Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: y4GdKBcYlsnMPcHG+dox5MhaAF7qhNOIc9+/1YNIohk=
Subject key identifier: 4E:9A:CD:2E:5B:97:3B:BC:96:C3:C5:C6:F7:FD:73:BE:A3:77:EE:09
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 0198737407267C184DAB78265B7518C24638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 12AA
Signing time: Mon 04 Aug 2025 05:00:40 +0000
Manifest this update: Mon 04 Aug 2025 05:00:40 +0000
Manifest next update: Tue 05 Aug 2025 05:00:40 +0000
Files and hashes: 1: J64w76zXIm6hBV_NCpHfs00xQ5M.roa (hash: tW24A+133JMJcQQWR3X2EMPjynjBMoPzLLODpQzP0s0=)
2: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: 17LTurEw+by+mr+sDVftzH8HOoBpn/8PMAit5kXsMOo=)
3: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (hash: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:07:26:7c:18:4d:ab:78:26:5b:75:18:c2:46:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Aug 4 05:00:40 2025 GMT
Not After : Aug 5 05:00:40 2025 GMT
Subject: CN=4e9acd2e5b973bbc96c3c5c6f7fd73bea377ee09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:df:17:e6:9b:79:b4:db:3f:d8:88:23:ef:
b5:ba:d4:ca:0e:30:c4:b6:5c:4f:ce:78:2a:d8:55:
60:be:47:9e:c7:6d:9a:62:84:f5:ed:2c:24:d2:7f:
4f:96:ec:19:68:e7:9d:71:02:55:ec:83:2d:a8:fb:
8c:6e:16:c8:a8:ff:39:9c:f8:ff:e1:30:53:f3:4d:
30:e4:fa:bb:f7:49:ee:3c:d7:64:67:ff:41:fc:14:
da:92:99:ec:0f:46:ff:23:63:32:ba:c4:80:c6:0a:
19:72:57:d1:52:bf:52:a5:0e:43:95:c7:30:9b:1e:
67:e0:14:ed:c4:08:e4:f9:8f:a9:dd:8e:89:42:8d:
ce:47:b4:8c:ef:a5:63:12:fd:f8:b9:d6:c0:de:5c:
de:35:23:3f:31:d9:d9:5f:08:5a:33:e2:47:9b:45:
fc:41:21:40:30:9b:9b:64:13:33:30:c2:4d:a2:94:
49:c5:61:7f:7f:2c:e8:fe:37:95:ed:0e:54:af:41:
37:80:ae:f5:02:1f:e9:b9:e1:81:20:e5:84:c5:85:
24:25:90:3c:c1:fd:a2:dc:6b:4f:12:3b:82:71:75:
28:45:ad:2e:69:f7:dd:d1:68:9c:66:47:66:78:30:
81:de:fb:65:45:8d:ea:6e:fb:02:76:95:06:ec:50:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:CD:2E:5B:97:3B:BC:96:C3:C5:C6:F7:FD:73:BE:A3:77:EE:09
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a5:a8:3b:a4:ab:59:86:33:2b:56:da:2a:b2:d9:e1:ba:5a:
6f:94:1b:82:35:fc:31:ed:0d:10:4f:76:b4:0b:5e:9e:ec:29:
07:1d:4b:9d:50:0b:c5:5a:7c:42:ea:f9:56:7b:ba:7b:bf:8b:
1e:ab:c6:d9:d4:41:82:42:c0:ba:1d:59:5b:fb:ef:69:96:a2:
19:bb:e2:01:74:7e:64:e2:ec:0e:32:0a:57:8d:9a:60:88:b7:
2c:c9:41:a8:68:30:12:ea:ec:6f:87:e4:01:0f:da:1d:73:f4:
7c:ab:f7:9e:99:0b:e6:50:a7:a8:31:8d:7d:45:d9:61:8f:7f:
c9:53:d0:01:b4:0e:c5:1e:b9:5e:41:e4:b8:27:3b:87:55:4e:
1a:82:9a:d8:bc:e1:ad:26:89:36:e7:49:f0:ba:70:5b:22:25:
bd:09:cc:71:b1:64:ef:f2:0b:88:c7:f9:0e:19:5e:21:ec:ed:
ef:5d:8e:6a:4e:d5:b7:98:75:34:59:e4:94:0a:d2:84:90:88:
72:02:33:a5:2d:ea:51:07:b3:81:97:65:60:21:1f:04:81:7b:
0d:11:b2:fd:03:ed:9e:89:b7:2b:26:30:1d:ef:42:9a:dc:62:
2f:ab:b3:38:19:77:1e:21:85:bb:00:83:2c:e7:e6:7a:62:76:
57:8d:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:07 2025 by rpki-client