Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: BW656h9VTvEv9TISwnV++g3zLhb6jfN0d1yYXTEUK5Y=
Subject key identifier: 24:40:D1:8C:8C:CD:3E:55:96:BF:9C:E1:C2:7D:D0:58:BA:21:ED:D8
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 0198745075105CB5A41855E96CE924EDBBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 0284
Signing time: Mon 04 Aug 2025 09:01:26 +0000
Manifest this update: Mon 04 Aug 2025 09:01:26 +0000
Manifest next update: Tue 05 Aug 2025 09:01:26 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: 5F12rGe8JqgXQxm9+w7bScd5cJpjinmzOjBjnJqlNc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:75:10:5c:b5:a4:18:55:e9:6c:e9:24:ed:bb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Aug 4 09:01:26 2025 GMT
Not After : Aug 5 09:01:26 2025 GMT
Subject: CN=2440d18c8ccd3e5596bf9ce1c27dd058ba21edd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:36:d5:83:58:68:1f:b8:29:46:3d:1b:b9:
80:49:32:07:25:df:a8:34:3d:57:34:9e:7b:0e:37:
b5:40:02:3f:7a:6f:70:9f:84:9d:dd:ca:d4:06:bc:
35:05:0c:92:2c:92:6c:9d:fa:4b:44:f5:2f:de:7c:
93:f6:a7:f0:6e:52:b8:76:ca:20:55:4c:32:de:6d:
49:d3:aa:79:e2:cd:b3:ab:16:ba:5d:cb:54:99:07:
d1:6f:84:ca:6d:ae:f0:19:0d:cf:63:0a:4a:bd:3b:
32:e4:b7:b1:e1:ac:06:23:86:cc:d4:5f:ff:99:b1:
aa:6f:1f:22:bb:61:de:d4:50:43:95:74:a2:12:7e:
3c:d1:31:bd:42:a9:f0:9f:50:6b:7d:fb:e8:db:73:
83:36:59:a8:2c:d9:f8:f3:d6:5a:58:ae:ed:99:1c:
b5:f7:76:e4:15:c5:ea:c0:9a:95:a6:a0:9c:04:13:
1c:85:f7:98:38:c7:ec:90:b6:36:e4:6d:58:8c:66:
41:96:20:f4:79:1e:5e:dc:10:05:c6:44:0e:a0:4f:
0d:b7:8c:42:da:df:76:14:40:ae:d8:ab:d3:6b:04:
fb:6c:be:b7:df:07:8f:02:b7:f9:bd:9f:3e:d0:67:
eb:9d:51:b0:1e:e1:d9:22:2d:02:74:4c:5b:10:68:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:40:D1:8C:8C:CD:3E:55:96:BF:9C:E1:C2:7D:D0:58:BA:21:ED:D8
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9c:f2:35:cb:89:99:9c:3d:4d:0f:9d:92:6d:c8:c3:58:00:
e1:18:0d:7d:a4:80:4e:9f:b8:55:5c:67:7e:60:5c:05:66:3b:
64:8e:37:cb:f2:c4:cc:9e:3c:d8:33:aa:98:7c:39:7e:e3:ce:
84:86:9a:33:ab:b2:25:9b:a2:a4:b3:12:ab:79:44:52:18:e2:
9e:e5:7a:84:b5:93:09:fb:38:1e:f6:ab:36:5f:a1:60:c0:86:
be:00:c8:ac:38:97:75:e1:bf:51:68:54:35:6e:f2:7a:9b:07:
51:0b:10:f3:ea:b8:6d:4b:db:a4:f5:82:13:57:2c:97:76:dc:
0b:cf:7b:ca:b7:dc:a6:8b:d9:ac:13:94:4e:bd:61:02:44:28:
58:6a:0a:ed:1c:77:d4:9c:66:ab:78:19:2a:d4:17:ee:3e:5e:
77:47:58:8d:d4:f5:b3:1f:37:2f:c3:00:d5:ca:44:b8:ff:e9:
0a:ed:e3:97:86:93:5c:07:60:0b:97:de:1f:98:1f:0f:4a:e2:
9c:56:cb:f5:98:27:02:7f:61:e9:72:52:5d:81:b8:36:ff:55:
65:c6:57:7a:9b:c0:7e:09:1a:2a:5c:0a:f2:f5:5e:c5:3f:ab:
9c:8e:62:bd:1c:34:80:a5:00:14:96:f4:7e:67:f2:18:0c:a0:
f7:48:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:48 2025 by rpki-client