Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
File: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft (raw, json)
Hash identifier: 0NWrb+emwCMSVbSCktx+octqWRuF1i5FXSPrMYay6v0=
Subject key identifier: F9:45:09:68:56:DC:C6:1C:D0:5E:A8:11:E7:C8:2D:41:C1:CE:EA:DC
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 01988CFECDBAF25F5BDD2B3F6C45446E5502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 04:02:45 +0000
Manifest this update: Sat 09 Aug 2025 04:02:45 +0000
Manifest next update: Sun 10 Aug 2025 04:02:45 +0000
Files and hashes: 1: 3Pz5apja5cKJYgXJqXnfQrYcWDc.roa (hash: tS0StXV35H98QzpAWS3J2vqaI9c0cKyaGDVnVfsQlWI=)
2: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl (hash: dTIZ/q26PGL1nXRlO2Em8qM9NmCdOkiMMkJHjBCDEhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:cd:ba:f2:5f:5b:dd:2b:3f:6c:45:44:6e:55:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Aug 9 04:02:45 2025 GMT
Not After : Aug 10 04:02:45 2025 GMT
Subject: CN=f945096856dcc61cd05ea811e7c82d41c1ceeadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:31:88:ca:3a:52:29:4a:72:4d:d8:59:8b:
2c:7f:6e:39:df:0f:ac:05:f3:11:2b:4c:3b:65:c1:
48:69:26:91:00:cc:57:ff:1b:b4:5b:10:3b:3a:da:
e9:23:fd:ce:98:13:0b:46:8f:3c:89:be:56:aa:fe:
db:83:ff:7c:e6:a3:c6:6f:6c:f4:73:ae:2d:84:18:
78:54:71:4e:38:d7:8c:5f:e0:79:d0:cb:24:a5:26:
7e:84:4e:a8:96:7a:80:cc:32:e2:e1:24:ba:15:e9:
d1:0f:bf:40:5d:4f:c9:73:ae:b1:db:75:61:3f:63:
1e:92:34:40:f3:35:3e:58:cc:45:d1:6b:9e:3c:69:
18:e1:3f:c3:5a:a1:ce:13:39:38:3a:36:ae:51:46:
03:37:da:fc:64:7d:c7:3f:86:7d:67:f4:16:f2:93:
2b:e9:04:ee:33:88:9a:fc:11:37:02:30:50:61:14:
da:48:76:08:54:9f:44:3f:5d:c4:a2:da:1e:5b:c0:
de:f1:9e:92:13:40:83:37:59:2c:ba:97:5f:81:a9:
c4:49:bb:04:e5:17:5c:a1:51:6a:d8:75:be:a3:5f:
62:f4:a1:50:d0:b7:89:4a:51:c1:52:18:53:7d:4e:
06:9a:b4:17:fd:6a:5a:7c:66:98:16:9d:29:7b:fd:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:09:68:56:DC:C6:1C:D0:5E:A8:11:E7:C8:2D:41:C1:CE:EA:DC
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:41:51:f8:38:a6:5f:98:ff:e0:a2:d2:18:e7:b9:27:6f:95:
bb:f7:68:8f:32:51:11:1b:fb:89:43:1f:b9:f2:24:60:76:aa:
f5:b8:2b:ab:51:25:e9:16:63:b5:ea:a0:0f:98:37:a1:53:ac:
3a:9a:99:f3:34:97:2e:1d:38:7e:16:cd:9f:17:47:31:bd:e2:
7a:13:f5:a6:09:76:da:47:ec:39:21:c8:e7:27:25:29:83:ca:
47:2a:f9:b8:1c:db:a5:23:1f:43:d3:96:c0:6e:60:80:2d:1c:
fb:52:d1:40:49:01:73:9a:12:3e:d7:11:71:d1:f2:02:e6:42:
e1:67:b6:c5:bb:0f:88:ac:a6:f1:94:d6:5d:cf:b0:53:c1:eb:
de:53:1c:e4:1c:3e:4d:68:4e:28:5b:e7:9a:5c:40:96:b7:dc:
49:4a:f9:bd:34:a3:2b:25:53:08:ea:29:4e:fd:04:75:4f:f6:
7c:f0:74:db:15:3c:95:1e:98:81:f5:74:18:69:0c:fb:dd:71:
5e:de:cc:f2:af:16:0f:d8:53:86:7a:24:f4:4f:51:56:1d:28:
a3:2f:c0:a4:6d:47:2f:c6:31:09:14:95:ad:8c:ef:8c:08:18:
90:60:70:3b:ad:29:dc:28:0c:67:c7:99:c6:0b:25:1d:b6:90:
42:c7:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:43 2025 by rpki-client