Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: VBmcLfnR1zoUf2x38WUk1rxBxWv+CQae8ARaH3FZ1bI=
Subject key identifier: 96:8B:31:9C:EF:39:EE:CB:DD:6A:35:F4:1C:37:17:B8:04:41:26:D1
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01984475F3C0D988A087F5E533F8CDA96261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0DFA
Signing time: Sat 26 Jul 2025 02:00:37 +0000
Manifest this update: Sat 26 Jul 2025 02:00:37 +0000
Manifest next update: Sun 27 Jul 2025 02:00:37 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: o7Y0EIiSBl2cKrm77jEMafTNWkhF/fxK5DpdHqSErrI=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:f3:c0:d9:88:a0:87:f5:e5:33:f8:cd:a9:62:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jul 26 02:00:37 2025 GMT
Not After : Jul 27 02:00:37 2025 GMT
Subject: CN=968b319cef39eecbdd6a35f41c3717b8044126d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:5b:d4:28:72:a4:59:28:b1:ed:84:e6:24:
65:e7:e3:81:04:f8:d8:92:7c:6e:d1:43:e7:bd:63:
b1:87:fb:9e:01:fa:32:f2:ef:18:46:e2:cc:9e:f5:
6a:7b:e6:ca:b1:39:c3:a4:00:ce:eb:81:59:3d:6e:
17:4c:b3:11:67:e3:ef:09:9b:2e:34:cb:ca:ef:fb:
97:a3:f7:b5:c8:89:7e:49:e0:3e:8f:ef:7d:90:79:
e9:2a:71:80:a8:da:c3:b4:e8:08:cf:85:36:c9:84:
13:86:04:1f:f2:67:96:dc:c5:ec:b3:90:8c:3f:a3:
92:90:33:01:f0:b7:68:10:6d:28:0b:ed:2f:09:34:
52:ae:70:b6:e5:fd:af:31:33:8d:92:60:09:29:0a:
68:f6:7a:dc:76:51:51:59:17:b0:56:d0:9d:8e:47:
00:bf:9b:57:40:4c:b7:4b:c4:55:9a:d4:2c:d9:ce:
14:e8:1d:d8:63:c2:29:84:4e:aa:f1:01:24:eb:d1:
af:fa:5d:d4:8f:f8:66:a5:74:d7:e8:d4:32:ac:9c:
08:15:77:ee:e8:b6:a4:26:f6:a8:14:3f:c6:0e:56:
1a:7c:df:51:f2:f1:c0:28:95:79:a0:29:62:d2:da:
b6:56:5f:a5:35:72:96:d4:9e:89:79:46:d1:05:f3:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8B:31:9C:EF:39:EE:CB:DD:6A:35:F4:1C:37:17:B8:04:41:26:D1
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:81:24:4a:37:7b:9d:01:1b:94:52:09:77:99:cc:91:1f:
57:33:22:b9:61:dc:7f:3e:50:c2:5d:00:03:c8:04:fd:de:34:
dd:09:5e:85:56:5f:93:98:03:6a:78:9f:cb:69:b5:07:26:90:
fd:8c:67:9f:0d:bc:56:04:5d:95:c7:0c:55:d7:a8:23:90:9b:
62:e2:78:57:79:98:d3:53:ec:5f:7a:ed:04:a8:e8:7b:2e:f1:
3c:82:a0:b0:b5:2a:79:ec:f9:31:e3:56:71:c3:22:d9:62:77:
bd:0d:86:09:64:72:b8:7d:90:a1:3a:07:1b:f7:da:90:2b:a1:
1c:0c:77:20:b2:7e:74:80:1e:02:cd:7d:de:cf:41:ee:a5:c1:
45:f2:6a:7c:6e:b6:1e:c6:df:04:f5:25:5b:bf:cf:da:af:83:
0f:25:db:c4:ca:fe:b7:85:b0:be:f6:a4:bb:10:5b:88:82:04:
5f:1f:fc:ab:37:10:de:99:9c:dd:b3:e6:c6:47:11:ec:13:61:
e9:31:59:6d:07:7d:72:71:8b:b5:bf:24:be:d8:72:76:c6:a1:
0c:84:ec:a3:d6:6f:19:59:d8:19:e1:a8:17:89:e9:21:a5:ef:
cc:9a:82:a9:fb:09:fc:3d:5a:96:4a:c1:95:9f:1f:06:dd:64:
a0:37:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:41:24 2025 by rpki-client