Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: 56BwgfLRU8ZymovBHkQOic3la5TQmp5xuBLce8C0SjI=
Subject key identifier: AE:01:6B:DC:B7:95:99:C0:FF:69:07:E4:F6:D0:72:5E:8C:5E:25:F5
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 0198A04F0567A0265AEC027DAA9FB5527C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0C2B
Signing time: Tue 12 Aug 2025 22:03:09 +0000
Manifest this update: Tue 12 Aug 2025 22:03:09 +0000
Manifest next update: Wed 13 Aug 2025 22:03:09 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: 8JNCrOmOIIStiyXFRg6LwK4qAx4h9aJtiGFMgcysTRw=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4f:05:67:a0:26:5a:ec:02:7d:aa:9f:b5:52:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Aug 12 22:03:09 2025 GMT
Not After : Aug 13 22:03:09 2025 GMT
Subject: CN=ae016bdcb79599c0ff6907e4f6d0725e8c5e25f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:67:a6:02:14:69:34:db:86:d3:49:c2:1d:
0b:8a:0d:23:86:b5:ed:88:8f:52:1e:5c:57:1b:9f:
28:dc:0d:6e:79:e6:b6:34:56:56:16:d0:9e:2a:26:
33:04:d4:2a:25:20:58:9e:35:57:2b:23:8a:01:88:
ec:34:5a:0a:69:7f:34:59:e8:1b:4d:a5:2b:f1:e4:
42:eb:66:57:40:94:17:c7:5d:24:3d:2c:b6:16:4b:
e8:53:17:ed:c1:f6:1a:1e:b5:0e:63:fe:70:d1:96:
27:18:e4:b4:3c:c8:63:91:2b:02:1e:a4:05:99:e5:
6a:09:58:c4:87:6f:c1:8b:96:95:27:69:f8:69:ea:
ec:0a:c6:03:e1:fc:d2:8e:d9:21:04:ec:5a:77:ad:
42:e2:2f:25:cd:14:f7:fb:a8:c7:d9:f0:99:7f:00:
6b:e9:a2:0e:52:17:74:a6:ae:59:05:03:13:ad:a0:
22:23:c8:62:c2:50:5b:98:3d:f0:a6:80:e0:ba:e6:
44:b5:19:d8:71:34:6f:87:ca:e5:bf:f8:84:19:ee:
c5:bc:57:ab:ce:09:eb:b8:2e:6b:54:98:2d:ed:d0:
d1:dd:77:9f:45:59:90:84:99:c4:14:cf:5c:82:04:
ec:ec:3c:46:9f:1d:17:ab:b8:f0:33:e6:7b:e9:7e:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:6B:DC:B7:95:99:C0:FF:69:07:E4:F6:D0:72:5E:8C:5E:25:F5
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:31:f9:01:c0:5b:ff:48:5f:2b:4f:9a:65:4a:a1:b3:8a:74:
96:05:25:2b:5a:a0:ec:ac:8a:15:52:5d:a7:c2:4a:d4:93:99:
c1:42:6d:c4:50:a8:9a:3e:4c:db:2d:87:06:87:2c:c9:da:80:
bd:43:84:e5:91:94:9b:52:13:6f:51:7a:84:7e:93:46:57:e2:
53:c1:1e:45:9d:21:92:c5:2b:ad:bb:58:30:4e:8b:2e:77:8e:
94:89:16:e4:dd:4e:3e:3a:90:75:29:02:59:95:ed:6b:91:b0:
45:e2:52:41:a2:bc:60:36:df:dd:f7:a8:6a:3c:f2:33:e6:6c:
2c:e6:a5:41:0f:63:89:93:b7:04:56:cb:df:d8:7e:e9:2a:56:
d0:53:b2:26:d0:fa:aa:52:f3:21:45:48:73:d5:36:ec:86:55:
b7:e6:ac:c7:9d:90:62:28:ed:e1:68:5b:8f:8d:e9:b4:41:99:
0a:73:1b:c7:8e:65:e1:da:d3:10:7c:cc:08:e2:fc:66:65:a7:
4a:89:11:d1:52:5f:fb:a5:d7:0b:04:02:d0:5d:4c:4b:4b:40:
58:07:9f:e3:7b:9a:88:4b:95:a8:36:2d:c0:96:1a:7a:cb:29:
29:28:35:8e:b6:af:de:c0:64:3f:91:40:81:d9:fc:d6:bb:08:
6a:e4:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:49 2025 by rpki-client