Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier: L12bxsgGftA7Sep+Kll4IfF5egQcQRl1jpOCLaJxcmY=
Subject key identifier: 0C:FE:08:CA:C1:2F:52:51:9E:EC:E7:87:A4:D0:2E:49:32:15:D8:68
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 01987562E539B998F11C23CDB07817725383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number: 0BA8
Signing time: Mon 04 Aug 2025 14:01:12 +0000
Manifest this update: Mon 04 Aug 2025 14:01:12 +0000
Manifest next update: Tue 05 Aug 2025 14:01:12 +0000
Files and hashes: 1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=)
2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: ErjuQUsVT1hVMPzy2e7uY/hFL9inGv9cbiJVa+WEVao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:e5:39:b9:98:f1:1c:23:cd:b0:78:17:72:53:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Aug 4 14:01:12 2025 GMT
Not After : Aug 5 14:01:12 2025 GMT
Subject: CN=0cfe08cac12f52519eece787a4d02e493215d868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:bc:78:01:1d:8a:8f:8c:4c:6b:90:82:99:
94:d7:79:df:22:16:e5:43:85:5d:72:d2:aa:a5:02:
2b:28:1e:7f:19:8d:a2:2d:c4:95:b4:39:11:a0:4c:
4d:b2:22:d7:b6:14:28:74:22:e8:78:23:b1:02:e7:
a3:19:d0:83:a2:58:41:ce:f8:4b:60:d4:09:06:53:
45:e8:e7:78:53:b8:11:01:cb:98:e1:8c:8d:62:35:
ad:90:77:86:78:82:b5:67:2e:fd:84:85:d7:e1:ea:
f3:56:33:b8:c6:7b:b6:dc:5d:62:4b:2d:e4:59:be:
8e:05:06:a9:51:b6:60:57:67:6b:77:fe:14:56:aa:
c3:ec:22:aa:86:10:4a:67:66:56:39:26:aa:11:7e:
ee:8e:c6:8d:ee:e7:c9:9c:b1:43:6b:20:0e:0e:f8:
9b:6e:49:ee:a4:0c:ee:eb:c1:e5:12:02:91:35:f1:
df:a4:4b:d1:93:88:0c:24:68:d5:10:0f:51:ec:a7:
1b:9a:a1:e1:1b:de:5e:86:9c:4f:f7:d7:12:87:4d:
3a:b9:c2:ee:a3:09:f6:09:07:a2:53:8d:c5:b7:f4:
3a:b7:f0:2e:1c:29:f7:51:d6:30:f4:fd:24:c9:06:
a7:1f:ee:dc:f1:48:63:66:e0:af:00:4d:8a:85:ce:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FE:08:CA:C1:2F:52:51:9E:EC:E7:87:A4:D0:2E:49:32:15:D8:68
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5d:32:32:de:5a:31:c3:f6:2e:82:47:ff:fd:1c:c1:73:cf:
06:40:2b:c7:c0:76:5c:9d:90:9f:72:03:14:f1:d2:d7:df:90:
73:87:3e:ab:17:e2:43:a5:f3:cc:c6:f9:df:f2:dc:7c:12:19:
0d:76:2e:e5:f9:da:6a:03:b8:70:ef:9a:88:80:55:ec:bd:25:
13:90:02:ec:0b:b8:b1:64:e5:db:76:ce:8a:cc:76:f5:23:ce:
d0:7e:cd:b1:2a:c0:d3:da:67:5d:a4:e1:36:56:55:68:58:74:
5d:55:d2:24:6a:fd:f6:9f:05:5d:64:08:2c:11:44:0c:8b:90:
52:30:28:67:58:e1:28:01:52:65:97:cd:72:20:d4:74:fb:e6:
ad:d0:21:22:54:44:f7:75:bf:72:ec:b7:3a:d9:91:75:fe:8d:
c1:a7:78:bb:65:48:bf:9a:63:c4:74:2d:59:7c:70:93:89:7d:
62:f3:90:b8:c3:2b:b1:9c:63:ee:28:30:64:90:a4:bc:3f:31:
7d:2a:41:3d:e3:d3:a1:12:7d:70:d1:00:2b:7d:bc:98:d5:c5:
09:98:01:0e:81:62:e4:84:73:dc:ff:14:4c:14:42:8e:c2:51:
8d:f6:52:e5:1f:a8:52:7e:a1:aa:6e:45:61:6b:b1:3a:9d:52:
b2:77:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:38 2025 by rpki-client