Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
File: yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft (raw, json)
Hash identifier: OpGPcR8tNVrBqK9veAcCj4LuENxRm7yFXkZxEE9Z/1o=
Subject key identifier: 7A:CE:E3:45:AA:D8:C6:6D:C5:7A:79:0A:4E:B5:02:92:78:82:8D:5A
Authority key identifier: CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
Certificate issuer: /CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Certificate serial: 01988168D7DD58E1DBF3FFF43B9BC7E91A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
Manifest number: 03A3
Signing time: Wed 06 Aug 2025 22:03:08 +0000
Manifest this update: Wed 06 Aug 2025 22:03:08 +0000
Manifest next update: Thu 07 Aug 2025 22:03:08 +0000
Files and hashes: 1: eVWj75QB5-NY5cip7EaAMqsD3_Q.roa (hash: R8SYABsszbTf/c1Z91aXqCMR7hgNS09va3LcQa+6Zyg=)
2: yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl (hash: Yt4taGn+1mSMrOTWXos51vJHycdNVKR7QJyniqET1B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:d7:dd:58:e1:db:f3:ff:f4:3b:9b:c7:e9:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Validity
Not Before: Aug 6 22:03:08 2025 GMT
Not After : Aug 7 22:03:08 2025 GMT
Subject: CN=7acee345aad8c66dc57a790a4eb5029278828d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:d4:df:dc:dd:ac:4f:ba:cc:cd:8d:4a:82:
4e:75:98:5c:aa:7a:43:6b:79:3a:52:eb:d7:f1:25:
d8:76:9b:22:47:cb:21:84:65:88:d0:8b:7b:4f:a5:
1c:61:f4:57:b1:97:15:00:0f:db:b9:78:38:96:3d:
6a:68:a5:65:a9:8f:f4:8f:8f:38:8a:0e:cc:4f:1d:
fa:e1:30:80:6a:1b:54:7d:e2:88:85:e6:94:09:e9:
f6:d1:f6:39:f3:51:c3:99:eb:f9:55:3e:60:dd:e2:
20:85:df:dd:b2:fb:c7:90:4c:dc:7c:a8:1a:31:58:
7c:e7:ec:72:06:73:c4:fc:16:bf:65:cb:22:c7:9d:
6c:8a:f2:c0:9a:8b:ea:37:8d:d9:08:e5:dd:ca:8a:
16:3b:9a:8c:b6:5f:f3:db:5f:ab:f3:fa:c7:fe:98:
99:b2:bb:b6:e4:d3:25:af:a8:ad:6a:1e:0d:69:6f:
16:72:3d:ff:8a:1f:43:bb:4e:46:63:48:40:c2:73:
3f:3a:26:b6:da:0e:ba:c7:a3:51:d2:86:03:13:f5:
80:54:84:48:a6:e8:b2:e3:ba:6a:f6:91:1f:e2:22:
a2:c4:e5:1c:48:a2:2a:55:b6:1e:92:63:ad:56:a8:
5e:f3:4b:50:09:92:7f:ed:bd:8f:08:90:a3:ad:d5:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CE:E3:45:AA:D8:C6:6D:C5:7A:79:0A:4E:B5:02:92:78:82:8D:5A
X509v3 Authority Key Identifier:
keyid:CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d2:59:60:f5:6d:7d:92:86:d7:cc:0c:6e:94:5a:2b:46:a1:
c0:c1:a1:2c:e3:eb:60:c0:01:21:3e:8f:d4:cb:cc:b1:e6:5e:
42:10:aa:a6:88:f7:30:b3:30:23:aa:92:77:d0:2b:16:a8:d5:
60:0d:1b:94:54:1d:17:0a:27:f7:2e:7a:db:3c:99:a8:5c:ab:
0f:ef:e2:57:fe:3d:75:ab:d5:e9:75:fb:cd:2d:3e:7d:7d:62:
f8:5a:ee:69:56:a7:aa:32:48:2f:db:eb:94:94:f7:e4:21:f7:
ad:c0:74:1b:31:6b:05:dd:e9:5b:62:b5:70:3d:45:2f:e7:b6:
79:64:7a:c8:ed:7d:c1:95:0e:9d:96:2c:ad:84:c7:91:11:08:
d1:00:f6:c6:21:f6:24:15:d0:54:70:43:72:43:48:bb:e6:a0:
09:53:39:7c:99:00:8c:84:dc:b3:42:eb:13:39:4b:17:91:cd:
83:05:c5:0a:ad:5f:c3:9c:11:bf:2f:8e:38:73:59:49:bb:f0:
2e:b7:89:4d:36:f4:5f:84:2f:ec:8c:65:d8:f9:66:f0:de:fa:
51:aa:3c:71:6f:64:d2:10:4c:53:dd:50:39:3d:3e:12:ef:95:
2c:ff:0d:b8:5c:a5:48:15:59:04:ab:82:95:d6:30:67:df:2f:
35:e2:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:06:38 2025 by rpki-client