Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: jL5HLVZ8BK5X9U3uPPu8IDP5SKknAcdAMTZgcm6GpnQ=
Subject key identifier: F2:04:DE:81:04:03:5D:CD:41:2F:1F:1D:B0:7D:47:91:87:74:D8:C3
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 01988EEB38EDE3C588065194AA01FC9572B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 13:00:36 +0000
Manifest this update: Sat 09 Aug 2025 13:00:36 +0000
Manifest next update: Sun 10 Aug 2025 13:00:36 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: TdY0tzRWMdgXcr48i8IhjzkqRxW24VSF39e3GulPDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:38:ed:e3:c5:88:06:51:94:aa:01:fc:95:72:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Aug 9 13:00:36 2025 GMT
Not After : Aug 10 13:00:36 2025 GMT
Subject: CN=f204de8104035dcd412f1f1db07d47918774d8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:8f:dd:bc:37:11:b1:d1:8b:8b:93:28:7c:
77:2a:df:13:ce:ec:95:2b:9e:61:62:ec:86:b8:5e:
81:7f:a5:d6:e0:9d:60:a1:7f:53:6d:80:23:57:c4:
32:7e:5b:e0:a7:a7:a1:32:b6:6f:cf:23:22:16:57:
73:9a:e8:4a:71:9b:ea:39:20:8d:73:5f:cd:0a:f9:
cf:8b:64:c4:51:8e:91:10:7a:22:c4:63:32:af:01:
48:d2:61:d0:0c:27:1c:3f:4e:67:f3:93:b8:ba:88:
7e:b7:e4:ad:f3:65:f3:1d:d9:f4:8b:96:e9:33:3f:
2f:d1:d5:53:04:02:25:13:89:74:df:72:27:67:51:
3a:34:74:9f:9d:96:4c:87:e5:85:6c:81:ac:aa:4b:
83:b6:0f:5d:ac:9b:04:ef:a5:b8:dc:0e:ec:b2:35:
9a:cc:db:3f:48:19:93:82:e0:90:3b:98:b3:3f:c2:
91:15:67:09:bd:44:12:26:54:5b:a0:ef:f5:5f:ef:
40:65:f6:86:e7:b3:2a:2e:8e:ed:85:6a:8e:a2:46:
da:cd:60:21:f4:23:d0:c4:0c:f6:3d:00:20:54:55:
89:27:98:8b:fd:0e:86:74:2e:0e:de:cc:24:dc:cb:
67:87:07:48:ab:28:7a:a4:fc:87:ad:c5:36:88:b9:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:DE:81:04:03:5D:CD:41:2F:1F:1D:B0:7D:47:91:87:74:D8:C3
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1f:3f:71:dd:9b:5e:2b:ba:5b:1c:cc:8a:22:34:66:3d:35:
57:86:81:d8:6c:02:3c:5b:e1:b3:6b:df:5c:8c:8f:6d:fc:6d:
89:52:10:25:ea:0d:c1:d1:19:2f:4a:01:62:25:13:65:33:6e:
96:aa:3f:d2:17:0a:89:75:fb:d4:19:b4:55:d5:d1:eb:b8:ec:
3f:22:2a:13:8e:63:9f:e4:e6:96:7a:3b:26:40:3f:e5:55:85:
cd:c6:40:14:44:dc:4b:fa:a6:9b:a3:c6:91:e0:e1:d3:17:4b:
a8:4e:ed:9f:ad:a3:2e:f8:c9:70:b2:e5:b6:10:97:74:22:62:
35:13:d7:59:ad:e2:65:c4:1f:5c:5c:f3:f2:04:80:df:f9:e8:
81:a6:af:37:49:54:40:ec:28:13:29:23:6a:d4:69:73:a1:2c:
bf:7e:59:17:4b:ec:56:01:83:c3:ae:1e:e0:3a:58:7d:9c:6f:
0e:aa:9e:18:f2:e5:38:e3:af:81:bb:ef:56:63:d2:85:f8:68:
90:b3:a6:59:7c:bb:df:90:40:f1:cd:50:fa:ed:9b:95:43:ed:
83:e2:97:b6:05:26:47:30:43:7b:ca:e1:82:24:ac:c1:7a:93:
5c:e9:44:e2:b2:c8:f7:7d:9d:b7:c7:ef:81:f7:be:38:65:d8:
67:7e:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:12 2025 by rpki-client