Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: zTXTmf6LoJ80DZkIOHiL8Dlq0w2VkFmv4dho7VfNptM=
Subject key identifier: 5C:A1:B6:9D:D8:8C:55:0B:29:10:6B:43:12:90:21:46:F6:CB:0F:7C
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 01989901C2CC0860E3DE24D9829803F668A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 0DD7
Signing time: Mon 11 Aug 2025 12:01:26 +0000
Manifest this update: Mon 11 Aug 2025 12:01:26 +0000
Manifest next update: Tue 12 Aug 2025 12:01:26 +0000
Files and hashes: 1: n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa (hash: yrWbMC7j+dM+coJf76N3ZfAw2TV7juT6B31o0/J59Ds=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: U+yJz0wUGbDIo8zH33LzAF+vqYLr8cOCHpA0FR1f6PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:01:c2:cc:08:60:e3:de:24:d9:82:98:03:f6:68:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Aug 11 12:01:26 2025 GMT
Not After : Aug 12 12:01:26 2025 GMT
Subject: CN=5ca1b69dd88c550b29106b4312902146f6cb0f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:60:4d:43:f6:10:2b:97:59:31:a7:2b:2e:
74:d7:39:79:ba:75:b2:0f:72:62:de:d4:ec:a9:83:
4e:5c:83:90:a9:c6:b2:94:d5:3b:b8:f3:b1:61:81:
1a:d5:56:c3:8b:45:e9:09:c7:07:0f:c4:ab:b0:ef:
08:ec:46:7a:39:78:0d:22:5a:60:10:9f:54:0d:fd:
58:6c:4d:c5:73:05:56:6b:c6:6b:79:67:56:24:f2:
6a:9d:a7:e8:6e:21:96:b6:8e:6f:b4:61:2c:dd:36:
9e:c7:4c:b5:c8:4d:76:45:9c:b5:2d:13:d5:ed:0d:
5b:84:7f:47:f3:9d:58:33:33:2c:d6:93:17:94:95:
b0:69:72:90:ed:21:8b:96:ed:87:0e:1d:3d:13:74:
15:ea:58:d1:aa:9f:fa:f8:d3:42:c3:11:69:f6:9a:
fe:9e:4f:dd:c0:0a:15:0b:12:21:d7:3d:45:b3:1b:
d9:03:eb:62:be:ea:ed:37:59:7a:28:1e:88:1e:80:
c9:44:98:58:c0:3a:10:15:e7:59:83:b5:2b:d0:c3:
6d:1d:7c:7a:eb:69:f9:8a:b4:37:e1:10:a0:a4:22:
87:a3:05:ba:77:ae:b7:d1:f2:b7:c7:c7:5d:7b:ee:
7e:01:3e:f5:20:69:30:de:ee:55:ae:42:7e:9c:c1:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A1:B6:9D:D8:8C:55:0B:29:10:6B:43:12:90:21:46:F6:CB:0F:7C
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:05:64:45:46:6e:82:17:cb:cc:6d:22:18:80:ab:c1:99:25:
ec:60:fe:1b:68:ea:14:6e:2e:b1:9a:55:08:74:fc:a6:4b:d2:
53:89:a9:03:1a:86:aa:cc:63:6b:d6:03:df:09:db:dc:4d:71:
4f:02:ed:f3:9e:25:b3:12:0e:62:9c:50:cc:80:bf:f4:1f:ba:
6e:17:6c:8a:c4:ff:cf:10:3a:6b:bc:1b:6a:f5:2d:1a:6b:f6:
7c:35:d0:89:16:91:06:c9:fc:8a:35:30:56:01:91:58:b9:6b:
7b:d0:39:49:ae:29:83:9c:89:73:f1:d4:9b:8b:dd:2b:2c:25:
dc:51:55:7d:a3:60:26:56:9d:96:b7:e0:0b:74:ce:41:5e:04:
f8:41:53:1a:32:0c:6c:bf:11:64:71:10:3b:cc:20:be:ae:d6:
76:2a:72:a4:20:d9:90:17:fb:fb:00:0e:46:37:8d:57:aa:d2:
93:6b:ff:5f:61:4e:9e:65:7c:2a:b9:9f:74:8d:0f:d1:8d:c3:
97:6a:31:77:47:47:47:38:b1:06:dc:83:af:54:95:d1:b8:71:
18:53:03:c3:e3:87:08:5f:c6:50:18:d1:df:fa:68:1a:69:f2:
33:05:a8:92:4a:d0:b6:03:9a:c5:46:89:ed:32:da:bd:4b:4a:
99:39:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:05:26 2025 by rpki-client