Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: j649akv5ki1Bsc6m1ZMROd8jCMV7ycIfRnAW8aAwl/M=
Subject key identifier: 81:82:43:F9:CF:73:4D:17:54:A0:13:1F:8D:B9:B7:93:C7:D7:E2:9F
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019891ECBC2AF8D12E24EF4A6C92CCB3C1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 0342
Signing time: Sun 10 Aug 2025 03:01:07 +0000
Manifest this update: Sun 10 Aug 2025 03:01:07 +0000
Manifest next update: Mon 11 Aug 2025 03:01:07 +0000
Files and hashes: 1: iO6OOltzYSW2yZ_5E85X-P4mF_0.roa (hash: 2XDE+mCyZurCdSAHCb4+FLC8SwOf/SeiDXoheU8dhOI=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: 1dOfT9pH9fFg/eCRG5U4gcFF0wrvfEhBxOrnie2Sar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:bc:2a:f8:d1:2e:24:ef:4a:6c:92:cc:b3:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Aug 10 03:01:07 2025 GMT
Not After : Aug 11 03:01:07 2025 GMT
Subject: CN=818243f9cf734d1754a0131f8db9b793c7d7e29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:2c:d0:9e:b1:6d:81:61:a7:7b:dc:c1:1e:
aa:7d:ea:68:66:4c:a6:2d:82:fd:3b:2e:1f:9b:91:
f6:be:e8:96:ca:35:73:f7:a8:4c:a4:9a:bb:06:77:
a5:8e:80:a5:41:66:87:d7:fb:13:c6:18:8c:d7:b0:
a8:e0:0b:e6:3c:f1:a2:f5:d8:dd:90:ad:38:1b:83:
47:f2:ad:4e:69:2c:f9:29:81:d3:66:60:b4:bd:30:
53:f2:2b:e5:52:a7:6d:d3:7e:bc:fb:fb:c2:c9:4f:
fe:d2:d6:22:6a:28:68:76:75:7c:c3:48:8f:8b:7d:
f8:ba:d7:2d:13:b6:2c:7d:95:0e:c5:b3:91:a0:0d:
51:75:70:e0:1a:31:75:63:1d:6e:86:33:02:cb:d3:
0d:dd:0e:e2:4b:68:31:bc:f7:af:cc:1e:96:fa:21:
c2:17:6a:c6:a2:41:3e:a9:7a:17:c8:54:ad:32:3c:
46:e7:8f:e6:da:43:84:df:25:af:ea:45:05:06:79:
ec:1b:f6:80:af:28:27:cb:77:43:c4:9e:85:56:3d:
e1:3b:4e:74:ab:3e:07:56:8d:5f:d9:7c:1a:29:de:
b0:21:f7:e1:28:0a:69:7a:0e:41:be:8e:d0:d6:ec:
40:74:e5:e3:74:ea:80:37:5f:1c:61:9a:19:e1:a9:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:43:F9:CF:73:4D:17:54:A0:13:1F:8D:B9:B7:93:C7:D7:E2:9F
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:30:18:7e:b1:ee:1d:d4:36:df:be:ad:07:35:20:fb:9a:79:
66:21:48:45:80:80:38:87:79:45:7a:ad:02:96:d3:32:eb:9e:
2e:96:b2:d2:7a:d3:cc:79:c1:56:86:3f:fb:4e:c8:69:c3:c0:
5b:c5:e8:1d:53:06:dc:d7:dc:3a:7f:3b:38:81:32:b1:30:9c:
6c:3d:c9:30:a7:81:0f:8f:19:7b:1f:dc:22:49:66:e6:f0:5e:
71:09:04:9c:1e:d5:18:8a:ac:2c:b9:f4:3f:3b:5b:83:b2:2c:
03:85:87:67:1c:0f:88:57:98:ff:57:c8:5d:d2:72:dc:a7:1b:
45:80:13:40:af:82:89:d8:31:36:df:c9:c9:d1:4f:b9:58:5b:
be:39:e4:2a:a1:05:f6:6f:92:f4:bb:d9:57:95:b0:c6:a5:e3:
41:eb:e4:f8:7c:c1:60:80:7b:d0:3b:b7:2b:a2:bb:c1:ef:83:
a3:5e:c0:8f:dd:e0:9b:c9:f4:3b:a6:11:ff:ec:58:52:78:9a:
c1:d9:41:84:30:87:a1:df:28:f0:7e:7f:d5:86:06:28:2a:86:
b2:79:a4:95:ff:e8:f7:23:fe:bb:9d:70:f6:ba:3d:8c:72:80:
bb:42:be:9a:c7:6e:75:5f:5a:ba:58:e2:d9:95:26:28:96:48:
a6:59:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:27 2025 by rpki-client