
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier: 9ByhmZcsV32aL4ZNBh8cKKmsaOhOYjfZ9P+v1xX7X1c=
Subject key identifier: C8:26:60:08:F7:CE:C8:B4:AA:FD:8F:F7:A4:3D:27:9A:D5:15:DF:91
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 01984778291AFE8B4A3C506BC9D1198C3707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 16:01:53 +0000
Manifest this update: Sat 26 Jul 2025 16:01:53 +0000
Manifest next update: Sun 27 Jul 2025 16:01:53 +0000
Files and hashes: 1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=)
2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: l2VmVBlG6DdilufDCYDGEP71lBpwjeLZ1qh9uQe3ISo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:29:1a:fe:8b:4a:3c:50:6b:c9:d1:19:8c:37:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Jul 26 16:01:53 2025 GMT
Not After : Jul 27 16:01:53 2025 GMT
Subject: CN=c8266008f7cec8b4aafd8ff7a43d279ad515df91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:ed:8a:a3:4f:23:3a:b7:09:84:61:05:e2:
e7:85:96:e7:3e:84:e2:b3:78:9e:47:63:e0:0d:97:
c2:75:36:37:16:44:bb:7c:66:8a:55:f5:24:82:37:
f4:7c:c1:43:d2:29:c4:a0:89:04:7d:be:ea:0b:06:
09:99:c1:6e:e4:fc:9f:d3:6a:42:84:12:b5:c2:e4:
57:fd:bd:56:a2:1f:96:9f:a7:f5:ad:7e:de:61:15:
0d:c3:bf:53:79:46:fe:2e:ae:84:e3:93:07:64:1d:
35:97:74:ac:28:2e:5d:1a:38:ba:bb:2a:db:3f:a5:
02:21:42:62:89:61:68:33:32:95:f0:8c:49:74:5f:
c5:df:1d:ce:ed:48:3b:ee:0f:13:1f:1f:9d:f3:15:
dc:12:10:e9:3c:b8:30:8e:69:b6:cf:9f:53:0c:a0:
86:7f:9b:24:60:14:e9:d1:c9:2c:2c:65:33:9e:0b:
70:52:9a:65:30:ae:df:bd:a1:63:0e:4c:83:86:83:
0a:77:57:a0:66:42:8e:06:b7:0c:9f:2b:e4:e0:5f:
93:3f:06:0f:95:a8:2c:f3:ec:82:21:af:f9:68:e3:
c7:55:02:d8:a9:6e:e9:e8:8e:17:27:e3:f0:d7:43:
53:62:cb:f8:c2:f7:78:10:fe:31:d9:9a:ca:58:21:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:26:60:08:F7:CE:C8:B4:AA:FD:8F:F7:A4:3D:27:9A:D5:15:DF:91
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8b:a8:a1:77:08:3a:15:9f:26:1a:ef:f0:33:71:ef:32:50:
ed:dd:ad:ef:fa:f6:92:b0:d0:f5:87:c9:9a:1d:73:8b:dd:9c:
03:77:ab:e5:87:82:86:27:84:ea:46:a2:0f:dc:7b:73:f8:57:
ac:2a:6f:77:8e:c3:99:a0:3e:42:af:9a:84:3a:b9:82:d5:76:
e3:71:e3:1e:6e:86:48:4a:dd:dc:a5:6e:24:04:e2:85:2b:bf:
42:6d:5a:cc:e8:9d:63:81:34:9f:11:51:34:44:4f:98:71:75:
38:9d:a2:65:0c:9a:e5:91:fe:21:86:34:4e:de:57:35:82:8a:
ab:50:3c:8f:c1:15:6e:48:41:43:93:e3:c1:f4:08:c6:2d:2d:
b9:a1:ad:81:4e:20:8d:24:cd:b7:4e:ea:57:95:7a:09:0b:fb:
25:43:1c:7d:66:f5:cd:62:bd:3d:79:59:2e:51:87:1f:6c:84:
d8:6f:63:08:82:21:4a:b6:aa:9b:8f:08:ae:60:a6:8e:7c:ba:
05:60:46:cb:96:65:17:c0:a5:6e:69:3e:59:54:2e:6d:50:a1:
f2:dd:58:aa:81:19:54:19:be:38:71:15:00:17:25:14:81:9d:
7e:d1:0b:07:60:1e:a8:99:65:5b:62:cc:04:3e:ac:b3:37:8a:
32:08:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:56:17 2025 by rpki-client