Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: ADXmKOKQ7qYM1jL9CYanknC1Eg4mO49SRxg/MXEMefM=
Subject key identifier: 7A:C4:33:09:69:46:28:AA:49:E1:BF:D5:62:77:30:A3:7A:76:8F:66
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 01989448F7DD758EADFF5C8BD43FC1131065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0F39
Signing time: Sun 10 Aug 2025 14:01:06 +0000
Manifest this update: Sun 10 Aug 2025 14:01:06 +0000
Manifest next update: Mon 11 Aug 2025 14:01:06 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: 3XgbHqWuE7YIAsJ9IdoO326UbAAxKlEGGEwvnUH/mhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:f7:dd:75:8e:ad:ff:5c:8b:d4:3f:c1:13:10:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Aug 10 14:01:06 2025 GMT
Not After : Aug 11 14:01:06 2025 GMT
Subject: CN=7ac43309694628aa49e1bfd5627730a37a768f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:b1:26:f2:76:59:a7:dc:4d:8b:69:de:d4:
bb:d3:a9:c0:e8:67:9b:93:d3:7c:d9:e2:e0:7b:4f:
94:57:76:8c:22:3f:18:21:54:3c:c1:fd:d3:82:95:
75:b0:b5:03:49:07:0b:05:2c:3d:96:3e:42:87:6c:
99:ff:43:97:b8:d1:25:53:4f:d2:9b:96:78:b0:30:
16:14:3f:54:9e:24:cc:c6:14:2b:c7:55:c7:b6:d1:
c8:db:e5:05:9d:b9:28:bf:c9:17:70:cd:df:34:28:
14:9e:45:94:99:5f:d0:7b:71:2e:89:b6:60:30:62:
7c:a6:1f:a2:38:a2:6e:77:c5:61:e2:af:d6:2a:f2:
c3:63:88:19:3d:2d:fa:8d:48:66:04:3a:04:40:4e:
f5:de:1a:68:2b:28:b9:b1:e9:b7:8c:a7:4e:29:3d:
ef:aa:30:35:0d:a5:b4:58:88:2d:1a:c7:a0:73:57:
4b:52:08:83:24:8e:1b:17:2a:f4:61:2f:e7:1a:77:
94:99:be:45:6a:ad:37:c9:f8:bd:1f:cb:6e:11:36:
1d:4b:d8:8d:43:58:1f:a0:39:ef:87:d1:f7:04:98:
73:97:66:a7:55:7d:bc:d3:a2:0e:98:be:3a:89:da:
3d:a4:93:7a:94:dd:8b:72:8f:b7:67:3f:11:03:98:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:33:09:69:46:28:AA:49:E1:BF:D5:62:77:30:A3:7A:76:8F:66
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b0:4c:ba:75:6f:31:09:f4:5d:ed:aa:b6:21:f9:af:85:ec:
eb:a0:9d:5b:8d:da:7b:d7:9e:75:a1:6b:50:50:9b:2e:eb:50:
ae:4f:6b:7b:a5:c1:ad:3d:a9:a2:07:a5:f8:d7:3a:b1:c1:24:
09:27:8f:55:a5:01:c9:ec:15:1a:1b:72:27:87:3b:2b:03:4b:
cb:d6:33:f0:5b:b1:47:00:1a:24:10:76:e8:a8:0e:31:4d:a1:
42:eb:7f:45:bc:12:82:c6:13:2c:26:f2:93:69:bf:13:7f:bf:
9a:1e:95:4b:93:12:7f:33:1f:d8:1b:0e:7a:e2:fa:7f:c0:af:
bb:3e:cb:54:8a:2f:86:3f:54:55:59:56:3c:10:a1:c7:1b:12:
cf:4f:18:bc:93:4b:ca:9d:2c:d4:ec:4c:14:01:7b:c7:4c:2c:
9a:87:4d:21:34:97:e9:6b:b4:07:0a:f2:e2:65:8e:79:3c:ea:
e2:92:61:b4:da:e8:60:5b:c5:bb:84:f4:c9:3b:b0:00:a7:04:
29:30:b4:83:dc:e3:5b:1e:41:33:fb:a2:67:34:c7:87:b4:7a:
52:b2:7e:be:03:e7:d1:c1:e1:03:64:f5:c0:f0:d5:d1:50:c0:
71:7f:21:f8:8f:1f:8f:7b:af:f5:24:2f:ba:03:4a:1d:ce:4f:
aa:39:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:49 2025 by rpki-client