Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: B3EGTSr9k/h9vOM1Bl2ZAyWXOAC4zQP8a+CAdMsWPs8=
Subject key identifier: 6B:B8:32:81:A1:2F:C2:A5:46:DB:B1:08:74:2C:56:22:98:03:A9:0D
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 01988DD9478CE23DED100A87274B7FC0D1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 037F
Signing time: Sat 09 Aug 2025 08:01:23 +0000
Manifest this update: Sat 09 Aug 2025 08:01:23 +0000
Manifest next update: Sun 10 Aug 2025 08:01:23 +0000
Files and hashes: 1: luS_MUgmzdMuGS76ZPW7jEugNFA.roa (hash: zmYIzq2i+Cnfy8rt1xmt5c6X8SNFIcSJe0+Xd9kMxgE=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: YU7bmJGNyEKDc0Y6jVPgSJ8b4w2V2Xwmbi7kBgvaeRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:47:8c:e2:3d:ed:10:0a:87:27:4b:7f:c0:d1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Aug 9 08:01:23 2025 GMT
Not After : Aug 10 08:01:23 2025 GMT
Subject: CN=6bb83281a12fc2a546dbb108742c56229803a90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:aa:6c:51:b6:0c:23:93:cd:c8:07:2b:1b:
31:a3:2d:42:49:3e:e7:0a:f0:b2:66:4f:37:c2:1b:
40:10:a4:83:d8:77:35:af:c9:fb:b9:5b:0b:52:96:
19:54:42:21:32:6b:d9:a2:a3:86:11:83:7a:f2:81:
d4:0a:3a:70:8c:f7:d4:f9:70:9d:01:c9:95:9e:76:
ad:54:99:84:82:72:ff:e0:96:39:65:55:c9:0d:98:
07:03:9f:05:d4:9f:21:de:a2:9f:56:ea:52:24:c3:
52:7a:00:a4:99:4b:02:c4:a6:8b:83:50:f3:48:8a:
8a:54:86:09:f4:8a:56:cb:3f:02:fe:71:d0:69:20:
75:a1:e7:3c:47:4f:76:9c:8e:ab:10:b6:9c:d6:5f:
39:cc:22:ec:4a:1c:cd:54:48:c5:14:9e:01:19:93:
7b:04:22:de:23:af:dd:e7:21:a7:f7:bf:17:97:46:
20:74:de:fd:0c:f9:70:fd:12:d3:48:ab:9e:0d:60:
b7:73:07:8f:63:e6:3d:2b:02:d8:12:87:7e:93:ae:
fc:86:63:f5:8c:38:fc:c5:8d:1a:26:1d:f7:00:7a:
88:28:7c:dc:4e:c2:fe:1e:3a:87:6f:68:9b:59:4d:
e5:15:d0:a5:b9:42:6b:aa:6e:6c:ad:99:ac:67:3c:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:32:81:A1:2F:C2:A5:46:DB:B1:08:74:2C:56:22:98:03:A9:0D
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:32:b1:b5:d1:cd:04:72:57:a5:18:32:0f:c5:52:c5:2f:ee:
b7:22:f2:b5:00:58:44:88:4a:db:b4:d4:69:f9:55:ce:46:86:
2b:91:24:1c:3d:e0:49:d8:f7:31:2a:b6:70:2d:32:88:c1:dc:
06:58:0d:2c:98:3a:e7:50:52:08:02:7a:54:1f:b9:26:0f:71:
33:f4:da:98:16:24:3e:19:ed:96:ef:51:c9:60:37:7d:e5:34:
ac:cf:11:1e:0d:f6:63:74:3f:4f:45:03:fe:6b:9a:35:c2:4f:
b6:d1:7f:8f:ca:5d:00:ab:95:35:9c:99:bf:f0:d3:f7:71:34:
a4:08:af:47:2e:7f:0e:35:43:6b:d0:34:6c:e8:2d:d6:a5:fd:
4f:fb:45:6b:e9:79:2f:d8:90:80:f1:a4:0c:df:0b:04:23:de:
38:f9:e4:2d:f3:9b:3e:8b:42:a0:00:76:a8:5e:1c:cb:de:2a:
9b:23:73:83:29:38:4a:77:74:2e:0f:8a:c0:f1:65:e3:57:31:
ef:85:cf:98:c5:8c:e9:42:41:1b:2c:cf:85:14:32:e1:4b:bb:
91:63:f0:8c:f5:bb:ca:8e:75:7b:1b:71:4c:1e:45:41:78:f8:
4b:c8:cc:bc:b4:1b:1a:da:8d:9c:75:7d:8e:a6:a9:e0:27:6c:
92:93:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:13 2025 by rpki-client