Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: 6eyFKXQEksVgZ0LARKAgxssZIyu+FMvG3HGEsazMOM8=
Subject key identifier: 1D:E2:12:F1:6B:A6:27:EF:60:9B:EA:D1:CA:8B:F2:BA:45:D0:33:B4
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 0198541FEC14AEF170E143A0456D70364BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0BD2
Signing time: Tue 29 Jul 2025 03:00:34 +0000
Manifest this update: Tue 29 Jul 2025 03:00:34 +0000
Manifest next update: Wed 30 Jul 2025 03:00:34 +0000
Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: Efwr3chM4jyDjimOO9nhopQV3ZnMAjE+SmG0TsE4AWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:ec:14:ae:f1:70:e1:43:a0:45:6d:70:36:4b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Jul 29 03:00:34 2025 GMT
Not After : Jul 30 03:00:34 2025 GMT
Subject: CN=1de212f16ba627ef609bead1ca8bf2ba45d033b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9c:a2:c7:27:37:d4:f9:4b:01:26:97:c2:c3:
f9:9b:75:e4:cd:b1:0e:28:31:90:dd:ee:1a:f5:ab:
32:11:05:5c:1e:5c:d4:af:50:29:0d:4e:09:3f:c3:
8f:8f:32:89:ce:59:f1:23:18:c0:ae:10:9b:5e:81:
c3:19:17:f5:fe:12:76:1c:ab:97:b7:ec:ed:d8:49:
2b:53:28:5b:90:91:81:0f:30:48:0b:8f:9d:0c:59:
e4:64:31:cd:e2:3c:98:19:1a:3f:bb:ed:a6:52:f4:
07:f1:73:94:16:d5:d0:db:81:ea:18:3b:f7:2e:14:
71:96:f4:b6:87:02:6d:67:a6:d8:98:aa:f9:97:91:
b0:6e:15:00:a6:b2:ab:a9:05:e2:85:4f:61:01:88:
cc:9e:70:48:2b:b5:74:a7:13:bf:4f:51:e6:07:cb:
a1:7c:36:56:e3:e4:ac:30:94:a0:47:09:c3:42:32:
04:5b:88:f1:34:ff:80:81:c8:e6:e6:07:97:64:1a:
fd:03:6f:01:a8:c5:69:b3:76:a2:51:51:6e:4b:8a:
4c:a9:61:a8:d5:e1:37:4d:f8:fc:35:4f:1a:07:8e:
96:80:17:34:f8:83:7d:2b:53:6f:d1:04:05:f2:70:
74:c1:db:07:cb:13:3a:ee:9d:b9:04:d9:3b:dd:04:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E2:12:F1:6B:A6:27:EF:60:9B:EA:D1:CA:8B:F2:BA:45:D0:33:B4
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:25:04:85:ab:6b:59:cc:58:b1:e0:d4:86:58:b0:0a:18:d2:
96:0d:e1:b1:99:72:b8:ca:2d:bd:3e:ea:a2:53:43:2e:e4:b3:
10:82:f5:6f:e9:ec:d0:2c:fc:21:29:41:67:ed:6e:8e:ed:da:
3f:c7:bb:a4:cd:77:cf:f9:7b:7e:84:9e:b5:02:83:97:ea:3b:
1c:8d:6c:16:44:d8:a2:00:70:49:ac:20:30:19:07:54:2d:40:
21:7e:22:6d:21:81:42:de:e6:24:97:df:bd:be:87:a7:af:52:
b4:92:d6:b4:6a:37:58:88:b1:62:1f:de:7f:5d:ad:75:cd:4a:
60:94:64:e6:2d:47:67:d6:6c:94:e4:ff:00:57:5a:f8:41:e5:
c5:38:71:33:8e:01:0b:5a:85:57:86:db:e8:dc:12:fc:37:60:
dc:74:85:92:3f:2a:f3:94:60:dc:7f:4d:3f:90:aa:f7:40:6f:
56:ff:17:e5:e0:90:a3:fe:9b:54:e6:72:10:e3:df:2e:a2:9f:
f2:96:1a:98:cf:48:62:58:e6:c7:75:ec:e7:7a:1f:19:57:1c:
62:de:8f:6b:58:f6:f6:a9:6e:60:e0:0e:be:c6:18:36:ef:30:
9f:83:67:c6:d8:42:0c:5c:ff:00:a1:61:59:aa:b1:0e:62:bc:
76:18:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:08:08 2025 by rpki-client