Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: 7EeB2cDjUBE1eSwBoWQl7hIF9B4RrOM9DIfa/Bl7YU8=
Subject key identifier: E7:3F:93:C7:F2:48:EA:74:7B:EE:21:BE:50:B2:20:9D:5B:67:36:7D
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 01988D6A979D636830369698A2F149E42750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 06:00:29 +0000
Manifest this update: Sat 09 Aug 2025 06:00:29 +0000
Manifest next update: Sun 10 Aug 2025 06:00:29 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: l2Qe2Z1ODD/RDhT3oCK1D9bCpIVEXSFK6DVV9LS0Ybc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:97:9d:63:68:30:36:96:98:a2:f1:49:e4:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Aug 9 06:00:29 2025 GMT
Not After : Aug 10 06:00:29 2025 GMT
Subject: CN=e73f93c7f248ea747bee21be50b2209d5b67367d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:a7:b9:bb:1d:7f:fb:99:76:4a:ee:33:77:
48:30:15:b6:e7:4f:28:58:30:1a:b1:a3:36:46:4e:
f7:e8:82:71:a0:d5:fc:dc:66:c1:fb:47:00:a8:48:
61:e3:5b:0b:9f:b7:d2:11:6c:e5:3b:21:19:73:1b:
eb:59:19:e3:62:73:d0:e3:a8:1a:28:fe:3b:b1:a3:
f7:b1:c6:b2:53:f2:b3:3b:3d:48:e0:5d:80:32:dc:
c1:bb:1b:97:d0:f2:db:7b:fa:ef:89:59:75:5c:51:
7d:c6:62:be:54:b9:90:48:c2:32:90:33:e8:a5:98:
7a:6f:66:13:e7:38:51:23:fa:ba:0d:0d:f4:7e:83:
9d:d4:fd:be:09:a3:2d:10:00:ac:6a:98:bf:8f:8e:
00:4e:00:12:4e:e6:7f:d6:c4:d3:d0:b1:0e:e1:8c:
25:76:70:7c:26:28:52:b9:09:99:d6:70:41:5f:00:
c0:f3:4c:e9:20:35:79:06:4b:c4:4a:2b:c4:ca:59:
3b:dd:59:58:02:e0:f0:01:f9:b3:54:9a:52:c7:53:
bf:9c:91:16:30:e8:11:fe:7c:1d:b9:51:72:25:bb:
99:4c:a5:c0:9c:31:1d:7c:9c:44:9f:a1:dd:ec:27:
03:61:1c:07:6f:e5:e6:13:7c:e6:7b:a1:3e:0e:80:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3F:93:C7:F2:48:EA:74:7B:EE:21:BE:50:B2:20:9D:5B:67:36:7D
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:20:9e:38:f7:d9:40:93:fb:05:00:87:6f:68:aa:0c:11:4c:
0a:c8:76:bd:c0:5e:b0:ad:e1:74:38:a2:af:6c:fd:19:36:0c:
5f:9b:91:4d:e3:92:b4:ff:23:f8:1d:e5:07:56:50:83:f0:d3:
11:2e:87:88:ec:af:95:ea:4d:74:89:ca:fc:47:e7:26:ca:f2:
58:da:99:a2:4e:5e:c8:33:f3:4d:4e:8a:15:b5:72:7c:cd:db:
7d:55:67:16:d0:14:b3:62:5a:18:75:88:8b:2a:db:7a:b1:f4:
1f:7d:08:b3:ce:18:ca:4d:d2:47:7a:20:5f:b5:23:29:b7:4f:
fd:03:5b:ae:f5:c6:28:71:c1:0c:0f:7f:e1:cf:f7:48:a9:0b:
82:ca:33:d4:76:3a:a3:4a:fe:19:8d:f6:a8:a3:9e:c4:68:25:
a7:b6:1e:1c:22:0b:7b:55:2c:81:25:cd:63:d7:a9:54:29:76:
0a:e7:35:32:94:77:aa:58:a5:8a:35:b7:c4:ed:68:7f:49:17:
2d:0e:7f:b4:73:6f:49:19:78:a2:5b:4a:c5:53:3e:50:c3:c3:
bd:2e:b4:09:0a:13:a8:1d:65:66:e3:a0:94:e8:5f:f0:84:22:
6c:49:ef:10:41:db:2d:84:62:4f:78:51:a5:a0:f8:78:a2:b0:
ab:3e:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:39 2025 by rpki-client