Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: iVZgb0ZZSwwHHMpDWSn7sD9f5USXVNfM5L266/ZbxV0=
Subject key identifier: E5:2D:53:8D:58:E2:2B:B7:D2:5C:D1:38:E7:E0:01:D7:AD:01:DB:66
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 0198A04DBBF40DC86008EFF816CC4C830718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 1049
Signing time: Tue 12 Aug 2025 22:01:45 +0000
Manifest this update: Tue 12 Aug 2025 22:01:45 +0000
Manifest next update: Wed 13 Aug 2025 22:01:45 +0000
Files and hashes: 1: YFIa0scc_xVUT5FKi7LKvASoEWc.roa (hash: V1CwEQLm9iXZGzptcaHc4LFmcOryBT2Kfmx1HSv4RTc=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: vgwqew+Vh6Qz1e83wsIFX0y89eRAauF26358ze4zNns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:bb:f4:0d:c8:60:08:ef:f8:16:cc:4c:83:07:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Aug 12 22:01:45 2025 GMT
Not After : Aug 13 22:01:45 2025 GMT
Subject: CN=e52d538d58e22bb7d25cd138e7e001d7ad01db66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:cc:6f:ae:4d:72:16:1a:41:e5:cd:54:0c:
6d:a7:95:b4:01:c3:8c:07:3c:0c:34:15:0e:4f:32:
eb:d2:9a:54:26:a6:b6:be:f8:b5:fc:ca:6d:af:e6:
53:37:20:42:6d:cc:fd:d0:b9:e7:fb:0b:23:ad:0f:
c6:56:37:41:18:5f:f2:ad:05:02:03:54:2e:04:6e:
78:d4:77:2d:31:9c:74:30:b4:72:fa:6a:58:17:73:
ef:54:45:ed:18:d5:e2:e9:eb:9b:d3:f5:21:0c:85:
5c:8c:01:c9:c9:14:b5:9b:fb:50:2d:6e:dd:fc:6a:
aa:9a:f5:01:00:ca:9a:e9:37:64:d2:b4:ed:d6:3a:
ff:97:ab:d9:63:11:ea:1d:8b:1d:2a:22:16:4a:02:
b6:48:29:65:21:b1:ba:2a:4d:c9:c6:13:75:f1:b2:
cb:9d:c4:78:44:8e:1c:08:fc:b3:a9:1c:52:ad:be:
71:6d:38:c6:9b:39:25:e3:8a:4c:34:eb:33:af:7f:
12:19:88:17:6e:b6:74:af:dd:30:1e:53:07:cb:96:
96:9e:df:58:01:e6:ec:97:04:9b:7c:b9:93:b2:c3:
4e:0a:c4:a2:dd:87:21:b7:14:1e:34:88:2f:18:cb:
0c:16:c6:cf:67:9c:bf:62:5c:68:d0:cf:e5:a9:92:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:53:8D:58:E2:2B:B7:D2:5C:D1:38:E7:E0:01:D7:AD:01:DB:66
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:34:1b:da:86:ff:60:96:d6:05:65:b4:b5:b9:17:91:df:4a:
49:f2:55:df:a3:24:ce:eb:44:b8:dc:89:35:b1:48:f1:9e:7c:
d3:be:70:64:7a:14:b3:4b:c1:45:d4:ba:0c:3b:6b:99:a7:c1:
46:fc:0d:74:de:15:65:dd:23:33:55:4c:05:b5:06:00:9a:25:
6a:28:b3:6a:4a:67:6a:1d:a0:7c:18:9f:78:d6:3b:11:27:af:
37:85:e5:3c:89:29:5b:cb:72:74:7b:5e:88:6b:fd:5a:18:cb:
3f:58:1f:08:92:8f:cb:3a:c3:3a:2e:53:bd:d6:b6:d9:47:9a:
7a:90:cc:3c:5a:1c:8e:77:36:55:10:6a:a4:57:df:1f:a6:9c:
f4:fe:ae:5b:8f:4e:9e:f2:0d:b9:1a:b9:e1:c0:39:7d:77:3f:
4e:b7:6f:8b:56:14:a1:be:33:48:e4:da:52:51:2c:61:62:b7:
03:10:68:ae:86:34:81:6a:16:38:5d:94:6a:d6:59:e6:98:36:
dc:2a:84:7d:ff:ba:92:8c:cf:f7:f2:c5:7c:73:38:7b:d6:84:
f7:da:73:b2:0e:d6:9c:42:c3:dc:34:bf:b9:dc:1b:7b:ba:fe:
4f:18:1c:b4:e9:c1:ff:ee:79:90:81:83:6e:c9:f1:1b:c0:e5:
ea:45:a1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:36 2025 by rpki-client