Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: sjL6F4bP9pQXS/2bmppxeuqHlrmY2G+boSltUmG9x0w=
Subject key identifier: 4F:5F:4F:0A:76:FA:4B:8B:06:70:2D:C0:B1:2C:28:2F:92:ED:9D:F7
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 01987AC0423AB60C575604B608AC2D1D3A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0697
Signing time: Tue 05 Aug 2025 15:01:16 +0000
Manifest this update: Tue 05 Aug 2025 15:01:16 +0000
Manifest next update: Wed 06 Aug 2025 15:01:16 +0000
Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: +E1v80A/s3KA3Go3AuB84LIMmQTl9z41goSNa3WHQkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:42:3a:b6:0c:57:56:04:b6:08:ac:2d:1d:3a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Aug 5 15:01:16 2025 GMT
Not After : Aug 6 15:01:16 2025 GMT
Subject: CN=4f5f4f0a76fa4b8b06702dc0b12c282f92ed9df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:78:15:90:0b:f7:33:52:94:31:d3:63:73:
4e:f7:db:30:a1:27:1e:81:b6:e5:3f:54:4d:dc:5f:
9a:85:3f:6e:b8:c2:44:e0:32:ad:57:2b:7a:07:a3:
a5:62:0e:10:bb:7f:e3:f1:25:92:65:73:29:33:1a:
18:df:19:0d:67:a1:a1:0a:98:88:ca:52:bf:ce:40:
e1:b2:0b:c3:89:5f:b9:a6:73:88:a9:64:88:9d:c8:
a9:ed:6f:76:7f:3a:43:b7:36:08:01:6a:dd:70:d0:
b3:a0:2a:99:3b:58:ca:1b:e0:26:b5:7b:8a:21:4f:
42:57:3b:6f:bc:aa:76:da:4b:5e:48:66:35:74:bf:
5f:31:42:e2:78:04:f2:45:ad:6b:98:c4:29:ca:64:
f3:b3:9b:81:f6:75:98:81:cd:63:0f:10:b3:1f:df:
3c:87:cf:47:33:43:89:b6:38:b8:59:10:e9:8d:05:
11:c8:ff:fb:a9:18:5b:bc:dc:1f:13:9b:09:50:5b:
0b:f7:f0:3b:67:ea:b9:51:f9:f9:b5:1b:91:a0:04:
cb:79:72:d9:dc:69:75:ee:b1:43:7c:88:36:cf:87:
a1:67:cc:27:d3:8b:0c:61:6c:a8:e8:69:d9:5d:dc:
39:bd:c7:39:45:9e:13:2c:4d:43:db:9b:91:14:e0:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5F:4F:0A:76:FA:4B:8B:06:70:2D:C0:B1:2C:28:2F:92:ED:9D:F7
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:24:78:79:07:40:94:9f:30:c0:db:74:c9:89:6d:2e:e5:47:
45:52:86:7a:c5:e7:e4:a1:59:58:ad:1f:6e:a8:1c:91:eb:16:
f3:c1:c7:bd:d3:4e:f9:54:a2:ee:9c:e8:04:19:67:0c:39:1f:
06:5e:22:72:47:52:ee:ca:e1:86:65:7e:ac:2f:d3:d7:32:60:
a3:c6:be:5c:96:09:bb:54:73:87:36:8c:47:e4:16:4b:27:95:
e9:dd:63:22:0b:e3:56:34:6c:1b:36:72:34:95:bc:d7:ad:30:
71:9e:72:3f:3a:ff:4c:a8:f3:29:24:55:c0:2b:01:ab:38:d5:
65:e0:db:c5:ef:44:76:cb:e2:06:6e:a3:4b:03:0e:d7:18:54:
e0:39:cb:7e:82:cc:f2:4d:20:46:33:ef:24:3f:f1:d7:10:40:
41:1c:1f:ad:a5:4d:07:ca:d6:d2:33:e3:86:1d:91:71:fd:b3:
ad:a2:f8:05:dd:e5:82:7e:9f:85:3f:a2:6e:a2:3b:2e:9f:b3:
9f:c3:b8:e6:e1:ed:e6:ee:73:9c:09:7a:90:87:de:b4:38:64:
64:b6:1a:99:cf:f8:9a:10:c4:11:ee:7e:4f:42:aa:39:6d:f9:
97:d8:02:c2:9c:8e:4e:c2:ef:89:82:d1:b8:85:62:09:d5:e9:
5b:70:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:49:02 2025 by rpki-client