Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: wSOg2nW20qeLyVe44+GxGgyiTdfsCXbKIbed6HmxzK4=
Subject key identifier: 24:06:14:D0:24:81:90:DF:38:62:7F:FB:1F:54:67:AD:CD:72:FA:DA
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 01987ED37CB4909DC6ED2003039C5D977F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 15B0
Signing time: Wed 06 Aug 2025 10:00:45 +0000
Manifest this update: Wed 06 Aug 2025 10:00:45 +0000
Manifest next update: Thu 07 Aug 2025 10:00:45 +0000
Files and hashes: 1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: Lv2eFj/0rl5ehludZOdW8iyjbsO7AcNjGf4ofeSKD6E=)
2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:7c:b4:90:9d:c6:ed:20:03:03:9c:5d:97:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Aug 6 10:00:45 2025 GMT
Not After : Aug 7 10:00:45 2025 GMT
Subject: CN=240614d0248190df38627ffb1f5467adcd72fada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:3b:5c:f1:bb:f2:29:cd:c6:6e:69:73:83:
7e:c2:49:15:fa:97:e4:26:ad:0e:58:a5:eb:3d:ec:
56:4b:36:1b:87:6b:99:85:aa:1e:11:2c:a9:e6:f1:
d0:96:a5:9f:fc:d2:63:d8:6e:42:ca:cc:0b:5e:51:
5b:56:9e:76:40:83:08:4a:7d:84:06:53:4d:93:8d:
69:41:5d:49:14:22:f9:d5:de:53:21:0b:07:8b:a7:
a5:75:1b:eb:97:11:63:e9:32:0d:a4:e7:05:c4:25:
5e:44:de:76:cf:79:56:51:2a:cc:02:09:ee:92:72:
9d:6e:18:7a:b2:5c:6f:84:14:ab:7f:ac:cd:63:7a:
15:5d:36:08:ac:eb:cb:0a:46:58:3b:8d:a3:b6:d4:
e9:f0:8d:1e:7f:e3:8e:26:07:b1:3f:e9:16:7c:b4:
78:4f:55:6c:69:27:5c:4e:0d:a9:21:1c:9d:91:9e:
6d:60:44:88:76:6e:1c:96:67:ec:a8:5a:38:d0:a4:
35:3d:ef:8f:3d:66:18:cc:b0:07:9c:ad:c4:62:64:
4d:4b:7d:2e:3c:ee:ec:19:f3:88:66:bb:4d:40:9d:
e0:cf:f9:6f:15:ba:4b:c0:35:3b:3f:2f:39:87:bc:
db:2b:be:29:31:87:0c:53:58:8b:14:19:50:38:d7:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:14:D0:24:81:90:DF:38:62:7F:FB:1F:54:67:AD:CD:72:FA:DA
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f2:ae:36:6f:00:10:07:97:5b:b5:73:72:fd:8c:a6:15:64:
58:a5:62:8e:52:ee:bf:d5:e8:94:12:b0:8f:c7:a0:75:f6:d9:
3c:0d:05:2e:2e:99:f8:43:27:56:eb:88:48:b6:41:84:08:c2:
5d:0a:47:ae:9d:89:c0:b6:8d:6e:81:d5:2a:37:dc:c7:bd:b0:
e7:65:18:9d:f3:5d:91:cd:98:f8:af:ac:86:9f:7f:08:eb:87:
81:4b:72:f2:10:70:b7:2d:76:1b:4b:41:c3:62:8c:bb:34:82:
56:61:70:69:7f:53:11:7e:13:2c:2f:f7:dd:b6:a8:35:59:28:
f1:45:a5:89:16:3a:33:5d:a7:db:61:cb:32:5b:75:e4:22:2d:
2e:ed:cc:f8:fc:68:e2:0f:3f:d2:a1:0f:84:e3:33:7f:91:ac:
d5:14:03:5d:87:ac:82:fe:9e:04:40:3e:c0:b7:57:77:c0:0e:
fe:a5:9d:06:0b:22:82:0f:7d:b2:71:55:bb:cd:3c:f2:15:36:
51:19:6d:70:6b:ec:13:06:39:4f:6b:5b:3a:5d:09:de:11:05:
db:24:6e:9f:72:70:d5:68:96:38:95:16:5a:e8:8c:85:3c:2a:
fa:7d:60:8d:3c:49:3d:07:be:ef:96:f9:40:8f:df:9d:ff:7b:
57:64:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:15 2025 by rpki-client