Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: 53tKZUbmMQ9jeRtF+R7xv8B0o88f7CjfMR6B6SdslmE=
Subject key identifier: A5:E6:0D:99:1A:AA:A9:12:BE:C3:CB:A7:3B:F7:61:45:46:EF:15:B1
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019896DC850FAEDA3A48D5F895E74A13C268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 15BB
Signing time: Mon 11 Aug 2025 02:01:30 +0000
Manifest this update: Mon 11 Aug 2025 02:01:30 +0000
Manifest next update: Tue 12 Aug 2025 02:01:30 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: xvDOH4s8K8XhNxlLC6Q1fM8t2oGlF9WntR5OMFE9dKI=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:85:0f:ae:da:3a:48:d5:f8:95:e7:4a:13:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Aug 11 02:01:30 2025 GMT
Not After : Aug 12 02:01:30 2025 GMT
Subject: CN=a5e60d991aaaa912bec3cba73bf7614546ef15b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:1f:cf:0d:92:5c:bd:c9:f7:16:9d:76:23:
0f:fd:1c:d3:a6:0d:af:98:4c:08:af:7f:4f:a1:46:
f7:a1:0b:54:94:77:69:5d:40:2e:74:74:d2:61:8c:
c5:2a:d6:9f:fa:7b:00:ed:ce:ed:f9:ef:3b:97:69:
d3:ee:9d:0b:ef:46:bb:9b:3d:b5:31:1a:f5:46:c3:
e5:e4:32:7b:0c:90:28:66:d5:fc:3d:07:1b:9b:11:
a3:85:48:a8:4b:9f:d4:ef:fd:42:e3:ed:80:16:f3:
d8:38:3a:06:b5:53:9c:21:a1:81:6a:84:33:f2:0f:
b3:64:92:57:05:a1:81:7d:ec:7d:45:00:75:0b:1a:
55:64:ef:87:79:47:ef:a3:6f:11:cb:4c:80:58:5e:
22:63:51:73:e3:47:04:2c:de:6e:22:98:c7:b3:6d:
22:b7:35:fb:c4:ba:6b:97:0a:53:76:bc:b3:dd:6f:
e9:4c:29:ae:4d:96:51:29:7c:d4:1c:d3:31:d1:b1:
c9:17:71:9e:76:5a:2b:b6:6e:ce:da:3a:0d:99:9c:
ac:7c:2c:d1:ba:b1:15:88:3b:bb:0c:c8:94:19:e8:
5b:ba:28:f4:c0:92:7a:7a:17:4f:d5:66:3f:60:39:
a0:c0:7e:7f:4b:56:a8:28:27:0f:0d:90:05:f8:d7:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:0D:99:1A:AA:A9:12:BE:C3:CB:A7:3B:F7:61:45:46:EF:15:B1
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7d:b2:71:74:76:17:5e:36:65:bf:04:30:59:39:7e:0e:d6:
ef:f4:0c:b5:43:66:4a:ed:d4:63:c2:03:b6:3b:59:55:f9:8b:
88:d6:9e:fc:4d:68:c5:23:0f:24:94:70:19:81:35:19:5c:06:
26:96:76:da:b5:0d:22:14:d7:88:b0:43:28:fb:67:b9:c9:42:
9c:fe:48:51:e8:25:5a:b8:cd:e5:12:13:56:25:96:34:7a:ba:
f4:65:1f:44:2a:22:1d:06:c9:14:7c:b9:fa:df:06:69:3f:d0:
26:b1:fc:15:e8:ba:53:d5:06:3f:5e:0e:ff:de:31:ef:42:1e:
6c:4a:31:e7:b2:67:ef:77:5a:6f:ad:76:54:1d:17:d7:31:3b:
94:b7:f2:94:b6:76:bc:79:29:50:6b:97:a5:0a:26:cd:16:13:
2e:29:93:61:9c:fa:2b:68:ee:13:39:92:31:99:a7:85:e1:45:
a7:71:70:a3:31:00:e9:3d:40:80:d3:c2:00:ec:ae:e2:c9:e3:
11:9f:86:f3:fe:31:54:f1:64:40:c9:06:fd:fc:3b:2e:9c:bc:
3c:20:31:f5:5e:98:0d:9f:73:81:d6:13:54:3d:10:e4:74:55:
15:6d:ef:71:5c:21:2d:ae:b0:25:9d:b3:60:fe:83:05:46:5b:
fd:c9:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:46 2025 by rpki-client