Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: XkX+HMKUuT8tbINeKxIvYqnyVIQ/3xuyVKgIP6zdqW0=
Subject key identifier: F3:1B:46:EC:9D:67:14:74:EC:54:13:05:90:02:EF:83:4E:D2:2D:15
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 019848C0DFCE47452325A07EC34E3F3F9922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0EB1
Signing time: Sat 26 Jul 2025 22:00:56 +0000
Manifest this update: Sat 26 Jul 2025 22:00:56 +0000
Manifest next update: Sun 27 Jul 2025 22:00:56 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: ofwFlIQKwP0HnkxFcYGdXXcQloecdnAi7xe3LwAF4Jo=)
2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:df:ce:47:45:23:25:a0:7e:c3:4e:3f:3f:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Jul 26 22:00:56 2025 GMT
Not After : Jul 27 22:00:56 2025 GMT
Subject: CN=f31b46ec9d671474ec5413059002ef834ed22d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:4f:7d:8f:37:24:05:c3:89:67:e6:6d:9e:
a7:c2:8e:9c:82:a7:ac:d9:09:94:75:7a:56:08:9c:
ed:7b:8b:f4:70:d3:14:e4:98:89:0e:fd:84:24:18:
c2:3a:46:85:97:bf:b3:f6:92:47:00:c4:03:e4:4a:
b4:72:47:f9:fc:e1:27:9b:44:61:05:a2:d2:5b:ca:
0a:8f:2a:0e:fc:11:2d:fd:77:40:1d:3b:eb:d2:ed:
c1:b1:5a:02:ea:07:ac:12:06:76:ff:2b:54:f2:ba:
62:4c:8e:f3:8c:76:f1:15:44:05:a3:b8:d2:75:c7:
c1:03:0b:f1:7d:3a:e7:ba:a7:bd:a6:17:1d:cc:05:
c9:e0:3e:9b:a6:9b:5c:5a:5e:40:0c:22:21:b8:b7:
f7:d8:01:5e:59:62:59:63:91:04:f2:c5:e3:c0:39:
b0:3b:c7:da:96:03:7f:fc:34:c4:38:28:b8:9c:c4:
02:0e:ca:fb:71:55:8b:d3:c7:76:11:29:ca:5b:68:
e2:cd:bd:99:6c:cf:17:f4:cf:e2:67:bd:2d:5f:05:
43:38:d2:d8:4f:cd:2f:d3:8f:60:31:12:9e:8b:76:
63:57:c1:ac:79:06:15:c9:ce:16:8b:09:74:0a:94:
e4:df:38:66:2d:d2:93:28:95:50:85:fe:ac:35:a9:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1B:46:EC:9D:67:14:74:EC:54:13:05:90:02:EF:83:4E:D2:2D:15
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:46:72:cb:02:64:b9:e3:5d:b3:39:92:7d:ad:78:21:e9:f3:
49:d7:f9:62:01:2c:6c:65:8c:24:29:f6:69:19:e8:37:a2:d5:
59:5e:84:f9:21:73:28:67:5d:60:ce:8a:35:f4:0d:24:87:47:
23:97:bf:1b:85:41:03:3f:44:c8:e7:82:73:c2:fd:18:b1:09:
ae:00:14:5d:82:7d:75:54:61:4a:eb:f2:c8:cb:81:27:cc:72:
cd:d4:ba:13:11:7f:96:6d:36:9e:62:11:74:9d:0f:88:1a:da:
2e:5d:b1:83:b8:e6:ca:99:42:af:af:44:ec:99:90:b4:b9:d2:
0e:b5:2e:9c:99:ad:93:cc:c5:a5:6a:12:65:1a:97:db:d3:4e:
ac:52:1f:9b:f1:9c:b4:de:a0:2e:a1:4b:87:04:02:2f:7d:0d:
1d:f4:09:10:44:c0:32:bb:b8:f0:eb:6f:4a:7c:d3:31:d2:ee:
34:c6:69:88:02:a5:f4:cf:5d:53:a1:5d:87:98:16:12:33:33:
74:41:cf:ce:ca:70:12:ef:16:79:80:e3:c8:a7:a6:2b:65:ba:
63:13:db:3b:64:c5:e3:5c:43:52:72:8f:48:23:f2:a6:f2:f0:
66:96:2a:1a:18:e7:6f:11:7f:d9:f9:35:e6:c4:e4:9f:e5:2f:
12:ac:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:50:32 2025 by rpki-client