Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: e/NK9tu8Jx98GkqzrEBIaEKvxfX0PgxxSehrvEn7fNU=
Subject key identifier: AF:F4:70:A1:58:DD:0A:55:82:2A:08:D3:FF:07:59:29:83:86:2B:AA
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019874F492AF83B0D57F1A62A06A86DFCD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 12FF
Signing time: Mon 04 Aug 2025 12:00:41 +0000
Manifest this update: Mon 04 Aug 2025 12:00:41 +0000
Manifest next update: Tue 05 Aug 2025 12:00:41 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: rJJAgcNQT054vt40oy6AQeGGRskdsCOcHaMZJUaN+GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:92:af:83:b0:d5:7f:1a:62:a0:6a:86:df:cd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Aug 4 12:00:41 2025 GMT
Not After : Aug 5 12:00:41 2025 GMT
Subject: CN=aff470a158dd0a55822a08d3ff07592983862baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:00:3e:f6:68:17:af:ca:fd:83:c9:52:a0:
a6:b2:31:30:b3:a0:dd:cb:a0:19:72:56:6f:23:b8:
72:5c:8f:60:81:75:fd:e6:54:88:77:60:10:2d:df:
83:cf:5c:0a:92:db:56:c8:ce:b6:89:eb:5a:bb:cb:
cc:03:9b:71:5c:c8:8a:8c:5e:50:d1:37:73:24:68:
e7:59:6e:4d:e4:74:3f:97:1f:f4:81:f7:63:e2:ae:
35:83:cb:44:1c:70:69:30:cc:ad:03:20:03:ea:14:
c9:34:47:b9:c2:83:95:d3:5a:dd:9d:70:aa:6c:9c:
70:66:3c:73:3e:0e:ec:7c:49:34:da:73:5d:c4:7c:
c0:bd:0d:54:28:97:ed:4d:6c:db:de:62:e0:bf:38:
93:3d:ba:66:28:64:13:2c:1c:b0:90:06:65:3d:9c:
39:c8:13:96:f9:e4:c7:dd:13:93:68:5d:f1:5b:48:
a6:b0:68:52:43:44:2e:38:84:b4:ab:c8:fb:22:38:
80:07:67:91:2e:9c:d6:44:1b:97:c9:ad:6f:af:09:
24:06:9f:fc:25:a5:ba:3b:ab:89:d7:28:f0:ba:77:
36:41:3e:e6:c1:2f:e5:bc:1e:73:39:cb:d0:c4:67:
8e:f5:b4:d3:54:02:7c:a2:0d:75:25:ed:1e:39:e2:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:70:A1:58:DD:0A:55:82:2A:08:D3:FF:07:59:29:83:86:2B:AA
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:87:0f:f6:f4:73:7c:24:51:cb:d3:c7:23:ee:8b:e8:2d:
f5:d2:df:e3:fc:74:88:eb:d9:cb:9f:d4:04:b3:41:c9:17:b0:
da:5d:1e:c8:5c:0d:cb:27:39:9c:b6:ee:f5:70:8a:b4:06:5c:
ad:19:03:9c:4b:43:7e:da:86:90:7b:9f:12:c3:16:95:f6:60:
87:c6:5d:44:b8:dc:b8:4a:6d:a5:a8:4f:6c:b7:99:02:4a:43:
e3:9c:92:f7:43:87:f3:21:b9:69:77:98:02:5e:36:c4:e8:56:
d7:94:e9:4b:c3:fb:a1:b3:21:9a:68:e7:b7:bb:13:a4:e7:48:
48:54:49:c8:32:43:b3:49:50:51:36:7e:2a:a3:f6:c1:57:fe:
ad:86:1b:21:e0:8e:e1:77:86:d2:65:9d:61:be:ad:07:12:18:
80:7a:d6:9c:a0:97:a2:9e:ac:fc:e2:a6:58:95:72:c6:1d:ef:
16:e9:17:24:e2:51:4a:53:8f:b4:40:83:e6:fc:e5:3b:32:ef:
cb:bd:70:7d:ed:40:e3:62:8f:27:87:26:f5:d4:a2:69:8d:a6:
c2:d8:34:60:74:76:c8:39:36:47:b6:03:02:13:85:bd:b9:89:
0e:7f:18:b6:e1:cb:bc:68:06:1f:e5:b4:fc:40:ac:a7:c3:f9:
89:ea:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:38 2025 by rpki-client