
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: v9+A2cf/5nTP9JOjOe/quFb9DwZAHqoVWXnvU/sySgM=
Subject key identifier: 86:E6:61:66:41:3E:39:8B:A2:7F:F4:A8:2C:0B:5A:A7:E4:07:A3:86
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 01984BF8980714B3AE167445C3BC7D52FE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0E23
Signing time: Sun 27 Jul 2025 13:00:39 +0000
Manifest this update: Sun 27 Jul 2025 13:00:39 +0000
Manifest next update: Mon 28 Jul 2025 13:00:39 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: Ta4Bn92hYAOhBzmzqDCj1Yqenj3891TgTBPJ18OETtU=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:98:07:14:b3:ae:16:74:45:c3:bc:7d:52:fe:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jul 27 13:00:39 2025 GMT
Not After : Jul 28 13:00:39 2025 GMT
Subject: CN=86e66166413e398ba27ff4a82c0b5aa7e407a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:c9:ce:23:f7:05:ea:1a:ed:5e:f5:63:76:
81:5d:06:1b:c8:23:21:72:af:4d:0a:69:50:f0:3f:
e8:89:de:72:58:52:be:6a:a0:ea:86:d8:cc:aa:c0:
72:82:5d:fa:b9:bb:bf:4c:7c:4a:1c:72:f2:5c:aa:
49:b4:28:c8:28:e0:ce:fd:98:4b:f6:25:33:a1:ea:
c6:ca:66:ed:49:54:19:9b:f9:bb:6c:cc:c2:c6:ed:
e4:36:b1:7a:1f:85:a3:6f:48:aa:fd:bb:a8:8b:db:
d2:71:7e:9b:4b:18:9e:09:3d:2a:a7:86:df:4f:85:
0a:a3:89:62:44:64:3d:8f:ce:e5:16:bd:bc:bb:d3:
9d:da:db:59:d0:54:0c:03:e9:40:48:4b:90:9e:8b:
32:09:33:57:3c:d9:4c:5f:c2:d8:b4:e2:c4:d0:d0:
12:34:fc:2c:87:0d:68:33:26:b3:b2:10:d2:e7:6c:
52:17:b5:99:39:81:d2:66:6e:af:b2:87:be:ac:95:
85:78:9d:91:96:c5:84:59:c5:27:d5:a0:1f:9d:f8:
f7:33:2b:9a:04:60:8c:76:3f:29:26:e1:14:e5:a7:
d9:93:10:16:6d:6b:10:bb:fd:22:92:17:57:f8:de:
19:8a:96:89:41:95:75:c3:32:05:51:fc:09:be:67:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E6:61:66:41:3E:39:8B:A2:7F:F4:A8:2C:0B:5A:A7:E4:07:A3:86
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:58:cd:23:14:7a:63:0d:9d:d9:f4:09:16:77:0c:77:2d:14:
93:92:49:76:34:c5:fa:de:84:6d:4a:c9:c3:f3:0f:60:6d:ef:
6d:a4:5f:60:cc:c4:82:61:2b:e2:5e:75:5a:37:54:a4:2d:c9:
03:d2:34:39:40:34:7d:cb:5a:e6:a6:f1:98:f1:ec:a8:e3:b1:
15:20:b7:c3:70:31:e1:db:27:73:dc:83:5e:b2:67:2b:0e:c9:
56:42:14:61:2d:ab:ad:33:d6:fd:05:6c:2c:6e:36:07:72:d2:
20:b1:5b:63:1f:36:7b:1e:7d:eb:49:06:02:e9:d8:e8:11:47:
c0:10:3c:e7:2c:6d:ef:fe:15:2e:e2:24:f3:0d:dc:d2:95:a2:
d2:85:c0:6c:65:99:ea:65:02:4e:43:b1:3e:30:53:47:af:4b:
7a:3f:e3:2d:e2:e8:af:30:b4:82:22:40:48:7d:4c:d5:01:ea:
00:f6:4a:68:52:41:2b:b9:7d:02:2d:0b:e1:a5:f0:73:48:fa:
fa:52:94:c5:07:71:4e:6f:7c:b9:2f:be:6b:77:00:b3:b2:01:
85:b3:56:79:06:0a:9f:38:5f:d4:b9:9f:df:65:4f:ec:77:d1:
73:43:c6:35:ae:d2:eb:f1:18:e1:43:2e:bc:1c:f5:1f:58:1d:
af:6b:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:35:49 2025 by rpki-client