Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier: K9cezymnmSvQ9EzYiD4iUZnpw/1RGeBEcVhJWVKmfhk=
Subject key identifier: 8D:14:05:03:87:FE:B8:A4:59:B4:2A:E9:EE:7A:EA:6B:92:6A:40:4B
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial: 019895924387F79448986A217BA5F6C394CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number: 0986
Signing time: Sun 10 Aug 2025 20:00:47 +0000
Manifest this update: Sun 10 Aug 2025 20:00:47 +0000
Manifest next update: Mon 11 Aug 2025 20:00:47 +0000
Files and hashes: 1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=)
2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: 8tVGjYEzgT3ENyGFeT1se/AtRxtKtI6Q8haBF2SibBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:43:87:f7:94:48:98:6a:21:7b:a5:f6:c3:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
Validity
Not Before: Aug 10 20:00:47 2025 GMT
Not After : Aug 11 20:00:47 2025 GMT
Subject: CN=8d14050387feb8a459b42ae9ee7aea6b926a404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:20:20:4e:56:fd:8e:0f:5c:7f:e8:30:9d:
bb:c7:bf:df:50:db:50:63:9c:94:0d:de:59:a2:40:
89:b7:0e:07:06:7d:ad:bd:a8:1c:3b:b9:50:9c:2d:
7b:95:38:42:39:36:90:f9:7a:1e:ad:41:a8:95:3d:
0c:16:4d:e4:e2:00:c8:41:7f:fc:1b:5c:4d:fb:3e:
d1:08:6b:69:85:96:96:36:17:04:2f:09:26:de:72:
41:cb:44:3e:97:88:27:9a:22:45:27:ba:1d:dd:79:
bf:37:d5:f5:64:92:af:b2:e8:35:f9:28:7a:65:38:
3d:99:4f:71:ea:48:db:de:1a:75:c7:60:0c:c6:77:
3a:6b:53:8b:ff:40:cd:20:e6:c6:ae:95:6e:d1:dc:
b7:c1:72:54:19:f6:42:93:a7:23:36:b1:b5:98:f8:
83:2f:ac:6f:56:ad:15:c9:97:0a:2b:7c:be:bf:d5:
6b:2d:7d:6e:eb:43:8a:6b:fa:4e:5d:ef:00:96:ee:
49:75:fb:ab:ba:16:4b:02:c0:a1:db:63:9b:89:67:
2b:3e:c4:3c:cf:c6:1b:18:33:ba:a7:d9:1e:b6:f3:
e5:01:2d:e0:b7:89:78:64:9f:40:c8:9b:eb:b3:27:
9e:02:61:96:30:d6:3a:4b:98:ca:db:05:0e:c4:21:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:14:05:03:87:FE:B8:A4:59:B4:2A:E9:EE:7A:EA:6B:92:6A:40:4B
X509v3 Authority Key Identifier:
keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:91:a0:ac:c5:33:fa:0b:d3:69:85:0c:cc:ab:7c:80:cb:4e:
af:e4:fb:f8:12:2b:d2:77:75:be:a9:36:0e:5f:fa:b6:61:5b:
41:34:b1:d5:0a:c9:20:ab:a0:ee:06:ec:19:d7:3c:e8:9a:04:
5f:d2:3a:bc:17:20:95:0b:18:4c:79:01:24:d5:01:f5:12:69:
96:b3:97:f8:f0:74:f1:41:55:dd:f0:c1:93:a7:c9:0b:df:94:
33:4f:3a:b2:70:68:6c:fd:0c:97:f6:44:d4:7d:de:73:9c:c6:
17:50:6e:3e:8c:ff:fe:9a:32:91:03:f9:8d:e1:c5:d5:66:3a:
db:0d:a6:b4:93:f9:f4:90:2a:a0:d2:ad:24:d3:99:5d:65:78:
14:2b:88:a0:4c:04:84:21:ab:41:bb:52:a1:0f:ec:e6:36:a3:
b8:0a:38:80:e6:14:87:18:2d:a5:e6:c6:cd:05:d2:a1:74:89:
08:2f:07:96:bf:f9:d9:46:c9:94:6d:f0:94:9e:9a:f1:c1:b7:
ba:36:b9:81:42:54:92:81:cf:43:c2:71:fd:36:92:9d:48:86:
57:2e:6b:3e:b6:6c:ca:f7:a8:f7:11:cd:5d:fe:07:29:97:72:
c9:b2:73:2b:2f:e3:22:7b:2f:98:ef:ca:a1:4e:e2:cb:3d:52:
4c:4b:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:14 2025 by rpki-client