Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File: yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier: 9qMReFSqMJUt0xye2mO56eZBRrO0Mcl10lGlhR6NGhQ=
Subject key identifier: 91:35:BC:E9:A0:56:D2:E9:95:9A:1A:38:FD:DE:6C:6C:24:AE:93:A0
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer: /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial: 01987D1C2742AE0FF1E38D861942ED501E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number: 0CA8
Signing time: Wed 06 Aug 2025 02:00:53 +0000
Manifest this update: Wed 06 Aug 2025 02:00:53 +0000
Manifest next update: Thu 07 Aug 2025 02:00:53 +0000
Files and hashes: 1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: CWeSRYTHBf3pbIX0MlcZIQbmdf5TA6PjSABX+AGFKD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:27:42:ae:0f:f1:e3:8d:86:19:42:ed:50:1e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Validity
Not Before: Aug 6 02:00:53 2025 GMT
Not After : Aug 7 02:00:53 2025 GMT
Subject: CN=9135bce9a056d2e9959a1a38fdde6c6c24ae93a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:51:44:85:f0:b8:1a:29:47:04:bf:13:d0:
e5:86:eb:e1:86:e4:a9:99:3b:35:62:86:fd:8e:ec:
7d:e6:06:d4:45:da:3a:5f:ee:81:68:4a:1c:18:08:
59:d7:70:6c:ba:2d:99:fc:05:6b:63:73:be:e1:27:
18:4c:ac:c8:15:9b:01:2f:23:53:05:b5:ef:d6:9e:
28:3f:5a:29:43:19:71:45:bd:b6:93:81:56:8f:c1:
4f:77:cc:09:5f:9e:06:a9:0c:71:04:0e:72:af:bd:
88:4b:11:6f:68:90:e3:10:fa:ba:e7:44:7b:42:de:
26:da:99:36:14:1a:82:3b:0e:6c:73:34:d8:1c:9f:
60:4c:24:e7:ff:57:d5:29:3f:59:d0:8e:a8:27:85:
a6:74:67:52:eb:fa:86:32:24:e1:20:80:d5:3c:49:
89:5d:f4:ea:e5:8d:88:e6:fe:f2:5a:4d:67:51:df:
93:fb:4b:86:a5:51:2f:7f:5e:8e:9d:c9:63:34:06:
01:13:0e:05:5c:07:22:7a:e9:2b:fd:cd:c8:59:60:
2f:e1:86:5e:84:a7:62:29:c3:29:e5:9c:70:2b:46:
2d:28:dc:f1:41:9b:c8:65:4d:25:8d:82:4b:56:e3:
03:32:cc:d9:31:14:57:ad:a2:57:9d:79:ae:4d:30:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:35:BC:E9:A0:56:D2:E9:95:9A:1A:38:FD:DE:6C:6C:24:AE:93:A0
X509v3 Authority Key Identifier:
keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5b:49:99:08:0e:0c:2f:c3:aa:c5:53:ce:f3:8b:11:1e:b2:
f3:06:e6:22:be:cd:e1:08:7b:e6:c6:22:c3:6c:3f:8f:d6:97:
ee:3b:5b:ee:64:75:8e:55:e1:57:07:6f:56:60:48:f2:af:11:
6a:56:49:2f:07:cc:71:ea:02:76:2b:35:28:5f:f8:20:53:de:
09:f7:bc:42:89:4e:03:9d:31:91:68:00:6c:e4:d2:1c:46:c0:
8e:c4:90:bc:e4:1d:99:7a:84:5a:34:27:6d:92:67:f1:46:4e:
2a:db:8d:11:01:87:51:47:45:e5:8c:9e:eb:32:66:d2:e8:a4:
15:02:a1:b8:ec:2c:41:16:57:11:65:b3:05:83:cd:a6:d1:34:
ec:25:99:0e:f4:7e:58:9c:c1:e8:fa:5e:d5:f6:83:0b:44:78:
6d:c8:ff:5a:0d:70:2d:cf:4b:75:af:02:a8:f8:37:92:fe:44:
6d:e2:9a:d3:ab:ff:37:c4:d2:1a:dc:dd:b0:cf:a0:1e:66:de:
54:7a:10:05:ce:1b:0b:af:c3:6d:30:94:74:40:17:41:f6:81:
9d:70:d3:c6:4a:ff:5f:a1:d8:4a:a2:c9:bc:0e:a4:fe:e8:ec:
21:8f:57:6e:c6:0f:36:8b:f7:bd:05:93:ef:65:f5:20:ca:34:
1e:9c:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:26:08 2025 by rpki-client