Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier: 3at+x2QTscBwwooF/Upd11soN4yoyd9bqXKwpaYtSzU=
Subject key identifier: 79:E6:0B:98:C6:19:16:05:EE:6B:37:2A:06:3F:14:5A:4A:33:58:12
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 0198820BB54A208CEDFD34EE6C066EA78227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 01:01:01 +0000
Manifest this update: Thu 07 Aug 2025 01:01:01 +0000
Manifest next update: Fri 08 Aug 2025 01:01:01 +0000
Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: /iDY5TCsvefg3S3QHly2kWhlozGOLlqgw/KtFJk+T3Y=)
2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=)
3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=)
4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:b5:4a:20:8c:ed:fd:34:ee:6c:06:6e:a7:82:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Aug 7 01:01:01 2025 GMT
Not After : Aug 8 01:01:01 2025 GMT
Subject: CN=79e60b98c6191605ee6b372a063f145a4a335812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:ba:83:78:b8:43:4b:44:74:74:24:1d:6e:
c5:1a:f3:a3:b8:ad:77:b2:b3:45:d3:e1:48:54:fb:
5a:34:61:8d:59:d2:b2:8e:1d:57:22:c9:97:55:5a:
04:0f:9a:5a:24:a8:f1:d4:12:9c:ec:ac:42:6e:ee:
70:ed:49:a4:77:de:65:4c:9c:0c:cc:4a:e4:22:07:
47:f1:eb:8d:82:4e:77:0e:03:da:1c:60:45:33:41:
d7:78:2b:40:76:a5:58:db:56:14:e5:fc:b2:3a:ea:
be:7b:7f:9f:03:b4:5d:a9:08:d7:2f:53:08:02:41:
f8:48:b7:1d:bc:df:c6:8f:67:36:14:80:c7:f6:20:
26:2a:a4:86:36:90:42:73:30:18:d9:f6:c8:26:2f:
42:33:a0:23:70:d1:2a:73:f0:d7:40:e4:d4:f5:ca:
b6:1f:39:d6:e9:6b:b8:f6:73:cb:32:b9:74:cb:06:
f9:60:be:95:cd:98:4d:d0:dc:d8:df:7f:26:3c:0b:
82:d3:79:3f:9b:6c:20:af:d1:ac:ca:e8:eb:a6:ed:
b1:3c:ed:db:e3:02:14:9d:62:b3:29:11:fa:9f:ab:
87:b4:e9:08:7c:fd:3d:f4:9e:0a:ca:be:fd:1b:e3:
b1:9e:d7:1f:27:a7:0b:09:39:a6:44:fd:5a:f9:67:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E6:0B:98:C6:19:16:05:EE:6B:37:2A:06:3F:14:5A:4A:33:58:12
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c3:99:70:ee:77:51:62:1a:9d:6f:63:71:7a:c6:fa:7a:3b:
d1:32:0c:22:27:df:9a:21:fa:4e:bc:7d:55:2c:a7:74:2f:84:
13:3a:11:1b:20:13:0d:71:ac:8c:e8:24:3e:06:c5:ad:cd:02:
3b:bd:8a:21:7b:3d:5e:29:82:ff:fe:1b:f0:48:c8:11:9a:8a:
4f:30:e8:73:ce:99:46:ab:92:79:8a:c7:c4:30:e9:01:e9:88:
5e:a7:4b:55:ce:60:57:e8:df:7b:f3:55:f0:63:03:0a:fc:62:
f4:48:ab:44:ca:11:c7:e0:b3:86:7a:e0:db:4f:75:72:b8:a1:
b2:6d:b8:48:b0:a6:5f:32:13:87:a2:cf:ac:63:1b:ec:15:c6:
b6:34:53:5c:1c:9f:3d:a5:e8:6e:1a:77:e3:df:a4:23:df:c0:
7f:dc:e5:c2:1b:13:25:15:ba:de:79:a9:f1:89:60:dd:af:4f:
b5:4e:9c:99:06:ed:85:eb:26:81:c1:fd:93:ea:a4:20:e7:c4:
84:9b:f8:3a:1a:cc:99:18:8b:e7:21:ea:20:36:80:79:53:10:
f8:72:3d:a2:bc:01:83:ae:2a:dc:6a:7e:eb:f2:7b:ba:c5:a0:
4e:36:c5:3e:9f:3b:b8:bb:d4:f0:d5:c2:c1:e8:cc:2f:c3:2b:
1e:cc:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:56 2025 by rpki-client