Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: 9HRTZRFPl2U7AiO/Np1+D061m9zjyjEkZzGBbCOtgHg=
Subject key identifier: 8E:A1:36:68:DB:57:8F:D3:BB:65:85:7F:78:24:48:ED:B5:1D:34:63
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01988B0EA017328857155A6C8FA0D0394A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 1627
Signing time: Fri 08 Aug 2025 19:00:48 +0000
Manifest this update: Fri 08 Aug 2025 19:00:48 +0000
Manifest next update: Sat 09 Aug 2025 19:00:48 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: z20ZbTG6g0tYDomVvjzjxLexi71xYHOPxAoPgNVtE8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:a0:17:32:88:57:15:5a:6c:8f:a0:d0:39:4a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Aug 8 19:00:48 2025 GMT
Not After : Aug 9 19:00:48 2025 GMT
Subject: CN=8ea13668db578fd3bb65857f782448edb51d3463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:9c:4c:1c:a4:26:32:e7:cb:23:14:81:6f:
d3:76:63:b8:1d:6f:89:34:96:bb:89:39:55:9c:f4:
e5:29:69:b2:27:c7:2d:dc:79:50:43:db:5c:8a:fb:
eb:35:7c:79:95:6a:a3:0b:83:87:e4:af:2a:f2:c1:
90:14:6b:91:25:b6:d1:c3:3e:30:4a:41:88:9a:f2:
67:e9:f0:51:32:52:0f:0d:be:5e:ae:18:d9:9c:e8:
b9:d1:1d:60:2a:df:4c:03:9f:cd:0d:7b:d8:93:65:
0f:cd:d6:84:be:e3:0d:53:9f:02:f4:50:1f:dd:a9:
29:39:e6:02:e4:04:bf:69:1e:d5:cc:44:aa:47:61:
e6:9c:dc:ce:53:96:3b:93:9f:7b:28:ba:db:12:e3:
ff:b1:40:52:ba:d6:6d:69:08:c9:58:05:47:59:51:
85:c7:2f:90:12:d4:d6:81:ab:6c:a6:71:e5:98:ae:
ed:72:14:6c:a0:91:d4:0f:35:e8:73:5e:eb:69:b4:
de:22:60:2a:56:f4:64:c4:d4:d2:b4:bd:11:44:a3:
09:d8:3f:65:58:5f:cb:bf:ad:c0:fe:bf:47:c9:69:
1f:3c:6d:3c:80:b7:73:86:20:7e:91:2a:7d:1b:cd:
70:fa:b8:0f:5e:b7:ac:21:88:21:45:a3:52:60:8a:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:36:68:DB:57:8F:D3:BB:65:85:7F:78:24:48:ED:B5:1D:34:63
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9b:7c:4d:80:cc:20:c6:20:9a:e0:ea:a1:1c:1c:fe:25:38:
30:33:7c:8d:1a:89:77:04:58:55:50:da:fc:fc:5d:52:4a:e1:
42:66:ef:ca:c4:7b:ec:1a:6a:37:f9:b4:73:31:0b:62:4c:96:
b7:33:a0:ec:8a:27:a3:ff:92:11:5c:02:09:63:8a:fe:3a:37:
4d:95:d1:b4:bf:d3:13:44:1c:73:b3:2c:43:82:2e:0f:8a:2e:
21:02:01:2d:0c:aa:32:6d:74:9d:22:63:b7:2a:4c:d5:f0:a9:
01:59:f8:e3:e3:58:04:ed:a9:8f:fc:b6:de:3e:f3:d7:8d:7f:
dc:4e:66:26:09:2a:f4:cd:93:a4:ef:ec:85:9d:d7:c4:c9:14:
94:d8:09:07:c9:a5:96:67:95:8b:0a:95:a4:b2:bc:cd:12:9b:
33:60:d2:1b:bd:21:39:de:1f:b9:02:fb:2d:f2:16:91:cf:86:
9a:41:a1:bb:79:dc:df:aa:be:92:80:4b:f9:6e:e5:73:94:84:
3f:27:0d:4c:1f:a9:f4:68:c7:4c:aa:80:f5:bd:b8:3f:81:29:
0e:c1:49:1e:26:d8:84:91:99:a9:cf:73:d8:c9:b4:2d:68:b1:
c3:0a:99:f1:ef:0b:1d:74:a3:c1:ca:9d:6a:c1:16:60:58:60:
6e:61:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:07 2025 by rpki-client