Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: 9HVmhF7Mtssc/N/h29tD8hhLRDeT06pRtB2K548zt1E=
Subject key identifier: D0:13:44:3B:A7:9E:74:4F:A4:57:A1:DC:2C:CE:71:B3:61:A6:08:1C
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 0198925A63157514B31A86D1258E26A1FCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 0DB6
Signing time: Sun 10 Aug 2025 05:00:53 +0000
Manifest this update: Sun 10 Aug 2025 05:00:53 +0000
Manifest next update: Mon 11 Aug 2025 05:00:53 +0000
Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: Db5pgM8cRZTRwR3QyLSU4cS1il26zwqcfyHI/bcbc0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:63:15:75:14:b3:1a:86:d1:25:8e:26:a1:fc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Aug 10 05:00:53 2025 GMT
Not After : Aug 11 05:00:53 2025 GMT
Subject: CN=d013443ba79e744fa457a1dc2cce71b361a6081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:39:b5:72:34:19:66:bb:a2:ae:08:3a:33:
24:97:2e:99:b0:32:a9:4e:e0:94:c3:30:e3:5b:11:
01:be:5a:d2:05:32:67:a4:fe:1b:a5:51:96:8e:c0:
69:05:41:96:cb:dc:77:53:3c:9a:c4:53:ee:dc:74:
ea:64:c3:1c:eb:e6:14:28:4e:c3:46:44:a7:59:cf:
e6:9c:bd:32:58:9f:ce:9a:23:4b:d2:8c:df:da:65:
ff:aa:e5:86:39:f2:b4:50:f5:0b:b2:6f:4d:cf:1e:
8e:0d:2f:89:95:c3:03:c0:12:0d:d7:62:01:42:9b:
6f:5f:c6:ff:ea:b4:ea:da:4a:90:68:77:24:e0:bb:
a5:55:d5:07:fd:6f:0a:08:ec:8f:22:e9:e6:8b:e5:
0e:2c:0e:92:09:f4:27:6a:c4:b6:a7:f1:a7:17:88:
e0:92:38:35:47:c6:07:08:c4:58:3b:58:02:bd:1e:
ed:25:3d:00:b7:44:d9:f1:95:e1:bb:ce:1d:84:9e:
0d:b8:30:2b:07:cd:59:e9:cb:ab:72:5f:ee:f3:2c:
5c:49:dd:c4:c2:1b:db:91:a8:ee:f3:40:c2:ff:d1:
fe:ad:74:b8:ba:29:09:65:95:7d:c9:77:44:72:41:
5c:46:18:d3:f5:cf:d9:5f:92:ec:f3:15:c5:53:ad:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:13:44:3B:A7:9E:74:4F:A4:57:A1:DC:2C:CE:71:B3:61:A6:08:1C
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b1:d4:c3:a6:58:0f:bc:c8:64:70:20:55:c6:65:1c:91:10:
ba:2d:51:75:67:ce:94:d6:75:58:6a:c2:82:83:13:8e:37:75:
29:22:c4:d5:a3:d7:3f:b3:54:03:c1:e0:94:17:39:c0:95:d5:
ca:25:6e:e2:6f:d1:d1:ec:80:ed:94:4b:45:c1:d9:45:4f:e9:
d4:07:dc:79:64:10:c1:56:82:33:a3:4d:e5:dd:42:54:6e:0e:
20:3d:96:b4:25:a0:f4:f8:47:ab:14:77:f1:6e:9b:76:d2:98:
ad:c6:3c:c7:5e:0f:87:91:ca:d0:83:08:76:51:d6:09:39:c2:
2f:0e:d2:d5:13:1f:b0:cb:a5:5c:6e:5b:c5:b8:ba:30:d6:ad:
88:28:64:aa:40:1d:82:2e:b9:7f:83:96:5e:fe:ea:95:04:ba:
fb:f0:43:97:38:2d:3a:b3:eb:8c:72:08:1f:a0:06:e4:82:78:
30:0c:01:3c:87:bc:cd:39:26:56:9f:15:68:00:2c:30:6c:bd:
0a:85:4c:60:44:ac:0f:a4:06:e2:ca:d0:36:0a:64:6d:02:ef:
78:f3:56:00:1c:5d:03:f3:27:d3:70:7f:30:8d:2b:c8:be:52:
0f:ef:98:40:46:0c:68:75:3e:de:7d:cb:03:c9:3f:c9:04:11:
c4:35:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:37 2025 by rpki-client