Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: 9v5TZvkfXkPtL9NaxxcP0rp8NCLIjvU5JYZYKwMaocI=
Subject key identifier: 22:A5:1B:27:D8:D4:5E:0C:AC:7D:5E:0B:34:C4:CD:E8:FD:89:9E:A1
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 0198458997F6D0B6F270F5C97DE6E3D89F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:01:41 +0000
Manifest this update: Sat 26 Jul 2025 07:01:41 +0000
Manifest next update: Sun 27 Jul 2025 07:01:41 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: IE28vnF+YND9KVDvdoMIQkAB3xEGtbihimbJb3LQdwk=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:97:f6:d0:b6:f2:70:f5:c9:7d:e6:e3:d8:9f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jul 26 07:01:41 2025 GMT
Not After : Jul 27 07:01:41 2025 GMT
Subject: CN=22a51b27d8d45e0cac7d5e0b34c4cde8fd899ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:b5:a3:c0:db:97:f5:88:bb:34:f4:5a:e2:
9c:8c:0e:d0:10:69:88:35:c2:01:b3:23:b8:cd:64:
0e:27:4f:25:51:7f:64:05:5e:ec:0d:df:7d:e5:ec:
ff:bd:7a:60:10:75:e3:6d:21:f9:db:07:1a:80:6d:
1c:cd:dc:5e:ec:7b:a9:d1:4f:11:a5:0a:f3:27:d3:
ab:8f:f8:b0:48:e8:74:25:7b:ee:e9:f7:b9:77:6e:
9e:6f:57:cb:6e:bb:4d:e3:aa:4c:7d:f0:57:41:67:
85:47:44:39:5f:c2:9e:26:5f:7a:cf:2a:3f:ae:2c:
c2:da:b4:19:e2:84:55:b8:1b:be:e5:d0:f3:a4:c0:
f9:15:52:e0:f4:8e:86:74:de:03:98:c3:b8:46:68:
8a:ca:c1:9c:57:0b:94:3a:ab:06:41:bf:f9:94:fb:
11:da:11:48:1f:04:6e:9a:77:cd:77:73:c2:00:0e:
a4:67:93:7d:50:e0:e1:1f:bd:ef:d8:89:a7:3a:f8:
99:63:d2:57:d2:4d:76:14:e0:0c:f5:2f:8c:23:78:
99:49:90:6b:32:46:48:76:72:ee:c7:17:77:4c:48:
63:7f:5e:88:35:88:4a:70:fd:ad:c7:b8:d0:86:52:
62:47:9a:ae:b9:e3:99:c3:4e:ac:4f:e2:b1:a1:8a:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A5:1B:27:D8:D4:5E:0C:AC:7D:5E:0B:34:C4:CD:E8:FD:89:9E:A1
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9d:df:00:10:bb:9d:4e:64:54:9e:46:e6:a6:50:f5:a6:df:
42:2a:e8:f1:45:c4:87:10:05:73:d5:65:76:f7:3e:0a:64:67:
59:41:0b:65:cd:e7:11:9d:f3:78:0a:78:45:64:19:74:74:39:
94:c2:de:ab:39:6a:41:4f:ef:ee:70:94:eb:8d:45:fb:47:bf:
4b:9b:1a:61:e8:3d:41:c6:21:2e:de:ef:27:0f:51:3e:69:ec:
6f:cb:df:8f:e8:c4:07:3d:56:27:26:df:db:07:78:6b:a3:2e:
b0:1b:e2:be:be:fd:59:e8:6f:fc:f2:12:fd:9d:3d:b7:d7:eb:
88:c2:d6:10:8d:bd:a5:e6:1f:a9:91:77:81:9c:ee:95:71:45:
15:2f:88:ec:04:cc:1f:dc:7f:81:73:ff:0e:01:13:3c:2e:82:
8c:6b:f0:28:bb:1f:9f:bd:20:35:b4:82:59:8e:fe:83:66:12:
6a:59:d5:64:a3:7a:15:e5:4b:99:cf:dc:38:5a:76:38:ea:38:
2c:64:42:27:14:17:2f:86:2b:13:1e:2d:90:9f:aa:f7:e0:44:
0f:be:ce:0f:1b:1a:1e:45:81:2d:c3:9d:d3:b4:c1:37:f5:c4:
21:36:59:d3:0f:6e:c5:45:2f:18:db:08:6f:44:f5:f4:4d:e0:
fd:28:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:21 2025 by rpki-client