bc:92:43:94:2a:31:91:b5:98:9a:f9:ac:
05:b2:7f:d7:da:7b:3f:34:98:37:1d:5f:ea:2e:f4:
b4:af:7f:4e:54:c8:7e:fb:33:7c:64:9c:ff:4d:f8:
b6:f4:38:d5:c8:0e:f2:1c:60:ed:aa:e7:9e:66:d2:
78:8c:af:08:ba:a7:0c:50:7a:92:3c:c6:81:45:3b:
c0:f8:6b:e1:59:a8:d0:2f:7d:b5:24:7e:24:3e:0e:
71:36:00:c2:aa:d9:bc:c7:10:f9:4d:30:a0:ce:1c:
34:0e:0a:0e:91:ed:a0:25:39:79:d9:7c:0b:54:02:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:8A:53:A7:15:E3:F0:C1:A9:4C:DC:9D:59:4C:15:5C:78:74:A2
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7d:b6:12:f0:1f:2a:5d:40:b8:d4:4e:d6:82:3c:36:ac:ae:
3e:d1:21:2d:21:6a:f3:f0:0f:1c:d9:93:00:b4:45:dd:53:2e:
07:3a:02:97:81:94:2b:5c:68:af:97:8c:f2:9b:f3:45:3f:de:
86:08:65:b2:ad:d2:f4:16:de:00:51:54:67:92:20:15:e4:d8:
1f:08:ab:6b:fa:33:10:d5:f6:4a:64:64:39:62:18:80:48:9f:
88:e2:97:a3:29:c7:93:3b:10:c2:1b:51:25:ec:e2:aa:45:81:
65:e8:66:71:b7:83:58:83:95:9c:57:40:07:2d:9e:dd:5a:b5:
ac:4a:86:c7:21:8e:e2:cc:b6:ff:a5:2f:df:bd:2f:3e:f1:e4:
9a:04:e0:2a:dc:bc:13:b6:87:c2:26:6a:75:c0:bb:73:31:fd:
41:ad:65:5f:e4:93:e8:42:80:e2:d5:e2:00:eb:0c:9e:e0:c6:
06:2f:37:84:b3:15:4b:ea:53:1f:8e:b3:9c:92:20:0e:06:5b:
9f:66:b7:e3:40:e3:2e:ba:10:80:c6:ce:d9:c3:08:cd:4c:b9:
25:4c:47:5c:53:d1:c4:db:61:26:d3:eb:f8:51:83:12:69:8a:
25:3c:e6:ea:54:35:fc:81:20:f8:b2:f4:d4:b8:01:bc:8b:2c:
d8:95:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:59:14 2025 by rpki-client