Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: WDdGLaxVDsZMVKu8M8H5yM/hM1JxlGqee9gr0bnvk4w=
Subject key identifier: 50:0D:06:19:5C:1A:E3:F8:98:98:2D:7F:29:C3:EF:25:B3:6C:0C:AA
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 01983F4F3456904B4FAAD1B7034197A7AD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 08C8
Signing time: Fri 25 Jul 2025 02:00:12 +0000
Manifest this update: Fri 25 Jul 2025 02:00:12 +0000
Manifest next update: Sat 26 Jul 2025 02:00:12 +0000
Files and hashes: 1: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (hash: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=)
2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: abH6I3yuPSvsutjM8Ea2D2NEqDIRQY9M8FX0GDH2RNQ=)
3: pdC1KsOnjOvGFainyuUjzICPFes.roa (hash: 9PpZVEet2RmTDOe5qqgJNSaHCeSHC8NK2RueyDRCl5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:4f:34:56:90:4b:4f:aa:d1:b7:03:41:97:a7:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Jul 25 02:00:12 2025 GMT
Not After : Jul 26 02:00:12 2025 GMT
Subject: CN=500d06195c1ae3f898982d7f29c3ef25b36c0caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:08:32:e8:50:3f:2e:44:39:a6:b2:54:f9:
10:e0:bc:c4:89:45:ea:63:dc:f5:9f:b6:71:7b:d6:
81:7b:47:5b:76:f7:9c:82:e9:18:f5:a9:95:f7:bc:
b0:23:8d:2a:c1:31:45:75:43:a5:34:4a:2f:63:22:
7a:76:e1:ff:b7:5d:2b:47:d8:a2:54:7b:7f:80:1e:
1d:4a:3f:17:5e:db:5b:ca:95:21:fe:2f:9d:53:cc:
20:e8:ff:aa:15:cb:f1:1a:7c:94:ec:1f:c6:07:f0:
34:df:9a:b8:8f:c5:73:7a:ac:0d:3d:f2:45:f8:fd:
b1:02:3e:12:26:15:93:2b:90:29:35:fc:ac:71:07:
6e:8a:cc:85:d9:eb:0f:aa:92:c0:87:af:1a:31:bf:
65:53:a6:9f:40:96:9c:48:2c:71:fa:4e:3a:87:6c:
13:f4:75:03:a4:89:e9:bf:33:b9:00:63:03:8d:81:
6e:06:51:fb:d1:28:b0:34:f1:65:9e:01:9b:ac:e2:
9a:b7:72:a9:9d:db:55:16:0a:b9:8c:df:8b:55:ff:
1c:5c:26:4b:7a:eb:17:a1:9a:d3:4d:fd:b9:4a:5b:
51:bd:67:eb:0a:74:f6:d0:67:de:0e:d9:ad:91:f7:
91:29:41:18:35:e7:a3:98:8c:40:b9:38:c7:15:c7:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:06:19:5C:1A:E3:F8:98:98:2D:7F:29:C3:EF:25:B3:6C:0C:AA
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a9:5f:a8:70:86:cb:6b:d5:dd:78:d8:18:7e:19:b3:d0:75:
12:7c:59:0d:79:4a:2e:da:86:3d:df:5e:dc:df:ed:37:70:37:
60:75:06:06:8a:19:ca:6e:ea:ce:9f:ef:3b:b1:48:8d:50:ef:
44:6a:49:4c:b8:fa:d7:ad:39:94:38:1b:19:bf:3d:16:4c:b5:
3a:4a:be:05:63:a5:2a:d9:06:15:92:d0:6a:a1:11:72:8e:f4:
e8:51:79:67:f0:5d:85:58:65:89:14:de:e3:fa:db:80:5e:16:
9c:dc:67:40:d2:b0:31:f7:a1:d6:e2:a1:12:f8:f0:86:cb:06:
87:75:f8:2a:10:ec:d1:e3:25:b6:f7:a0:0d:22:30:f6:e0:92:
78:6f:9c:d4:ed:65:ff:bf:c1:d9:68:d8:1c:95:67:6e:16:ed:
77:ba:cf:22:f1:6b:7f:d4:1b:ac:69:91:94:91:b9:8c:4f:b9:
dd:0a:2b:8f:9b:3b:a4:1e:92:45:a2:6f:dc:a7:c0:f4:ac:54:
2a:7d:77:e7:75:0f:52:0c:df:ad:08:70:d5:20:28:14:a1:d3:
9b:a8:ef:ef:cd:72:20:ec:d5:a0:a7:1c:94:f3:3e:d3:45:05:
e9:02:5e:d8:21:3c:d9:d2:23:a3:04:99:d4:fe:c6:b6:bf:9e:
0f:e9:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:41:46 2025 by rpki-client