Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: YyXcOvWJabvl+WoURwB4HY7VtDlIVtlGcrteUiWEgSY=
Subject key identifier: 40:44:3B:4C:8E:46:3D:72:28:29:BE:28:A6:26:2A:8F:25:E6:F7:36
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 0198A34E22E380652C85083DA930A7AC95C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 05D2
Signing time: Wed 13 Aug 2025 12:01:03 +0000
Manifest this update: Wed 13 Aug 2025 12:01:03 +0000
Manifest next update: Thu 14 Aug 2025 12:01:03 +0000
Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: AAX58O1Xb246dh9qJoB8twtORL6RmgY4X06yILUEP7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:4e:22:e3:80:65:2c:85:08:3d:a9:30:a7:ac:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Aug 13 12:01:03 2025 GMT
Not After : Aug 14 12:01:03 2025 GMT
Subject: CN=40443b4c8e463d722829be28a6262a8f25e6f736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:0c:8f:03:09:96:41:7a:c7:10:64:f2:e9:
33:da:86:81:cc:e4:49:63:4a:be:ad:81:b2:b8:ac:
bc:a2:75:3d:b4:76:b5:31:8c:e5:b8:ca:6d:77:54:
fd:cf:a6:28:a6:fc:65:3a:c3:59:7b:03:77:a2:ca:
55:e8:9c:d2:05:7a:d7:df:23:72:81:77:7c:7c:da:
d8:40:13:0f:83:22:a6:96:ec:12:a0:ac:6a:e0:25:
4c:3e:b2:29:bd:70:9e:93:f1:d5:ef:f4:2f:17:b5:
a8:74:e4:92:0b:81:fb:a0:ac:74:ee:b8:c3:77:7d:
42:c9:9e:e9:29:7a:1e:d2:b1:a0:0f:c6:0d:db:d5:
f9:08:71:60:7c:7a:8c:fb:bd:ec:74:53:66:c8:0a:
fb:80:ad:38:51:3d:13:a9:3c:bd:50:4d:8b:f5:e8:
56:76:4c:f1:14:4e:9c:59:32:84:28:28:a0:c6:8d:
8a:cb:fc:51:b4:c2:dc:01:b9:c4:38:cb:3e:4e:0d:
41:69:36:c3:de:0b:c2:8a:30:5b:4d:2c:65:e2:26:
de:ba:b3:45:b3:96:22:1d:63:9d:2a:9a:91:01:26:
5a:18:30:68:43:1b:77:5e:3b:33:82:3b:ed:6e:77:
a2:1c:dc:ed:1d:1a:a7:c3:48:eb:22:59:52:64:e0:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:44:3B:4C:8E:46:3D:72:28:29:BE:28:A6:26:2A:8F:25:E6:F7:36
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:25:bd:24:75:ee:42:22:7c:e4:18:c4:4e:c9:2b:80:e5:af:
cf:d3:c2:30:cc:f6:35:90:c0:52:b0:ba:08:0c:38:e6:d3:27:
b2:e5:83:5b:b8:54:24:d3:6c:d4:af:0f:58:58:10:8f:9a:a4:
3d:df:32:40:c8:06:06:69:ea:08:24:30:21:58:f0:8c:89:9a:
4b:18:9e:15:32:aa:24:b2:df:c5:4a:86:ef:c1:a0:69:bb:6c:
dc:47:a4:6b:35:bd:83:9b:3b:d9:6e:34:17:ff:7a:0f:c5:99:
a4:af:aa:38:72:c0:fe:01:a2:41:85:77:44:cc:01:b2:93:34:
f5:78:d8:fa:a4:72:53:5b:a8:a9:17:5a:e5:42:36:d9:bb:91:
1a:11:0c:25:67:86:7b:77:0a:91:01:2e:a8:ca:a9:44:5c:9d:
d1:df:f4:8b:cd:59:75:b0:ec:70:f9:e3:a8:94:58:d0:34:70:
3f:ca:c5:92:ce:00:9d:f9:0e:3b:10:4d:28:34:13:19:51:0f:
6a:6b:ee:c5:91:3c:39:7f:62:a2:ba:ab:b0:17:c6:4e:b3:5e:
b3:cf:9e:f0:17:79:ab:f4:51:99:7c:0a:43:59:34:60:1b:bf:
fd:67:a6:f2:72:3a:45:5b:78:19:b3:f6:89:22:11:22:64:05:
ff:84:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:40:34 2025 by rpki-client