Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: JdaKrTtFMz/BgUb9qT5JiloJN2Nr38WH7q8DL/NAm58=
Subject key identifier: 86:3F:C6:64:FB:34:5A:C4:7C:DA:91:D9:2A:AA:66:01:D4:AB:11:EA
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 01989FDED079A038D8234F3D809251A9166E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 1375
Signing time: Tue 12 Aug 2025 20:00:36 +0000
Manifest this update: Tue 12 Aug 2025 20:00:36 +0000
Manifest next update: Wed 13 Aug 2025 20:00:36 +0000
Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: mq9WrpwtAO8Kh/Z6DShrxhrrmugGtcit2et2dVpBa50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:d0:79:a0:38:d8:23:4f:3d:80:92:51:a9:16:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Aug 12 20:00:36 2025 GMT
Not After : Aug 13 20:00:36 2025 GMT
Subject: CN=863fc664fb345ac47cda91d92aaa6601d4ab11ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:e8:6a:a7:12:ec:03:33:b1:de:eb:ab:21:
b1:66:a0:52:a9:3b:7e:ce:65:cd:44:0c:9c:ac:4e:
b1:ad:6d:0e:68:2a:18:dc:2d:b7:e6:17:15:10:4c:
ce:36:19:79:c8:02:7f:fe:55:e4:b1:1d:0e:54:50:
01:9b:89:04:b0:10:6e:41:fd:e2:e3:ec:93:ce:16:
91:3c:e5:9d:e0:69:ea:7d:45:2d:6c:ef:5f:82:17:
5d:c7:87:df:47:c5:84:96:e0:2a:d9:4a:f6:9d:a7:
1c:aa:a4:34:e9:76:07:d1:1b:f2:27:56:85:ca:3e:
18:77:83:e8:21:18:e6:3c:70:c9:12:01:87:69:a1:
4a:fc:9d:c6:ae:bb:12:fa:93:73:12:55:0e:19:a1:
34:2e:19:54:7b:3a:ff:e0:84:e9:6e:96:59:b2:43:
75:74:c1:e9:4a:77:be:fb:73:75:b7:64:ba:00:c0:
d6:2f:0e:f5:01:f4:7e:be:18:82:ce:39:a9:9f:41:
3f:28:1a:c1:35:c2:57:3f:3e:7a:29:d3:cd:34:0b:
85:61:e1:49:50:50:29:ae:bf:83:42:c7:8c:97:7b:
81:04:99:1c:7a:f4:f5:5f:08:d6:5b:f3:de:80:55:
86:21:5f:3e:38:b0:ed:e4:4a:88:8b:87:31:da:2c:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:C6:64:FB:34:5A:C4:7C:DA:91:D9:2A:AA:66:01:D4:AB:11:EA
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cb:0e:16:36:94:d3:b6:e6:80:7f:e3:fd:c5:29:3d:dc:1a:
11:a7:bc:b3:0d:46:07:0d:43:ad:01:94:28:2e:8a:60:12:0a:
ce:0d:74:68:9f:7b:d8:af:d8:19:66:bd:34:8e:c4:69:08:00:
78:77:03:54:26:e3:61:a3:15:92:4c:5d:99:dd:a8:6d:9e:d8:
a6:47:4d:7c:80:4b:e4:b5:53:b5:51:95:ce:d3:1c:3d:16:55:
e2:13:e8:f8:92:01:29:14:d6:d6:26:fc:13:21:61:78:ad:3b:
07:11:8c:ae:a0:b6:fb:62:39:bf:37:56:88:4a:8d:ad:a5:45:
37:17:7c:bd:2e:27:1b:af:bc:90:7e:a9:09:a3:d8:a9:a4:8e:
9c:7d:5d:99:bf:f5:55:ee:ce:0b:1d:bc:93:44:64:78:21:ba:
0e:73:6f:ee:d7:01:99:e8:1d:1a:7b:92:57:37:9c:88:90:9c:
67:cc:d5:3f:c8:ed:55:32:b1:9d:05:71:63:45:12:80:db:86:
3c:da:bc:af:0d:88:dd:b4:03:a5:1d:74:05:75:8e:df:7e:16:
a1:1b:1e:61:81:96:27:59:9e:34:ee:01:8c:36:66:59:a1:3a:
cd:bd:c3:0e:0c:11:af:a2:13:45:d1:6a:ae:46:9f:f5:d9:41:
9b:20:aa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:46:28 2025 by rpki-client