Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: xj6yrbO8nkD+UT6/zmitj0fWI/Ew+nfvsfjz/NSS8uI=
Subject key identifier: A8:8B:5A:60:E3:B4:F1:8F:99:9C:6F:BE:6C:EB:E6:0A:69:C9:A2:23
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 019835A798ED52C05CA2914D830294FDA9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 08C3
Signing time: Wed 23 Jul 2025 05:00:32 +0000
Manifest this update: Wed 23 Jul 2025 05:00:32 +0000
Manifest next update: Thu 24 Jul 2025 05:00:32 +0000
Files and hashes: 1: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (hash: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=)
2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: 4HM/Y/H58+85BvFiRmji9xb6VmsZGdFjf/O5cOcVaiw=)
3: pdC1KsOnjOvGFainyuUjzICPFes.roa (hash: 9PpZVEet2RmTDOe5qqgJNSaHCeSHC8NK2RueyDRCl5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:98:ed:52:c0:5c:a2:91:4d:83:02:94:fd:a9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Jul 23 05:00:32 2025 GMT
Not After : Jul 24 05:00:32 2025 GMT
Subject: CN=a88b5a60e3b4f18f999c6fbe6cebe60a69c9a223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:8f:01:34:a6:6c:ed:82:82:45:3f:22:a2:
24:07:a2:35:36:1e:22:8a:32:65:ea:e7:d2:ef:0a:
1c:a2:34:97:1b:7e:20:d1:01:a2:b1:48:b5:90:5d:
91:ba:7b:cc:ae:a2:f6:59:b9:5f:17:50:6e:48:f3:
bb:43:ee:7f:aa:e6:44:92:84:10:b8:75:c7:3f:96:
ef:af:e1:88:76:33:24:5e:ac:41:60:75:27:5b:e1:
49:74:08:5d:5f:08:e7:be:19:b7:6c:38:db:35:de:
0c:1c:24:2d:43:53:95:fb:c1:b5:9b:79:a5:7a:38:
a7:55:8b:65:3a:cf:8b:a1:2a:5b:10:c3:76:1c:d0:
17:90:19:93:c9:bb:3d:d4:98:9a:80:bb:19:f7:6d:
9d:6c:d7:7d:d4:ae:50:dd:6d:08:85:2b:bb:d9:42:
2f:d0:d6:11:33:69:5d:01:6c:81:43:e0:f7:41:33:
d0:f8:b4:c0:4b:f5:81:6c:83:99:96:fe:33:a1:88:
aa:b0:a4:47:97:70:0b:fa:ef:c6:d0:5a:5e:ab:d0:
c6:1c:1e:c4:84:55:db:76:41:58:17:a6:0c:f5:47:
38:9b:36:f3:b8:2f:b8:c0:40:d4:91:ef:ad:f5:62:
c9:25:5c:bc:8b:45:d0:0b:fb:b2:6d:01:77:bf:3b:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8B:5A:60:E3:B4:F1:8F:99:9C:6F:BE:6C:EB:E6:0A:69:C9:A2:23
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7d:9f:63:c4:27:d8:4c:4c:d0:06:34:71:d2:2b:53:e1:ac:
0e:55:c6:27:88:d2:85:a8:8e:30:71:36:af:05:f1:98:57:54:
b8:e7:9b:e5:19:1c:ee:fb:6b:b0:f6:99:9d:9c:1c:8b:1d:c7:
eb:44:c8:45:c9:e5:70:44:e7:2e:b2:0c:e8:99:2c:ec:cd:29:
8b:6d:9d:56:85:e8:d5:36:5e:c4:09:21:a4:30:95:17:56:8e:
83:68:9e:ee:65:13:73:ea:f6:c6:8e:1b:57:2f:9c:7d:fd:f9:
5b:7b:12:82:1e:e3:17:f2:1f:01:8e:b5:38:ef:28:40:68:ba:
f2:8b:f5:05:62:54:2e:e7:a3:f7:1a:0e:29:6c:57:fa:4a:51:
23:8e:de:db:eb:2a:f4:6d:da:2d:d8:46:e6:07:91:18:d8:49:
5b:f8:bc:49:23:48:c3:f9:17:ed:fc:b1:70:2d:83:a8:11:19:
b0:83:d3:2e:70:b4:38:a8:36:5a:a9:5a:2e:33:a1:39:05:14:
a4:4f:7b:20:b4:e1:8e:2f:24:84:a5:e0:d2:0d:7a:45:e9:38:
12:3b:56:2a:ed:26:bf:57:a7:6d:34:fb:11:9c:83:7a:25:a8:
79:dd:44:fb:3e:28:2e:e5:d3:e1:b6:2b:80:e5:13:a0:a3:ed:
4c:22:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:11:25 2025 by rpki-client