Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: q8xBJ1TCeElutZwMjcppTGGzzl5JQOjS24rcoA4JCjw=
Subject key identifier: 3E:2B:A7:8D:C7:3E:37:BC:78:32:50:46:60:A2:AB:77:DC:5A:61:94
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019889203F59B11909776FEA0E7674B0531B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 03D5
Signing time: Fri 08 Aug 2025 10:00:48 +0000
Manifest this update: Fri 08 Aug 2025 10:00:48 +0000
Manifest next update: Sat 09 Aug 2025 10:00:48 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: J4B0vvcpvrU4d37pKDyEArTQEXa6fI1kCqlJfCJttN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:3f:59:b1:19:09:77:6f:ea:0e:76:74:b0:53:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Aug 8 10:00:48 2025 GMT
Not After : Aug 9 10:00:48 2025 GMT
Subject: CN=3e2ba78dc73e37bc7832504660a2ab77dc5a6194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:80:98:05:87:51:8e:80:69:f7:52:7c:fc:
9c:3b:52:59:74:f3:d3:d4:a7:2e:43:a3:d4:df:2c:
cf:86:7c:be:a7:c5:89:c0:ce:46:b2:7f:31:42:b6:
03:6d:db:4e:1f:29:46:79:da:eb:64:97:14:ea:e9:
86:49:da:6b:bb:ab:c9:e5:af:26:34:ac:48:a6:4f:
bd:bf:5a:3b:db:6c:75:e5:b9:2f:a4:88:35:86:04:
75:d5:9f:a3:fe:b3:1a:a7:03:1f:cc:35:fc:35:48:
fa:eb:71:56:94:58:30:5e:fe:33:6d:16:ac:15:89:
52:ae:8d:d6:48:97:84:b5:70:88:e0:4a:76:af:2b:
dd:67:9c:93:17:bd:7c:e1:ee:08:0a:94:92:60:86:
74:c7:13:ef:37:ce:59:4f:33:37:3e:94:a4:d3:c9:
7e:3b:66:bb:30:c9:00:c4:4e:9e:01:85:60:0a:5c:
4d:64:18:ca:15:cf:63:ec:5d:79:0c:4e:d3:a6:35:
81:2d:74:e0:ab:84:4c:2d:45:32:d1:50:ad:17:d1:
46:1c:55:29:9a:a8:f7:03:1f:03:bc:11:3e:43:79:
da:54:f7:63:69:1a:10:c8:e4:69:18:18:42:28:f2:
92:fe:cd:68:65:f8:90:ac:23:c5:a3:ce:7b:cf:7f:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2B:A7:8D:C7:3E:37:BC:78:32:50:46:60:A2:AB:77:DC:5A:61:94
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:32:0a:03:6f:ce:bc:00:f0:b2:32:a8:c7:32:70:8b:d7:4c:
c3:c4:f2:e4:e2:9c:29:64:70:29:bc:58:9a:81:99:6a:84:d1:
23:0b:1d:cf:84:e1:9c:ab:9e:7c:35:bf:96:88:b5:4f:bc:91:
f5:b9:1a:5d:a6:59:bc:71:4c:40:fa:fb:dc:ba:c6:7e:e1:d1:
d9:7d:b3:be:fb:3e:76:60:f1:88:eb:25:0f:55:a3:ca:0a:59:
2c:5b:e5:fc:9f:a7:78:e2:63:5e:b7:ff:0a:14:58:16:fa:ec:
6c:3f:cd:11:a8:88:d1:f1:28:4d:f5:74:5b:e3:9b:8c:65:bf:
3d:ed:59:df:1a:d6:9d:6c:ba:05:cc:0a:58:4f:bb:80:a8:7c:
79:37:f5:32:0f:4f:cf:8b:9d:15:b7:57:99:cb:c7:12:d1:46:
90:2d:17:03:a6:0e:33:e0:89:74:5c:10:50:ef:44:cd:21:12:
09:b8:f7:21:c0:d4:6d:cd:ea:55:2d:af:01:b7:95:1f:11:e4:
1f:4a:60:4b:cb:67:bc:37:d8:4c:81:e2:2e:c1:e2:29:52:0a:
54:37:fc:8a:ae:d7:22:a7:a9:82:af:53:f5:d6:f1:03:de:b9:
e2:c9:de:43:9f:a6:f8:86:40:eb:a1:3d:f9:0e:fa:19:b9:ac:
01:e8:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:08 2025 by rpki-client