Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: tqSLAk0jhkBGjeVSNkDBuRwzr6jlcGnCRK26aylT7M4=
Subject key identifier: 81:29:89:37:6D:11:47:80:0D:BF:39:DD:A6:C3:10:53:70:2F:88:6A
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 01987419572C60C44469122ECDCE5D066263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0CF7
Signing time: Mon 04 Aug 2025 08:01:14 +0000
Manifest this update: Mon 04 Aug 2025 08:01:14 +0000
Manifest next update: Tue 05 Aug 2025 08:01:14 +0000
Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: 7Ylhu/VWTp+VzVY+tmr9zCZcfj3GG1CnQ3eGKzTIRm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:57:2c:60:c4:44:69:12:2e:cd:ce:5d:06:62:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Aug 4 08:01:14 2025 GMT
Not After : Aug 5 08:01:14 2025 GMT
Subject: CN=812989376d1147800dbf39dda6c31053702f886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:af:9d:5e:b9:1c:b3:89:1d:0f:41:ae:e5:
6c:d9:4e:c4:3d:1b:ea:43:22:78:40:e0:02:a6:74:
d5:28:a6:c8:22:36:28:f6:76:2b:1d:21:03:b4:fa:
d2:79:09:5f:2e:1c:72:ab:7b:96:16:82:32:82:3d:
19:79:df:d1:8a:fc:06:31:e5:a6:a7:bf:d4:cc:9f:
1b:a7:57:0b:96:e9:37:5b:69:66:2b:09:b4:64:b2:
91:a4:53:aa:2d:f3:ea:a0:fb:9b:ed:af:4b:b4:5e:
e6:9c:04:b6:b3:2a:51:1c:fb:c9:58:fc:34:bc:31:
0d:7a:11:34:4a:af:dd:89:e0:a2:da:28:23:ec:cb:
fa:a7:5b:f5:ce:e4:2b:3b:60:62:74:1a:3d:86:04:
87:7b:77:d3:bb:ac:1e:8e:61:82:0f:e3:0f:26:28:
14:87:63:15:9d:db:f8:b6:0c:34:5c:ce:70:c9:11:
54:97:b9:17:98:7c:a6:50:06:a0:8a:f8:d0:bd:a6:
1d:9c:62:d0:98:1e:d9:c2:81:a7:d8:96:96:78:85:
61:48:16:72:67:47:b2:bb:43:dd:5d:fb:4a:3a:a9:
21:00:be:4f:dd:61:f8:77:f2:10:4e:88:0e:c2:1f:
03:70:c4:dd:08:62:04:f4:86:0a:d8:07:32:5d:cd:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:89:37:6D:11:47:80:0D:BF:39:DD:A6:C3:10:53:70:2F:88:6A
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5e:05:e0:1a:5f:08:93:bf:b2:2b:aa:36:12:f1:7c:09:79:
14:8a:95:c7:83:16:50:65:42:a1:63:e4:e4:a3:82:82:98:3f:
a5:4f:f6:b2:9b:4c:84:5d:87:6f:6f:aa:bd:34:f6:e1:6a:6e:
52:e6:79:73:29:ce:bb:bd:9f:c3:5c:a9:0d:da:f7:17:f6:3b:
c9:2f:67:29:f7:66:f2:e0:fe:a9:30:90:91:de:cd:e0:60:d7:
cd:8f:33:91:2d:65:37:b9:8c:d8:f3:c6:9c:31:3c:77:5c:19:
52:c1:06:bc:3c:dd:5a:1b:04:76:45:05:77:94:c7:a0:73:c9:
1f:fe:8f:63:ec:62:c2:19:00:97:4c:13:ce:a8:96:d1:70:d7:
8a:46:f1:86:40:c6:3d:bd:3f:03:14:12:40:03:ed:91:e0:33:
d8:9a:eb:cb:3f:1d:75:24:c3:09:d0:81:07:a9:5c:d8:92:7a:
9c:0a:ef:a9:93:80:dd:9a:70:8d:c9:16:60:f8:43:d8:84:f3:
a6:9e:d3:e3:cb:4a:cc:57:75:fe:26:57:b2:e1:db:13:3f:e8:
0f:96:4e:20:fc:1c:c3:10:0e:e7:94:64:a3:fd:f5:83:38:3b:
62:de:65:3a:43:d0:0f:48:81:56:be:24:01:48:a5:aa:2d:31:
4d:a5:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:42 2025 by rpki-client