Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: vD/k90QFinzN0p4U6wDYe+e9SB/k4zv+Joxca7hrIDo=
Subject key identifier: 17:28:E0:E2:0C:72:3A:91:27:1F:6C:41:8B:83:90:D4:36:FD:8D:16
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 01988168B9E5879C53CA0021E86E161E8D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0B3F
Signing time: Wed 06 Aug 2025 22:03:00 +0000
Manifest this update: Wed 06 Aug 2025 22:03:00 +0000
Manifest next update: Thu 07 Aug 2025 22:03:00 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: Oyg4i7ms3O+ao6OcVHJZQsQyhc5MihjaPNBfhljz0Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:b9:e5:87:9c:53:ca:00:21:e8:6e:16:1e:8d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Aug 6 22:03:00 2025 GMT
Not After : Aug 7 22:03:00 2025 GMT
Subject: CN=1728e0e20c723a91271f6c418b8390d436fd8d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:11:8e:5d:6c:09:73:1d:5f:7b:af:62:26:
58:b4:cc:9e:50:98:c5:76:7f:23:73:97:61:73:b5:
70:14:97:51:af:85:59:d6:58:78:56:49:68:a9:09:
80:80:49:54:ca:f2:c1:53:a1:3f:ef:58:2a:18:90:
9f:10:89:81:f8:5d:b1:36:75:67:51:c0:66:3f:c2:
1f:cf:c5:0f:57:79:da:e8:1e:c3:73:0c:84:45:9a:
a7:0a:f5:4d:c7:09:62:12:28:2e:7f:15:0f:6b:63:
33:59:37:d9:74:04:3b:7d:38:33:63:87:24:f3:ec:
00:96:29:94:fd:0e:4a:8f:e0:fe:4f:54:c9:ce:a4:
d4:87:f1:26:93:43:2d:3d:25:6f:65:2a:ba:b2:91:
3c:9a:88:0b:f6:d7:70:ac:c4:62:d5:04:4a:28:0b:
7c:88:dc:05:df:21:d5:fd:2a:3f:35:0a:d7:3f:d4:
2e:14:d1:68:71:b8:e9:ab:e2:7f:59:0b:27:e1:78:
f9:5d:d7:70:94:5d:75:e7:70:66:7c:8b:d8:fa:c7:
6f:5a:56:f3:99:b4:bd:3b:0f:cd:8e:5c:90:c9:3c:
94:dd:d7:16:5d:5d:80:d6:4a:7f:24:22:8e:bf:2b:
80:cd:e2:d3:62:1a:a8:2c:fe:41:01:7c:96:e9:c3:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:28:E0:E2:0C:72:3A:91:27:1F:6C:41:8B:83:90:D4:36:FD:8D:16
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bc:25:8e:dd:e8:59:4a:12:be:fa:fe:6c:b3:e7:19:ee:a2:
8e:45:fc:9d:0a:ff:66:35:40:4d:30:08:d3:ce:a5:1b:05:e5:
29:97:61:1f:68:06:b2:7e:f1:1b:a8:03:77:6b:74:02:f0:e7:
26:12:9e:fb:f1:ed:05:5e:23:17:72:2b:7d:ad:64:19:d2:8e:
22:f4:ee:b6:52:9f:07:08:38:0f:b9:8b:46:41:52:53:86:69:
6d:5f:b0:84:ad:65:54:04:f8:bd:92:23:cf:b0:8a:58:86:eb:
6f:eb:9d:44:8b:b5:c8:07:e9:5f:e9:c4:22:3d:19:5d:b2:eb:
4d:a5:b3:06:0e:99:a2:36:29:e8:e6:eb:aa:ee:b1:b2:9f:08:
ef:30:fe:fc:17:53:ce:21:b0:f8:44:ad:b8:aa:95:36:d6:69:
ab:7a:8d:f2:a9:93:f2:75:ce:20:a1:ac:bb:4e:3e:df:d8:b7:
88:6a:52:1c:1f:a6:46:a9:2c:11:ef:f8:88:7b:42:48:09:0e:
c8:0b:eb:16:c4:e4:d3:63:3f:96:0e:2b:47:38:b4:d9:db:62:
44:2f:7c:92:f3:c2:09:1b:aa:90:29:9c:46:7c:b5:99:54:b8:
95:f0:fa:89:79:5d:c1:47:62:a8:49:58:2f:0b:d7:15:97:85:
5c:57:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:48:48 2025 by rpki-client