Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: GTnWkRHJFGTw79xofMeT9h0WH8vvUx0s70jGNsvXcgg=
Subject key identifier: 79:CF:DA:22:35:14:20:C6:C1:D8:A4:30:39:7D:EF:91:1C:85:6A:52
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 01988544462DB1B2EB3C014C2D64A4C3467A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0EA7
Signing time: Thu 07 Aug 2025 16:01:40 +0000
Manifest this update: Thu 07 Aug 2025 16:01:40 +0000
Manifest next update: Fri 08 Aug 2025 16:01:40 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: +wvVcCMwhyT+wDL6uZjk4AoLyNOqpZ01ujTcxOgNKuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:46:2d:b1:b2:eb:3c:01:4c:2d:64:a4:c3:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Aug 7 16:01:40 2025 GMT
Not After : Aug 8 16:01:40 2025 GMT
Subject: CN=79cfda22351420c6c1d8a430397def911c856a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:90:cf:94:59:06:41:b0:84:60:06:c5:ae:
dd:c3:e9:a3:f8:51:43:39:11:5e:fb:d6:1d:f3:fa:
f8:29:72:ea:c7:f5:8b:b8:38:f2:86:12:ae:b1:be:
fc:f7:3e:47:85:45:97:b6:73:5e:bf:19:2d:97:a7:
ff:ca:85:d7:c8:e1:1b:e1:cc:f7:41:5d:5d:a9:96:
e7:7c:a5:e4:32:05:70:64:ba:79:ee:24:df:2a:fd:
21:05:2a:93:fa:c1:47:9e:64:51:85:23:f2:14:8d:
b9:87:84:d2:b5:b3:c9:ba:1a:0b:a8:d9:75:0c:96:
48:ac:c1:4b:1c:b1:d3:b8:ac:12:1a:01:ce:73:c7:
ac:c8:57:4d:7d:b0:cb:69:ed:b6:4b:ff:77:b1:1c:
4d:73:ab:2b:1e:55:a6:6c:39:de:42:89:ab:8d:2e:
53:e8:87:ad:ab:d6:d8:3d:e3:ba:92:cc:67:8d:4d:
05:de:c7:b9:c3:2a:03:a9:2f:df:a0:d8:85:a7:8a:
78:18:b1:03:50:8f:70:d8:82:11:ee:5a:5b:7a:4a:
07:cc:59:47:e3:b5:24:00:f1:7c:df:5d:59:0f:45:
63:35:ae:a7:fc:94:91:31:b4:33:ab:26:1d:54:17:
e9:c2:73:3e:0d:c5:02:68:73:ea:eb:0b:26:df:71:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:DA:22:35:14:20:C6:C1:D8:A4:30:39:7D:EF:91:1C:85:6A:52
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6e:b7:57:c6:26:51:c1:43:b7:6f:b4:1a:ac:e9:05:c8:35:
6f:44:d1:7c:17:b9:a0:57:72:1b:b7:08:75:8c:83:57:b0:f7:
7f:4f:40:9b:ae:34:96:c3:29:2a:3c:83:47:7c:df:8e:e9:19:
d1:ab:63:1f:6d:d2:8e:4c:4f:53:be:c2:16:c4:68:c6:0e:2d:
e3:2f:d5:ce:2a:36:89:c4:c4:8c:3b:94:35:ee:7a:29:66:eb:
86:0a:60:56:31:2b:4c:69:9d:e3:95:6c:68:02:85:f0:b6:24:
80:3b:61:2a:30:0f:a0:db:7d:50:98:b4:f9:77:86:23:58:5e:
ad:61:07:4c:85:df:84:6e:6c:42:4b:5a:d7:b6:08:d8:56:53:
ec:c8:76:d4:49:7a:32:19:6a:cb:06:35:f8:8d:a4:c0:56:1b:
a9:a9:ac:33:b2:49:91:3a:30:61:af:71:13:8f:81:cb:41:47:
fc:71:91:74:7b:32:2a:4b:36:14:d4:07:5d:bb:16:ba:fd:54:
41:40:e3:a7:59:93:06:32:3b:ef:a2:e8:9b:83:98:95:14:2f:
29:88:f8:88:93:a6:55:4d:97:5c:42:95:38:1b:40:98:8e:a1:
5e:91:5b:6d:36:cc:f4:9a:75:70:78:f1:70:cd:e3:ca:08:fd:
3f:b5:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:57 2025 by rpki-client