Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: p6lmUgCZPWc8Fpb47lh718KY4tkCNVeTCdhoLnF8M8s=
Subject key identifier: A9:FC:29:E4:95:0E:4A:60:72:BF:18:EB:96:97:2C:BD:79:AC:48:B6
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 01988A33255C439E08EE70C4C1E51B7042D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 15B4
Signing time: Fri 08 Aug 2025 15:01:04 +0000
Manifest this update: Fri 08 Aug 2025 15:01:04 +0000
Manifest next update: Sat 09 Aug 2025 15:01:04 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: byO/SL8BfwGOuDUQRsJNoHn2kgcZDR130WGF7cvolSE=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:25:5c:43:9e:08:ee:70:c4:c1:e5:1b:70:42:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Aug 8 15:01:04 2025 GMT
Not After : Aug 9 15:01:04 2025 GMT
Subject: CN=a9fc29e4950e4a6072bf18eb96972cbd79ac48b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:1a:0a:fd:ac:04:94:f7:fb:4b:a2:df:26:
cf:b3:2a:44:6c:a6:cd:bb:dc:dc:62:fc:3e:7d:85:
42:6a:3d:e5:bc:78:83:6b:56:66:46:37:b8:62:49:
09:07:84:42:8f:01:78:19:4c:96:7f:32:48:c5:e1:
06:9a:6f:2c:e6:b5:01:0b:dd:e0:31:ac:1b:73:a8:
6b:6e:53:70:d4:b3:84:3d:c9:72:fe:80:85:30:37:
e4:0f:93:55:22:f0:b7:83:bf:4a:d3:85:9a:2d:36:
3f:67:ba:54:c1:8f:c9:e3:24:82:84:52:38:0e:d7:
a7:04:a2:ab:df:3b:65:32:8b:c8:11:eb:d6:3d:a1:
39:de:20:af:fe:17:6e:35:4a:2d:67:0f:bd:9a:85:
d4:bd:95:72:3d:37:34:0f:d1:26:fc:48:b5:e7:b5:
ed:d1:61:4e:17:eb:84:cc:dc:d3:e4:d5:c0:d7:1b:
1f:4b:c3:ec:fe:49:18:ce:a0:7d:bd:66:af:72:54:
1c:6e:ee:d1:77:40:85:32:69:2e:81:70:55:e0:10:
87:1b:93:84:d4:85:29:43:6a:79:a9:aa:fa:32:35:
51:9f:d6:48:00:13:e8:64:e0:0a:43:69:6c:1a:ad:
e9:20:02:4e:4d:45:7b:06:46:69:1d:38:6e:1f:bb:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:29:E4:95:0E:4A:60:72:BF:18:EB:96:97:2C:BD:79:AC:48:B6
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2b:fa:10:41:8f:dc:77:5d:13:9b:ec:75:20:7f:ae:43:e4:
e1:1c:8f:94:8a:54:ae:56:1b:9d:39:ea:f5:1d:dd:14:5a:a8:
10:d7:97:0f:9e:a9:6f:7d:7b:55:bb:04:a1:02:c9:b7:8c:d1:
15:e3:b3:b0:c7:dc:68:e1:3b:22:f4:ab:90:4a:db:44:6f:bd:
af:28:55:2b:98:d5:ce:23:98:e8:83:b6:6d:83:42:75:3b:b9:
aa:0c:68:fa:75:ae:70:18:1b:db:fd:9b:1b:8b:e9:e2:41:8f:
ae:0b:18:06:77:bc:4b:89:59:ec:25:b0:8b:e8:12:0a:7c:cd:
c4:b8:34:56:02:47:1b:f6:40:ee:e9:18:ab:7b:bb:35:df:95:
cf:b8:41:47:a0:c1:e8:7c:bb:b1:ea:5c:f8:be:30:2c:ae:69:
3c:96:48:69:48:c9:22:a1:33:16:7a:8b:61:b9:43:c4:f2:06:
db:c8:32:a2:43:43:78:6e:91:3d:4f:66:55:7c:e2:3f:af:d0:
b4:f9:58:07:ad:b1:1c:2b:4e:9a:48:bd:f1:07:2d:46:9f:f8:
26:af:31:b1:a1:a4:33:9d:6a:32:b8:25:67:3c:20:ea:30:cc:
86:5d:66:9d:4d:dd:7d:9a:8e:2d:49:80:d3:e5:c5:ea:dd:4f:
96:1b:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:30 2025 by rpki-client