Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: +7SSADEKXkMU1s57cUJ51KsSs5ffD+qgeVSAzITnUJ8=
Subject key identifier: 90:D1:34:B2:89:D3:B3:46:56:30:0E:C1:40:6C:BA:51:90:AA:2E:84
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 019847ADDC0D61D7CC61547573F3B735D6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0EE8
Signing time: Sat 26 Jul 2025 17:00:33 +0000
Manifest this update: Sat 26 Jul 2025 17:00:33 +0000
Manifest next update: Sun 27 Jul 2025 17:00:33 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: E/IuhdurFQTHI78lNzqFysT0l7WPfbArXzvwZsru+mc=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:dc:0d:61:d7:cc:61:54:75:73:f3:b7:35:d6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Jul 26 17:00:33 2025 GMT
Not After : Jul 27 17:00:33 2025 GMT
Subject: CN=90d134b289d3b34656300ec1406cba5190aa2e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:fb:71:a4:f2:5e:18:c0:70:4a:ad:c3:22:
31:b6:de:fd:70:08:90:c6:3d:7c:1c:2a:26:fa:6a:
72:7d:c1:c3:4f:c2:71:ac:fd:4d:26:58:56:7f:ec:
08:aa:3b:73:25:4d:e2:52:9c:8c:73:5b:e1:3b:7e:
44:ad:1e:d1:15:fa:a3:f1:d8:e9:eb:f1:6c:1c:73:
8a:97:71:38:e2:fd:10:42:12:c3:7f:90:a5:23:84:
78:8a:df:cf:01:a0:dd:36:57:e8:f3:8e:54:13:5a:
23:a6:1d:4b:47:45:b8:24:f0:7c:20:99:64:74:c8:
65:65:3b:2d:5a:fe:09:2e:87:0e:9f:e7:b4:6a:4f:
9d:c2:9f:3b:f7:04:74:d3:fc:35:fd:36:a3:f8:73:
11:2b:86:f4:58:d2:5b:82:fd:82:80:06:61:c8:be:
ae:38:4f:17:af:8e:43:64:23:03:5e:50:aa:28:0a:
01:d3:e5:5e:ea:b6:08:53:89:ef:e4:7b:00:7b:ad:
78:8c:a3:89:9e:c3:01:1b:7e:59:35:37:66:22:df:
e5:f7:73:e6:cf:ff:d1:2c:8e:7b:27:74:05:0b:45:
bb:f8:61:8a:f8:a8:f4:4c:6c:9c:6d:25:bf:b7:4c:
0f:80:d1:a6:ac:53:cf:19:10:1e:5f:7c:f2:97:5d:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:34:B2:89:D3:B3:46:56:30:0E:C1:40:6C:BA:51:90:AA:2E:84
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e2:83:b4:8a:c5:27:79:ce:8c:28:29:88:ba:97:d5:c7:ba:
3f:a0:3d:66:13:1b:cc:b7:c8:ff:72:88:06:9a:02:5b:2c:d7:
7e:32:d1:a5:43:ed:ab:0e:79:65:cf:fe:8a:4c:28:75:07:f9:
9b:0f:61:83:0a:e6:85:c7:a4:c6:5a:0e:fa:8a:ac:82:f0:0c:
cf:40:43:f8:29:5e:97:be:c7:17:35:2c:cc:44:84:e6:ba:7d:
63:ce:79:8f:1c:c9:f3:e7:3d:cd:0c:98:e2:3a:1c:54:41:07:
6b:da:97:5c:37:a7:dc:9c:da:a0:27:d5:63:16:93:03:c5:ef:
ac:77:17:5f:34:3b:a9:fa:da:85:67:f0:8e:82:80:ea:79:06:
cb:7f:51:d2:f1:c1:05:b5:72:9d:9d:76:54:5a:52:53:8b:c7:
1f:df:11:dc:67:11:b3:08:fd:2b:39:96:ef:99:63:31:bc:8c:
a3:70:70:c1:14:6b:c1:92:f1:07:3d:cd:d4:cf:2c:16:cc:bb:
49:52:52:e9:5a:9b:46:9c:9f:a6:9c:c9:40:17:74:51:96:fa:
4b:26:d6:61:21:77:c5:23:49:ac:af:d7:33:dc:17:98:2c:00:
93:d8:73:b7:7d:7a:a6:35:e9:91:bd:7b:c5:ab:be:2a:95:3f:
95:86:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:06 2025 by rpki-client