Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: 5S8y0Ti7Jv2nQID3eXTN8UYg31prRHbKecwQztJ6gbk=
Subject key identifier: C8:3C:1A:43:50:B1:44:0E:DD:B4:DD:CF:6C:A6:46:0E:C2:85:4A:F0
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 0198A04CE212FCAE66C92372BCA84F2892FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 22:00:49 +0000
Manifest this update: Tue 12 Aug 2025 22:00:49 +0000
Manifest next update: Wed 13 Aug 2025 22:00:49 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: GMhQwzPB6XdXgsgdFmV9PHHG/QdhSHMqIXukh24Dhjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:e2:12:fc:ae:66:c9:23:72:bc:a8:4f:28:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Aug 12 22:00:49 2025 GMT
Not After : Aug 13 22:00:49 2025 GMT
Subject: CN=c83c1a4350b1440eddb4ddcf6ca6460ec2854af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:97:12:1c:2f:88:29:71:4f:6b:7b:58:f2:
20:32:8f:80:dd:79:df:70:10:e7:47:99:7a:de:76:
95:98:e1:72:95:15:24:70:46:d3:9e:38:ec:b7:b3:
41:ce:7c:66:d8:7e:bf:13:d9:75:2e:69:f2:b6:c2:
c6:89:da:ef:02:cc:44:0c:21:61:74:b2:b2:a6:c5:
86:8e:a2:b2:ee:ad:e7:74:36:6d:a9:30:a9:cb:e9:
c2:1e:80:72:69:d8:9e:29:b8:ab:58:89:69:83:c4:
4b:22:4e:00:e5:b2:03:1a:f5:83:dd:8d:45:4a:5c:
57:38:a0:aa:6a:8f:65:96:3a:4b:18:e2:36:f9:2c:
50:80:e6:74:d6:66:6d:25:2a:c7:b1:9d:b2:ec:2f:
0e:bb:98:2b:5f:0c:f7:18:2b:ee:4e:f2:e5:19:c6:
10:f7:10:5f:a5:23:fb:53:00:3b:12:3f:21:71:57:
5c:dd:03:28:34:93:b4:5f:52:bb:ac:11:6e:ad:42:
c5:68:13:ea:f2:9b:54:e9:1d:20:c0:bf:b4:8a:22:
12:2b:04:57:af:da:af:94:8a:a3:9c:71:ce:b4:71:
68:b6:89:fe:ba:33:73:2a:9f:17:8a:35:e8:8f:09:
61:5e:2a:87:5e:6d:6d:a7:f0:54:c5:23:6e:0c:5e:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3C:1A:43:50:B1:44:0E:DD:B4:DD:CF:6C:A6:46:0E:C2:85:4A:F0
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3c:7e:9b:cb:b5:e1:c4:5e:87:6d:83:09:e2:cf:33:8a:4a:
9d:c3:da:cb:73:a7:95:9b:c0:0f:62:a1:9b:4b:38:f5:40:de:
5f:7b:8f:40:6f:1a:c2:c3:06:84:fc:9d:c4:fe:e1:23:b0:2d:
69:54:cc:26:1a:ec:24:1c:4d:fa:b7:9e:4c:03:56:6f:9b:4e:
9a:3b:62:45:ed:32:98:fe:e3:a6:5a:30:b9:97:0d:7f:84:3b:
06:50:9d:fa:0c:45:2e:ab:a7:f2:cc:98:ca:0c:f8:f6:9c:46:
03:05:13:65:cc:8b:4a:4d:0c:8d:7d:a2:a5:94:dc:b8:d4:a7:
36:a0:19:89:39:0e:40:ea:37:7b:04:1d:10:49:34:ab:51:de:
55:44:64:ce:41:b3:91:e9:96:ad:41:7a:98:9b:0a:c2:74:29:
50:d1:a9:c8:48:4f:bf:2f:7e:1c:a8:4e:9c:11:2a:fb:79:f2:
a6:fb:28:43:32:e1:7a:74:75:bd:0f:b6:2b:cb:98:76:2f:e6:
51:be:71:79:fa:ef:56:c1:ce:c3:4a:33:46:30:31:20:06:b5:
1b:de:ba:fc:f5:b9:48:e3:14:7d:22:4e:e2:08:ff:e3:ce:c7:
fc:66:20:bb:c8:1c:d8:8f:af:30:6d:81:72:36:7b:fc:1d:06:
88:3d:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:51 2025 by rpki-client