Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: YvZtJrvmz6/U2kl5HIBJyTI7VPsmGk4LdzsvWR21xOI=
Subject key identifier: 9A:E9:7E:09:6D:84:87:B0:30:92:63:B9:61:6E:50:CA:A9:C5:68:1F
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019848C05C5AA12C5F22FE498CD78E066C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1593
Signing time: Sat 26 Jul 2025 22:00:22 +0000
Manifest this update: Sat 26 Jul 2025 22:00:22 +0000
Manifest next update: Sun 27 Jul 2025 22:00:22 +0000
Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: VJ92yiD6VjOtsWM9jCpZEJdRoZft8hYGAzk6dbimX0Q=)
3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:5c:5a:a1:2c:5f:22:fe:49:8c:d7:8e:06:6c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jul 26 22:00:22 2025 GMT
Not After : Jul 27 22:00:22 2025 GMT
Subject: CN=9ae97e096d8487b0309263b9616e50caa9c5681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:c9:67:e9:d6:65:89:af:a2:73:84:61:c6:
1b:ba:87:f4:49:d5:80:2c:05:2f:3f:6e:aa:55:21:
30:b2:c5:27:ff:42:2d:d4:c6:a3:23:64:9b:4e:db:
2c:1e:f8:3e:56:53:86:17:44:86:d7:8b:eb:e4:5e:
6a:2c:5b:1a:57:8e:4a:fd:b0:ac:57:a0:e6:80:e4:
4c:3d:03:df:48:fe:8a:fe:c9:36:8a:66:d9:dc:05:
29:60:08:51:a4:6d:0d:02:ec:46:49:97:8f:cd:e1:
2d:91:e6:cd:a8:78:ca:29:a1:1e:59:39:fd:86:bd:
70:87:d8:99:67:74:5e:3d:31:10:0e:c7:10:75:f6:
e4:88:7d:c3:16:3a:e7:50:23:d0:9f:cc:f1:fd:c6:
3c:c1:51:60:b3:3f:67:0d:ed:36:ec:0d:c7:9b:41:
89:97:92:d4:15:af:5a:d2:c7:d5:42:fe:c4:60:21:
40:d8:52:7f:9a:2f:85:d0:71:17:fd:90:3a:2a:e6:
da:01:b6:48:86:e2:2a:6f:70:8c:1c:04:e1:e7:0f:
c6:df:e7:b4:30:ff:64:36:c4:1f:ab:b0:58:4d:9f:
93:ef:30:3a:95:f1:1a:2a:53:66:81:85:5f:ca:14:
86:25:9c:e6:df:c9:82:e6:30:cd:21:17:cf:70:0c:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:7E:09:6D:84:87:B0:30:92:63:B9:61:6E:50:CA:A9:C5:68:1F
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bf:32:72:6e:8f:49:bd:2b:11:c7:6f:52:83:fa:f2:72:1f:
99:f6:37:d5:45:07:70:47:69:c8:22:d4:80:c7:bf:f9:3b:cc:
91:86:05:2c:a1:9a:16:99:65:6e:d3:14:aa:e6:81:9d:ed:85:
ec:be:bf:f7:ae:c0:f2:23:a1:2e:e7:39:a2:55:dc:d4:21:af:
57:d0:ad:b1:81:be:e5:b0:3f:d2:60:60:ef:c1:ef:17:06:36:
72:8b:2b:07:51:da:89:17:e8:90:b2:d6:05:b1:f5:d3:34:9f:
d1:a1:6a:03:92:0f:a3:81:e9:58:80:81:c1:fe:b0:a0:94:a0:
a9:a4:20:c0:e1:89:37:29:29:a8:73:40:78:92:cd:ee:ba:54:
75:08:53:e7:5e:23:49:bb:06:71:7a:c9:9b:a0:65:68:86:80:
6f:cc:b1:4a:3a:09:4c:bb:30:56:13:dd:99:d8:5c:c5:46:7a:
8a:f1:35:f6:05:9d:94:f9:ff:35:5e:99:18:a0:59:3a:f3:6f:
c3:2b:ee:24:12:dc:2d:f1:de:52:f4:56:2a:57:2e:05:81:0d:
6f:e5:97:ff:63:86:f6:4c:a4:8d:7a:29:e1:86:6c:37:65:89:
e1:79:d7:a6:b0:f4:2a:2b:4f:3d:3b:38:5f:1c:3d:ff:aa:5a:
37:6b:27:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:12 2025 by rpki-client