Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier: 3oi9VFpCv+o9M9PTroEWCms2OVu47PJRsqUcA+Qvq+A=
Subject key identifier: 26:1D:2B:D4:75:F4:7A:67:BA:F4:A5:C7:6E:6E:9B:D3:E2:61:3A:81
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 01988B0F003765242879074A1BD8DCA9F259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number: 0A86
Signing time: Fri 08 Aug 2025 19:01:12 +0000
Manifest this update: Fri 08 Aug 2025 19:01:12 +0000
Manifest next update: Sat 09 Aug 2025 19:01:12 +0000
Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: XDTcGbM7EhYWKE7vlwh8EgMjmxmkl76hF5C2pQn6WII=)
2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:00:37:65:24:28:79:07:4a:1b:d8:dc:a9:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Aug 8 19:01:12 2025 GMT
Not After : Aug 9 19:01:12 2025 GMT
Subject: CN=261d2bd475f47a67baf4a5c76e6e9bd3e2613a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:76:b6:73:3b:c0:9f:a1:d0:1c:b7:33:4e:
48:99:f3:b4:31:e6:59:e2:e8:d4:6c:81:1b:ff:88:
6b:48:6f:d9:87:b2:b5:ee:5e:8e:d3:0d:2b:75:87:
53:05:38:92:80:9e:a8:e4:13:d4:6c:4c:90:f1:bf:
b5:b1:25:02:17:67:ea:58:f2:2e:69:1f:e2:bb:95:
c8:4f:d4:4c:56:e8:37:15:cc:1c:f7:ac:aa:93:2b:
10:1d:45:ad:04:a8:21:1f:96:28:e5:f5:bb:d8:19:
7e:7a:cf:ac:61:15:e3:83:32:04:93:f7:0f:b3:be:
42:7b:5e:09:42:66:d7:65:9a:db:e6:e2:ae:7b:3e:
ef:a6:42:e3:10:ba:3f:91:42:60:01:86:c2:fb:cf:
34:62:27:95:5e:9f:13:69:0c:f4:c4:41:6a:83:4c:
a3:5b:e6:dc:23:e7:77:e4:a0:b4:b2:3a:b6:a4:08:
00:e5:d1:c6:2c:89:07:b5:fa:7e:6d:cf:d6:8f:83:
37:9c:da:70:d7:21:c7:9b:df:23:6c:b2:92:e1:81:
be:a6:2a:89:f4:5f:5d:77:61:1d:49:c9:ad:b2:7e:
e3:67:d3:5e:9b:36:b1:b0:f4:16:f6:b8:b6:8f:62:
5b:c6:1a:24:8f:87:81:9f:ab:0d:d0:a3:15:c3:e1:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1D:2B:D4:75:F4:7A:67:BA:F4:A5:C7:6E:6E:9B:D3:E2:61:3A:81
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:68:0d:74:98:53:5f:34:d7:ca:a0:a5:27:71:3f:08:7e:62:
d8:3b:4e:fe:81:9d:7c:b5:cf:0a:06:f4:64:f0:32:0a:89:8d:
c8:d8:3f:a5:24:bf:fb:59:7d:dd:ab:c8:22:ea:c0:86:3a:38:
e4:dc:d8:af:0d:d2:ca:2f:78:54:20:6f:f5:f2:96:f4:e1:20:
0c:59:19:33:9b:e9:90:f2:22:dd:46:0c:ab:76:88:85:e3:6d:
90:29:77:e5:c1:1e:77:91:16:e1:96:af:1a:fa:76:41:ff:e5:
2c:fd:71:f5:04:1e:a1:8a:e6:04:46:8b:f3:b5:5d:e9:f9:e5:
9a:67:1f:ff:08:59:f7:cc:f0:e0:38:69:b9:42:ab:4b:49:34:
d1:92:88:7b:2b:99:7c:94:b2:2b:7a:e8:62:01:1b:cc:4a:66:
c4:e0:bd:66:c7:01:fc:73:9d:4c:43:6b:d0:1b:dc:e9:13:3b:
a7:d7:ad:83:06:12:c6:c0:36:55:69:5d:65:26:cb:81:80:88:
29:4d:90:e4:bf:81:07:37:9f:4e:25:ea:af:ef:0c:09:25:64:
76:35:52:c5:6f:56:81:77:fe:a3:81:b4:97:a3:e2:d1:e7:36:
2a:5e:41:17:d8:da:30:3a:ab:ba:42:f6:0c:bb:98:71:d0:e4:
fc:52:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:25 2025 by rpki-client