Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: S6q3kViJAGs64/o9H4QaHT2DI750zZmo0m6lyrh1PE4=
Subject key identifier: 97:A8:FE:12:61:E5:42:BE:E9:DE:78:E2:D6:73:DC:99:DC:D5:CD:B0
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 0198499BD786E3F38910BD6FDBFE0D247A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 02:00:06 +0000
Manifest this update: Sun 27 Jul 2025 02:00:06 +0000
Manifest next update: Mon 28 Jul 2025 02:00:06 +0000
Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=)
2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: H/j93bMzSJwL8FA21hNRzPw5vm2V1EdBcyIKAacWxQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d7:86:e3:f3:89:10:bd:6f:db:fe:0d:24:7a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Jul 27 02:00:06 2025 GMT
Not After : Jul 28 02:00:06 2025 GMT
Subject: CN=97a8fe1261e542bee9de78e2d673dc99dcd5cdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:cc:8d:81:f6:66:29:dd:94:c4:f9:df:ca:
16:24:05:51:8d:75:ac:51:54:73:7a:c2:17:ab:05:
2b:c8:6c:af:6b:ce:14:f4:8d:f9:35:c6:bf:b3:39:
6c:eb:b0:22:1b:9f:28:ae:4a:42:65:47:a6:d1:c4:
4d:12:f8:fe:13:df:c9:2c:e0:36:87:93:95:92:49:
21:73:2e:e0:0a:1f:b2:c8:fe:29:73:22:97:98:06:
24:d7:4e:39:b1:24:bf:21:c6:1b:e3:72:0f:4a:11:
d3:f1:6c:d3:c8:53:45:eb:1a:a8:c1:12:42:d6:45:
e0:11:57:41:e6:5b:1b:e3:da:23:c6:b6:c5:67:ce:
69:93:37:1c:b0:fc:05:33:81:51:c8:6c:c5:e8:8e:
00:19:2e:6d:30:ae:a9:1a:b0:b8:61:0b:0b:ea:ce:
db:4a:40:39:86:c3:51:01:a9:38:a1:bb:9f:1d:fc:
db:6c:3c:7a:d6:85:41:37:9b:c3:4f:72:d2:74:6f:
95:c5:9c:37:79:18:82:d8:26:10:b9:d8:55:b8:81:
b3:b1:50:33:2b:e6:e5:f9:51:bb:94:2a:b7:94:c2:
d0:cb:93:0f:66:ed:fd:f1:0a:6f:76:2b:e1:18:64:
5e:4c:57:e7:46:2c:af:bc:ad:68:7e:27:1d:2f:69:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:FE:12:61:E5:42:BE:E9:DE:78:E2:D6:73:DC:99:DC:D5:CD:B0
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:79:b9:3b:4c:c3:1f:bc:d4:5c:fa:6b:40:22:d0:1e:c4:ce:
26:a2:c3:49:5e:60:f0:54:50:02:be:24:a4:06:dc:89:29:9c:
9a:06:93:27:20:f3:e5:f4:b2:35:35:44:93:cb:80:66:a0:b4:
67:e8:18:ba:dd:a4:22:1e:0d:de:ae:a4:7c:30:a9:a4:50:f2:
29:cd:30:1f:71:35:ec:de:0f:64:d1:5a:0a:c8:29:c0:50:62:
98:bb:9c:c9:63:cc:93:c7:99:b9:f9:16:3c:2b:ef:df:06:95:
e4:f5:b0:ee:52:42:1c:bc:a8:2a:b0:8e:4f:2c:ee:2b:78:7f:
23:d5:8d:95:11:9e:18:21:53:c4:a9:89:06:bb:c2:bc:c4:dc:
a2:a2:49:a5:93:e9:3d:5c:d4:67:d4:e7:72:24:87:9f:9f:da:
5b:b5:b1:0a:bc:53:09:60:cd:eb:f0:93:ff:c4:27:d7:64:17:
bb:f0:3b:14:f8:c3:9b:05:82:b4:5b:19:07:b0:63:29:dc:4d:
74:24:19:1c:47:5e:70:2f:5d:12:cf:34:3b:77:59:5b:9d:96:
68:16:47:90:58:cf:45:0e:07:0f:e5:cb:52:fe:4d:7b:e8:a7:
c4:29:31:17:90:7b:02:af:28:24:f1:f1:95:24:86:bb:49:91:
b0:23:50:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:13 2025 by rpki-client