
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File: yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier: 9FL6ukUozFGrcRrCkCeppXidaL5C+rh6HT6MrcYoIQs=
Subject key identifier: 67:C3:0F:21:01:FF:94:C2:B5:72:D3:F3:C4:3C:3A:9E:58:97:CF:13
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 01988F5A00FD5ACA60B9F6E6EE648292B173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number: 15A5
Signing time: Sat 09 Aug 2025 15:01:37 +0000
Manifest this update: Sat 09 Aug 2025 15:01:37 +0000
Manifest next update: Sun 10 Aug 2025 15:01:37 +0000
Files and hashes: 1: 1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa (hash: t1w40I15hLlr7dv8d0uJE/Dz2j4qqNVpP8R3SOXwVvk=)
2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: ZT0VFimGqingpID+5EZWFHWjfVUchxEGxGBPQ78OcEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:5a:00:fd:5a:ca:60:b9:f6:e6:ee:64:82:92:b1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Aug 9 15:01:37 2025 GMT
Not After : Aug 10 15:01:37 2025 GMT
Subject: CN=67c30f2101ff94c2b572d3f3c43c3a9e5897cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:44:1e:fc:4a:20:7a:f7:f4:5b:df:3f:d0:
c8:3d:20:f5:ea:5c:20:c0:e4:2a:88:d9:c6:1b:40:
eb:39:e6:d9:a1:c4:22:89:d1:21:b8:97:6b:88:6a:
55:65:39:f3:09:be:1a:fd:5b:b8:2c:94:54:ec:00:
d4:b4:43:5e:01:e0:88:13:ad:a5:ce:7b:c2:bd:17:
c1:19:c0:75:4e:de:5c:63:e5:3b:32:03:a8:8a:34:
e8:25:95:67:3b:d4:c2:21:4b:00:a7:64:9b:8a:b6:
65:0f:b5:05:f7:2c:9e:b6:50:6c:51:8c:3a:64:f4:
f7:ad:99:ea:6f:da:a2:5a:1a:da:4a:43:8b:3c:8e:
7c:69:8b:09:15:c7:4a:68:ed:86:ce:d8:3c:70:82:
23:e2:d9:fb:72:ff:7e:9a:82:5e:f4:68:44:8b:12:
8d:2b:80:41:4c:91:2b:49:33:a8:ba:5d:23:cf:a0:
4d:e2:f7:09:0a:85:17:54:e9:91:6c:3a:16:8d:db:
f1:8e:1a:2b:40:9b:4e:1a:d1:d1:76:c2:4d:18:3c:
3d:2c:90:b7:3e:c4:13:34:a7:b8:78:18:c0:64:7f:
90:b6:7f:ac:52:87:c5:29:86:c6:49:76:1c:e9:df:
d5:7c:50:cd:dd:05:b5:a8:f8:05:a4:c7:05:8e:9e:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C3:0F:21:01:FF:94:C2:B5:72:D3:F3:C4:3C:3A:9E:58:97:CF:13
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:59:81:6e:41:43:ed:b2:cd:1a:bb:d0:3d:6c:4b:71:1f:a6:
61:8f:f9:40:92:90:4d:28:c7:d2:92:70:cb:fa:2b:54:73:22:
fc:84:22:76:50:49:71:7d:21:32:17:30:a2:8c:e9:52:35:c9:
82:46:fa:07:4a:4e:22:db:ef:c9:2e:6d:a6:8c:6b:27:35:e3:
9d:89:c5:8d:9d:17:db:1d:d7:2f:d2:5d:f2:e6:0b:94:49:a7:
88:f8:b9:7f:d5:4a:c3:51:48:fe:f9:da:d5:c1:d4:c8:9a:8a:
76:5b:d8:1e:7a:ba:6c:93:5e:2f:69:57:d4:12:fb:a9:d1:62:
26:9a:6d:34:73:a1:56:ae:bb:fb:39:18:b1:b2:9b:40:f2:1a:
59:28:ab:eb:c0:16:e0:e7:76:74:09:86:23:a1:c0:ab:05:d3:
07:08:8a:f9:e2:60:a0:7d:83:46:dd:57:1d:c4:69:89:df:ee:
0e:bd:5c:3d:10:ef:ff:17:7d:d0:0b:85:b4:90:d9:e8:3c:87:
b5:8d:6d:72:0b:66:d9:2e:dc:b2:34:71:76:16:da:5b:a1:8e:
9c:fb:04:26:2c:c8:d6:61:66:a9:bd:e3:33:04:95:60:1e:12:
74:8d:ab:f8:43:6d:f0:a3:56:6b:91:ed:a7:fb:0a:48:49:4b:
c6:a4:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:34 2025 by rpki-client