Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
File: yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft (raw, json)
Hash identifier: eZ9zMxLj9fcZdyL8/y+NRX+/N5N7bxOSLuw+vv2yOX8=
Subject key identifier: 48:FD:5A:A2:42:29:B6:A9:52:BD:BD:0F:45:CE:D6:45:D2:6C:16:5F
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Certificate issuer: /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial: 01987FE7405D7EEF3AFEB397471E8D1DC3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
Manifest number: 0178
Signing time: Wed 06 Aug 2025 15:01:58 +0000
Manifest this update: Wed 06 Aug 2025 15:01:58 +0000
Manifest next update: Thu 07 Aug 2025 15:01:58 +0000
Files and hashes: 1: _8GeUycs83lRu9jroip2TNtqpH8.roa (hash: xKuAFuMNSLN3xOnIRiVJqWVq/u5hK123DBKLWdaFAC0=)
2: yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl (hash: tlwvy/H00o6ulYcInQWCbmqKqnpId2GluSTC57AdRJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e7:40:5d:7e:ef:3a:fe:b3:97:47:1e:8d:1d:c3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
Validity
Not Before: Aug 6 15:01:58 2025 GMT
Not After : Aug 7 15:01:58 2025 GMT
Subject: CN=48fd5aa24229b6a952bdbd0f45ced645d26c165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:8a:fd:e6:ad:b5:88:83:09:22:80:0d:17:
88:03:fc:ca:79:12:2d:4d:49:01:e0:1e:d0:dd:52:
b2:65:ef:2e:12:29:ed:56:25:6e:db:70:d1:5e:97:
9a:ea:fd:50:0f:b7:29:89:b5:13:66:c4:11:e7:52:
84:a4:eb:dd:0a:0f:10:32:62:74:3a:28:01:3f:03:
a3:79:03:ae:76:ea:00:be:10:64:2a:da:66:17:46:
e6:82:a6:69:ea:b4:81:73:07:3c:d1:71:f5:3c:31:
a5:6a:87:c5:e0:b0:25:94:27:56:10:16:5f:a3:dd:
d2:78:6c:e3:b1:ba:89:37:3b:c1:19:d6:c6:92:90:
c4:97:6e:05:cd:1e:c5:76:30:5c:97:dc:97:84:e4:
06:6e:65:7a:d5:df:43:c3:43:84:64:55:44:ae:01:
66:34:af:35:a8:eb:de:f7:65:25:f3:30:af:6c:91:
b8:d5:a4:9d:2c:6a:33:b1:be:20:2c:3c:aa:51:b4:
0c:27:72:1a:23:cb:97:15:84:c2:23:95:60:c1:87:
86:27:76:4a:09:59:38:ef:38:49:6e:28:09:7c:b4:
8a:ac:66:b7:4c:93:a1:dc:1c:06:aa:07:75:8e:f5:
86:79:14:19:35:6d:94:75:e0:e8:0e:9e:dc:76:d1:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:5A:A2:42:29:B6:A9:52:BD:BD:0F:45:CE:D6:45:D2:6C:16:5F
X509v3 Authority Key Identifier:
keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d4:50:0e:f2:50:1a:b1:e5:a7:13:fe:9e:09:74:1d:3b:08:
06:73:a6:ab:f2:e1:d7:5a:6a:f3:39:20:c1:8a:e8:58:15:61:
f6:23:57:2b:1c:13:ff:ae:70:f3:bf:27:95:12:ad:fb:e9:20:
db:d0:8f:c8:1c:bf:a6:34:52:60:49:9c:f7:ed:d6:48:f5:67:
83:fd:d5:91:70:24:cb:ad:30:ae:34:2f:7f:0c:3b:5f:a5:f6:
bf:88:39:cf:ec:85:49:fb:aa:ec:d4:f2:be:a5:74:41:af:a1:
33:b8:cf:e3:f0:f2:a6:b8:69:53:d9:88:2d:f2:f3:a5:c3:32:
b0:68:20:7e:2c:2c:06:82:e6:89:87:d5:62:4b:d9:e8:c2:7c:
5e:39:01:c0:2f:f5:64:06:3f:81:19:16:7a:87:5c:6f:ee:73:
ed:50:c6:6a:2b:a4:a5:7f:17:14:e1:90:9b:fc:bb:e9:0e:6d:
a1:55:c4:96:77:18:76:19:95:64:15:63:42:e3:ae:4f:8c:7b:
c9:ff:f7:2c:44:f2:03:3d:4a:74:c2:8e:df:8d:51:37:39:d9:
1f:87:b8:b9:94:a0:2d:12:8a:39:8d:cb:3a:b1:66:bf:81:c2:
9a:6a:2f:d4:ac:7a:5c:21:8f:5a:0e:b0:7a:12:47:1e:2a:df:
a4:eb:29:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:45 2025 by rpki-client