Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File: yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier: BMpPqPiKwRGA3VGWSNPnsgM++NLOeNQ56xzDpI0Wuu0=
Subject key identifier: 38:6B:3E:3B:18:E8:34:B7:DB:2E:E8:B4:CE:87:DA:2B:02:BE:61:A6
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 019874BD9763C46C096A17449125AD2F7E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 11:00:38 +0000
Manifest this update: Mon 04 Aug 2025 11:00:38 +0000
Manifest next update: Tue 05 Aug 2025 11:00:38 +0000
Files and hashes: 1: NjUsN_LdeGQK3Mrw9jk5yZ9XQc4.roa (hash: lewK8USqDYZNa7izSnIPvxOYg8crLlWZPbCwGgwM490=)
2: czIqi1JTFBnqU1-Xoy9WpWfsNLA.roa (hash: IEW0KjjrxdIVeOiEzEJ5xNLzQLH13MYJ7dw5cMoL57c=)
3: tr3Mau39VcKJ_XgMpDq905F47G0.roa (hash: MVZ9b8y+XoeBXJPJhRIiCaVtjlCBIl4VmA21jHMQa5o=)
4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: zbDo4OlfwhJCkc/9a0wezbeMFqYAU08bRGui+BEnzzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:97:63:c4:6c:09:6a:17:44:91:25:ad:2f:7e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Aug 4 11:00:38 2025 GMT
Not After : Aug 5 11:00:38 2025 GMT
Subject: CN=386b3e3b18e834b7db2ee8b4ce87da2b02be61a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:c2:10:22:f8:ae:cd:95:a6:19:6d:2b:be:
3b:86:5f:c7:a4:27:92:96:44:c6:70:da:d3:d9:0d:
38:a7:0c:2f:64:54:d8:4a:0f:90:75:7d:b6:1f:44:
ca:58:a4:5f:ae:f9:d1:10:e4:d9:1d:c3:54:f2:54:
31:86:ce:b9:73:24:8f:42:87:01:80:90:37:d6:f1:
a9:e8:9f:39:c3:80:9a:ec:42:f0:b8:78:93:e7:5d:
11:6b:b2:86:77:0b:4c:e2:a8:ee:a0:29:b2:91:4a:
44:f8:0f:f4:e7:25:45:05:3c:5b:3c:be:19:26:2d:
f7:c1:26:fe:48:f8:e9:5f:04:71:6e:e6:df:33:14:
b7:b0:5d:21:1c:23:54:e7:fa:bd:74:73:cb:0c:c3:
f3:f5:5f:9c:e9:ed:3a:a6:f6:4e:c0:4f:49:58:af:
df:b1:4b:98:7e:11:b4:aa:cb:07:b6:91:0b:78:cc:
c1:25:d3:87:87:2c:04:dc:15:df:6b:0a:50:8e:0d:
c7:16:fb:d2:7d:9c:1e:a2:fa:36:65:17:2d:a1:f4:
4b:21:c6:fc:f5:c4:95:d6:ea:2c:ea:a2:c6:41:88:
15:1b:a8:ea:d8:33:0e:3a:8c:5f:74:87:6f:4e:59:
1b:58:ac:61:c7:16:17:16:ef:c7:f9:75:fa:8d:48:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:3E:3B:18:E8:34:B7:DB:2E:E8:B4:CE:87:DA:2B:02:BE:61:A6
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:47:32:43:76:5d:7c:75:11:24:00:34:fc:c6:f1:97:83:
b8:8f:a4:69:3e:0e:94:c6:c3:ed:bc:99:48:de:4f:92:04:ff:
f1:88:f3:77:d9:2f:77:60:a5:50:45:fc:7a:77:e9:02:f3:0a:
26:f8:38:e9:88:88:77:28:97:a2:c7:07:35:8c:48:1a:86:a4:
68:98:23:57:1d:0f:fd:9a:ff:f5:74:d9:d0:69:1e:db:9c:d0:
27:1a:b6:de:0e:23:ec:a7:fc:5d:11:bb:c1:5e:ec:a4:84:bb:
92:59:b8:0f:a5:16:a3:c7:7b:1e:7a:b8:69:f6:2d:e0:3f:5a:
f6:b3:ff:bd:9c:ed:86:7a:25:53:2a:0d:7d:99:d3:1f:c1:17:
15:07:e3:19:80:6e:1e:3e:95:0a:fc:58:d7:9b:13:45:a2:e2:
9e:f3:16:3e:2a:b3:cc:57:89:6b:de:4c:f8:5b:91:44:23:6b:
57:65:d7:28:b3:df:03:db:a7:b9:c1:f1:7e:c5:d9:70:d0:dc:
39:a8:08:81:bb:a3:4c:4f:66:c0:b9:be:e5:56:1e:30:8b:c8:
31:a0:47:80:c2:ed:97:3d:de:23:f2:c8:53:c8:af:58:ed:50:
31:8d:9e:d4:78:e6:0c:99:69:75:0c:44:1a:d9:ba:80:2d:a7:
37:b2:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:13:05 2025 by rpki-client