
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: xhpYrBLs5o8gD43tD7ldnO0aFlLGsXjOVIw0DZwpEMQ=
Subject key identifier: 3D:EA:CC:B9:0D:66:A5:E0:F6:C1:F5:07:47:1E:3A:98:59:CB:66:28
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 019848F74BE63B772076040E6E0E58A4F8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:23 +0000
Manifest this update: Sat 26 Jul 2025 23:00:23 +0000
Manifest next update: Sun 27 Jul 2025 23:00:23 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: YBUv0v1zMlFgI0BLdwXRsxDn7MTiE9JKkrn3+ZRzOhI=)
2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:4b:e6:3b:77:20:76:04:0e:6e:0e:58:a4:f8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Jul 26 23:00:23 2025 GMT
Not After : Jul 27 23:00:23 2025 GMT
Subject: CN=3deaccb90d66a5e0f6c1f507471e3a9859cb6628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:9f:e2:ec:d0:30:cc:6a:a7:d2:2b:4e:16:
98:be:1a:d8:9c:5e:bc:ae:cc:42:a4:60:b4:94:01:
ba:62:a9:ee:ba:57:67:2a:ff:84:e1:06:7c:a8:13:
63:52:89:29:f5:bd:0e:ec:8a:9b:0d:44:09:cf:6f:
19:24:23:20:bf:a1:1b:35:9c:34:a9:ae:91:52:6e:
c8:19:b1:9c:dd:cf:2e:36:4f:a1:58:26:8d:72:2c:
a0:c5:0e:6b:8a:63:63:80:a5:6b:d0:9e:d9:97:09:
ff:9d:7f:7d:21:14:56:71:a3:5a:fe:6e:2c:77:d2:
fb:a6:d7:d1:43:bc:e6:ba:98:46:04:16:78:cd:0a:
cc:2b:c3:fc:3b:70:e6:9e:af:2b:c7:70:14:a3:23:
5b:ed:1f:54:1d:ad:e7:52:1e:48:ee:0b:4d:51:e3:
7f:4d:73:a8:d0:15:6b:bc:1a:84:45:7e:f9:f6:13:
01:6d:07:6f:fd:cb:c3:35:c8:36:23:a4:84:59:c0:
8e:90:19:66:67:04:ae:af:2d:33:04:6d:f2:e9:06:
ac:b8:0d:d9:9c:08:61:4c:20:f4:96:87:41:85:ba:
44:8f:3a:9c:09:1e:95:23:08:7d:1a:c5:0b:28:8d:
c2:b5:23:e0:78:29:9e:67:64:90:1f:58:15:63:65:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:CC:B9:0D:66:A5:E0:F6:C1:F5:07:47:1E:3A:98:59:CB:66:28
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:28:e7:64:a9:b3:d5:14:ec:92:c4:93:80:c2:80:3a:2c:47:
d2:14:3e:63:ec:63:c7:4f:0d:5c:c1:2f:50:a0:e0:a6:96:0a:
a5:07:90:95:7d:26:ad:7b:5a:27:1c:af:07:81:54:9d:c3:58:
66:01:db:da:f1:48:75:20:bf:46:18:b3:17:8a:de:c2:8e:2a:
6f:46:9d:b4:f3:1a:a8:35:4d:fb:d8:55:bf:fa:d8:a6:f3:6c:
48:10:e9:a2:e5:4a:94:09:f1:ef:9e:e1:e3:0a:b7:b9:0c:74:
9f:f0:2a:86:cd:42:d4:b3:02:9f:0b:3f:01:cd:b0:32:8a:19:
6d:79:1d:fe:30:0f:57:b0:b5:26:9a:ba:b7:df:ab:9c:81:dd:
10:00:ad:1a:ce:59:b7:93:67:5b:39:31:d4:e2:0a:f9:18:85:
04:b1:35:f0:0b:f7:9c:97:03:d6:b6:2d:db:68:50:14:45:39:
0f:af:b4:de:66:4f:8b:61:32:61:e3:9a:d0:b4:7f:5c:48:d4:
d7:ad:7c:ef:b2:33:6b:b6:cd:f0:ed:24:06:dc:87:0b:0c:26:
80:85:56:de:0a:bc:bd:2c:fc:4b:e5:c8:d0:2b:f2:eb:01:d4:
a8:2e:a5:71:19:cd:26:d4:93:c3:4e:e7:9c:36:72:32:3e:85:
16:a0:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:21 2025 by rpki-client