Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: LRASeQIObYwLVeIYzKcX8UIdRnC5+JTrKA92w+9y30o=
Subject key identifier: A7:15:40:7D:EA:C7:B7:6B:30:E0:00:0B:E1:42:A5:3C:43:84:8B:6E
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 01988FC74498BF820E0DE134F987776150E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 0A97
Signing time: Sat 09 Aug 2025 17:00:57 +0000
Manifest this update: Sat 09 Aug 2025 17:00:57 +0000
Manifest next update: Sun 10 Aug 2025 17:00:57 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: WHoXNDZga1eSlbE0KRi8boTEEd7FKKxi9cYt2Ylh5+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:44:98:bf:82:0e:0d:e1:34:f9:87:77:61:50:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Aug 9 17:00:57 2025 GMT
Not After : Aug 10 17:00:57 2025 GMT
Subject: CN=a715407deac7b76b30e0000be142a53c43848b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:aa:da:3f:67:5d:9c:75:79:7f:96:d1:0d:
d9:f8:fd:2c:92:88:5b:92:dd:4f:05:d7:72:75:76:
47:40:71:dd:98:49:e2:fb:37:6b:69:fd:70:c1:4e:
b7:4a:29:68:d0:f7:00:14:a5:74:a5:32:47:12:2e:
15:03:a1:40:43:09:15:fd:ab:68:53:58:5a:d2:e7:
c1:0d:0d:a9:4b:f0:43:c2:cb:15:f0:9c:5e:8d:fb:
77:88:27:74:b4:33:39:17:b9:19:d8:0f:f3:ac:b7:
62:92:80:25:11:71:71:b2:b4:39:7f:d8:35:7d:18:
f2:25:a6:36:00:f5:fc:81:40:c1:05:1d:28:37:46:
cf:a7:0e:2d:a2:c4:3f:6c:28:cf:f5:d5:c9:52:5d:
e3:6f:11:90:c0:a6:15:5d:ad:38:b3:bb:d8:ac:d3:
22:14:d2:3f:67:12:07:48:52:07:25:26:8a:c4:bb:
6d:89:fe:6a:6c:49:79:98:dd:07:70:e2:ed:75:50:
cf:b2:28:eb:99:f7:02:d1:25:77:f0:9d:e7:47:50:
cd:3f:3d:da:c7:97:1c:ce:38:da:11:5f:15:c8:a4:
d3:9a:e5:c9:69:74:22:ec:6f:99:54:cc:dd:53:5e:
cd:78:a8:26:e0:11:d9:d0:ec:62:0d:2a:48:1a:e2:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:40:7D:EA:C7:B7:6B:30:E0:00:0B:E1:42:A5:3C:43:84:8B:6E
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1f:ac:fc:17:b9:9a:a1:ac:e8:32:ca:2c:9f:45:e0:92:24:
8e:e8:f0:e0:bf:e0:a1:19:28:78:b5:91:f1:d9:29:48:86:89:
c7:bc:0b:67:cd:47:6b:3e:c9:71:17:3f:ef:e3:f5:35:37:af:
12:07:18:20:65:7a:75:52:95:f7:64:0a:3c:be:20:02:95:80:
cf:77:b7:94:94:c2:82:b7:17:37:d3:ce:5e:ff:e0:81:a4:3f:
09:d8:b9:8f:3b:2a:5f:f3:e9:de:1e:0d:f4:a7:79:1c:f9:0e:
df:b3:ca:03:c5:89:d8:7a:17:4f:73:3c:c9:0b:26:ff:d1:51:
39:d6:81:a3:22:1c:93:04:59:cc:e9:ea:40:e4:17:7b:52:8d:
57:fa:f8:e0:60:e2:b9:3c:43:dd:3a:24:26:31:93:15:ca:f2:
2f:d4:f2:0f:ef:6d:69:e2:49:33:81:03:02:56:d4:fe:83:9d:
a7:7a:94:75:67:12:88:4c:d1:16:fe:00:70:dc:62:18:ff:e0:
fe:b3:b8:82:81:1d:fb:d3:f6:f9:d6:e3:a4:4e:a3:c7:8d:30:
b1:7e:8d:54:ec:57:ec:a4:21:e2:34:15:22:81:a6:ad:38:65:
54:31:d0:31:d7:99:3e:1e:ce:64:d0:c8:ab:f6:22:3f:8a:94:
85:ac:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:31 2025 by rpki-client