Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
File: yIYjh23RrY5iSiPdUossZMgKhSE.mft (raw, json)
Hash identifier: /Y24DGf9thM+fRYEpR5N4fNSPBy1y2jdcOVSBS+8CyI=
Subject key identifier: 2F:63:F0:B2:B5:BD:2C:6E:CE:7D:85:20:F5:E1:0D:EC:C8:BE:77:AB
Authority key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
Certificate issuer: /CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Certificate serial: 01988D6BB69E34727FB7A5007314E2B5838D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
Manifest number: 0545
Signing time: Sat 09 Aug 2025 06:01:43 +0000
Manifest this update: Sat 09 Aug 2025 06:01:43 +0000
Manifest next update: Sun 10 Aug 2025 06:01:43 +0000
Files and hashes: 1: 6bGSQZyXICWLbBfHBORwDUVmEgs.roa (hash: 1jQZKU6KRpYxffMVHliAkA59/J/hUE4iGAwCvJDdSlw=)
2: yIYjh23RrY5iSiPdUossZMgKhSE.crl (hash: TP67fcqz8IiErLAqa8IVUYDOyFt+v6bp7vUnAslOv6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:b6:9e:34:72:7f:b7:a5:00:73:14:e2:b5:83:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Validity
Not Before: Aug 9 06:01:43 2025 GMT
Not After : Aug 10 06:01:43 2025 GMT
Subject: CN=2f63f0b2b5bd2c6ece7d8520f5e10decc8be77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:f1:61:03:4c:63:ae:14:1b:3d:19:bf:6f:
91:a9:3e:92:67:cf:8e:60:97:56:0f:ad:2e:c8:a3:
f4:f4:79:14:7f:31:5f:a4:25:fb:d2:c8:de:d8:2d:
80:8c:21:53:c5:44:e3:87:43:6b:d0:31:41:9b:8f:
11:69:3b:79:1a:45:c9:ac:ab:5c:51:eb:0c:52:0c:
21:ae:0d:bf:27:71:13:25:aa:da:e8:59:81:01:70:
fe:6b:0f:1a:40:7c:2f:e4:66:8b:98:98:95:a1:9c:
a2:8c:2d:bb:84:b9:fe:03:38:40:73:a4:71:b0:82:
74:a2:6f:d8:67:3f:9e:f7:b1:a8:9f:9e:f4:6f:9f:
ea:6c:0c:1e:b8:39:ed:f1:03:cd:d2:9b:eb:fc:ba:
a7:6e:20:ec:8c:d6:0c:50:99:bd:ae:c9:65:13:d5:
61:99:23:f3:9b:f2:28:b2:f3:f1:bb:2b:fe:6e:df:
17:3c:ca:bc:cc:59:36:4f:46:6f:7b:fe:f8:e3:41:
59:37:a0:12:5a:6f:cd:11:89:6c:55:1d:30:2b:6c:
48:40:62:6a:5a:6e:20:7f:9e:28:a3:c6:7a:bc:c2:
47:6c:dd:6b:e7:49:ca:a6:f3:9a:e8:d2:a0:a1:f4:
0f:ad:e2:88:34:82:ab:5d:87:80:65:47:e2:f7:07:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:F0:B2:B5:BD:2C:6E:CE:7D:85:20:F5:E1:0D:EC:C8:BE:77:AB
X509v3 Authority Key Identifier:
keyid:C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a2:76:45:8a:83:0a:47:c3:b5:be:72:7c:b4:18:ac:90:b3:
fa:92:59:da:d8:a6:26:04:9a:4b:ff:2f:86:55:44:45:94:b5:
a2:78:b8:33:44:fe:34:a1:55:f9:5e:ec:24:72:1b:de:9c:59:
0a:b9:f9:5d:8b:d9:bd:36:b5:13:44:a1:69:0a:03:76:bc:ad:
74:4f:2a:05:7e:2c:2f:9f:b4:bb:8b:a4:b7:af:a2:13:58:60:
72:ee:fb:b6:05:94:72:9c:77:34:af:32:25:b8:b5:15:f1:3c:
8e:59:7b:9a:f3:5e:1e:08:24:86:d9:ed:1c:36:5a:b2:e9:e2:
02:bf:ae:4a:63:bb:ae:b9:b5:52:dc:c2:a6:83:e0:17:d5:0c:
e7:a4:87:37:dd:a7:9e:9a:3d:a2:c0:9b:3c:b9:10:fc:cd:35:
01:72:7d:41:e8:ae:a5:88:87:9f:9c:7c:b4:f4:d1:43:c2:ca:
32:fd:2e:d4:5c:68:27:8a:5c:ec:9b:9c:59:0d:e1:0b:4c:3f:
da:7f:2b:28:b7:a6:25:1e:75:a2:9d:af:27:98:89:21:6d:61:
cf:95:9a:16:11:8f:6e:ac:7b:0b:20:7f:1d:0d:b8:36:8a:b4:
81:10:e3:3e:62:20:ce:44:f7:5b:27:d1:e4:0a:f5:e2:fd:5a:
03:0f:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:24 2025 by rpki-client