Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
File: rYY6WJMusYMjlBahz2ao_8POchU.mft (raw, json)
Hash identifier: OlrSUdJPjZ4CqHrB0zo1HcTqSLEjzdB97lmvrfhK0nk=
Subject key identifier: 15:EA:60:CE:E9:8E:C6:D0:52:62:B2:C0:E6:4A:95:81:53:07:06:14
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial: 01988BEA7EE70F17342F16F68A99DA4B6560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
Manifest number: 0D15
Signing time: Fri 08 Aug 2025 23:00:57 +0000
Manifest this update: Fri 08 Aug 2025 23:00:57 +0000
Manifest next update: Sat 09 Aug 2025 23:00:57 +0000
Files and hashes: 1: NsCamS0MlFkmbAx5_LAOWrtBals.roa (hash: LDrv3G809jHIGwEDwg2A1Kbn0Oo37yQBk0cRSClCqYU=)
2: rYY6WJMusYMjlBahz2ao_8POchU.crl (hash: bcszPi8vbvQ7vQ4DFCFHAuFDwcv9EkJgj8i4i6kVZf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:7e:e7:0f:17:34:2f:16:f6:8a:99:da:4b:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Validity
Not Before: Aug 8 23:00:57 2025 GMT
Not After : Aug 9 23:00:57 2025 GMT
Subject: CN=15ea60cee98ec6d05262b2c0e64a958153070614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:68:ce:bc:fa:22:31:55:64:26:43:0d:97:
96:c9:34:0f:35:33:4b:fd:ac:b6:f6:1b:f0:e5:32:
da:d2:80:b0:30:e6:1f:f1:f7:a9:ec:ef:e4:b4:c3:
ac:a2:59:a8:eb:7d:77:01:e3:b5:d2:59:ab:4b:19:
cb:4a:1e:5e:3a:11:72:0f:7a:1a:d9:d6:93:2b:d4:
f8:4c:f8:ab:b3:e4:ec:f9:00:0f:c0:d2:9b:91:ab:
fa:ea:33:72:33:0f:4e:92:0c:b2:b2:1e:73:8b:66:
04:fb:59:d9:1a:11:2c:11:e9:94:07:49:64:6e:32:
ea:39:59:42:e6:58:1a:c2:48:24:2d:2e:c4:17:b3:
84:7d:a9:19:67:0a:7f:12:56:54:22:93:a4:24:50:
69:05:70:a3:5d:b0:7e:4e:04:d1:2d:ef:e4:43:97:
d1:16:32:ff:e4:51:db:d6:e2:85:df:14:39:ed:4d:
1c:94:42:28:21:1d:1f:2a:d3:91:05:30:dc:15:fa:
2b:d8:12:3a:be:b9:b6:2a:c6:99:b1:1e:59:bb:ab:
5b:b6:1c:c1:27:bb:98:c8:60:a1:b0:99:dc:9a:68:
90:2b:c2:e1:2a:75:06:4b:ca:1d:7c:52:93:47:8d:
b8:93:92:5d:d5:be:38:aa:fa:08:6b:e9:82:86:ed:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:60:CE:E9:8E:C6:D0:52:62:B2:C0:E6:4A:95:81:53:07:06:14
X509v3 Authority Key Identifier:
keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e6:3f:5c:9e:91:a6:b8:ab:2f:81:6b:a4:2b:82:32:10:a2:
36:91:74:07:a1:4e:0b:f7:85:48:bf:19:07:75:aa:60:3d:0f:
d7:75:6d:2d:c0:13:58:7a:cc:14:ed:a7:48:af:aa:42:a2:46:
08:bd:40:2f:0b:e9:bc:b6:76:44:5c:51:f0:65:10:6f:2c:08:
7c:f8:d4:0b:c9:8c:c2:0e:46:fa:f5:99:1f:b7:d9:e7:0f:aa:
7a:98:7f:34:38:e2:25:19:a6:83:ec:24:ea:fd:63:d1:a5:2e:
66:7a:09:d2:c5:c3:de:87:6e:bd:29:bf:11:ea:f2:e3:c1:7b:
ac:9d:45:11:ab:55:f0:8a:70:c6:5b:69:a6:d4:4b:6a:fe:03:
64:70:0a:bd:ea:e6:55:c8:9e:9a:23:3a:c3:87:14:cd:a8:70:
9c:19:c4:0d:ef:c5:30:7b:e4:ab:8c:2e:c5:38:2a:ef:0d:ce:
af:fd:fc:3e:34:7f:08:2a:99:17:2a:de:b5:75:fc:42:01:80:
c4:59:d3:92:3b:83:b0:6b:83:c5:ab:ae:bc:77:9f:1a:d0:e2:
80:cb:34:b4:02:60:cd:97:54:94:1e:8a:8c:18:6f:11:76:ba:
a8:26:14:90:6c:8d:50:f3:9a:ba:66:64:35:bf:35:06:71:f2:
9e:c7:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:13:00 2025 by rpki-client