Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: K4d7i1lvv4ay/HW6UtZjlqBYpmF3rAza7yIVgrn5Rr4=
Subject key identifier: A9:98:EC:06:98:34:36:C1:0A:0D:0B:95:17:A5:75:55:B9:AE:E0:15
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 01988EEC61850AC2533832C0329EE14AF441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 13:01:52 +0000
Manifest this update: Sat 09 Aug 2025 13:01:52 +0000
Manifest next update: Sun 10 Aug 2025 13:01:52 +0000
Files and hashes: 1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: Rb94MlYLY/O7o/f/45tYFq2YJw8VAyMt9UplADl8Lp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:61:85:0a:c2:53:38:32:c0:32:9e:e1:4a:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Aug 9 13:01:52 2025 GMT
Not After : Aug 10 13:01:52 2025 GMT
Subject: CN=a998ec06983436c10a0d0b9517a57555b9aee015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:71:64:80:f6:4c:ab:66:9f:85:d2:78:e4:
c4:67:3e:c1:cd:60:77:b4:a8:7e:cd:d5:e0:fb:23:
69:74:55:e1:18:e9:64:50:eb:68:c3:e4:21:79:d1:
fa:d9:bb:14:f3:8b:45:c2:cc:bc:0b:76:72:3e:87:
3c:b2:f6:f2:59:4b:c3:1a:b3:29:b5:ee:8b:d9:4e:
22:8a:13:ea:86:16:38:86:01:d9:ad:4c:9f:ce:71:
e4:b2:af:f7:9a:8e:88:8b:0a:58:d9:55:f0:04:aa:
a3:4b:8c:50:74:44:d5:e0:00:70:37:91:e9:ee:85:
79:2e:ca:11:63:73:38:ce:bc:f7:3d:9d:85:98:9c:
c0:5d:ed:82:65:4e:ea:df:5c:ce:15:ea:48:ca:bb:
7c:a0:ec:6c:0a:67:10:da:b9:39:40:92:b9:aa:50:
e1:ee:d2:0e:06:eb:ac:22:8b:15:42:17:9e:82:5c:
ce:0e:cc:5e:bb:bb:6a:e3:69:52:87:39:09:97:75:
ad:a3:a1:1e:c1:99:5c:25:e1:99:cb:40:e6:cc:eb:
32:30:b9:45:c6:7c:ca:30:96:7f:06:97:c3:a5:9e:
68:fe:f6:18:86:c7:b6:bc:f0:c7:34:e8:1e:e0:b0:
1f:47:7c:66:52:3e:9c:1b:5c:7c:be:7d:a7:26:6a:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:EC:06:98:34:36:C1:0A:0D:0B:95:17:A5:75:55:B9:AE:E0:15
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:da:21:8c:b7:4d:f8:a0:39:d0:50:48:e4:7b:3f:42:0c:b6:
79:7b:e0:1c:65:a5:77:57:62:93:62:96:69:ad:09:6d:0f:c2:
02:2b:33:d7:4e:30:7f:7a:dc:d8:54:c2:5f:1d:21:02:17:8a:
93:5a:01:2b:a8:e4:d2:2b:d7:7c:33:c0:77:e1:11:a6:e5:90:
9c:ea:0e:9a:63:ca:90:ad:ac:c8:5b:d3:77:e0:1c:0f:cf:8e:
88:77:de:e7:b1:5b:96:87:a0:79:1a:62:51:ed:28:d4:23:1c:
57:8a:01:c0:5a:7b:9c:b6:b9:db:28:08:d1:bf:36:3d:2c:ff:
f4:3a:c2:3b:56:21:ca:c9:0b:65:bb:dc:88:ea:5f:a0:cc:4e:
ed:3b:ba:58:02:b5:8e:86:e9:6b:16:ed:e1:2a:dc:5a:51:69:
46:2d:88:44:ed:70:1b:57:bb:c9:fe:77:ba:88:69:e0:e6:1f:
6d:15:26:f9:2c:a2:51:46:c0:fa:da:6b:22:99:03:5a:b7:8f:
56:63:65:cc:70:a8:e5:27:46:fe:11:9e:23:19:3b:48:77:56:
e3:e8:e9:81:33:4b:7c:ad:c7:65:92:c6:90:f9:36:74:7d:8c:
f9:0c:23:19:88:34:8e:e5:81:62:8e:85:e0:ee:f2:6b:66:73:
86:14:71:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:54 2025 by rpki-client