Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: DaougLGY6PjNk1YUZGmtWWVutfHcv0dEsjj4on5RvG0=
Subject key identifier: B5:49:E0:35:7C:CF:C9:00:AF:A7:F6:95:A3:A4:B4:05:04:77:EA:07
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 01982C6DF598578D3BC80F43FD5FC6829F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 11E6
Signing time: Mon 21 Jul 2025 10:01:00 +0000
Manifest this update: Mon 21 Jul 2025 10:01:00 +0000
Manifest next update: Tue 22 Jul 2025 10:01:00 +0000
Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: 1zwGEujKubJSkrseRx+eGmqvN5TeWVMIZ3v6ymd8nyM=)
4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:6d:f5:98:57:8d:3b:c8:0f:43:fd:5f:c6:82:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Jul 21 10:01:00 2025 GMT
Not After : Jul 22 10:01:00 2025 GMT
Subject: CN=b549e0357ccfc900afa7f695a3a4b4050477ea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:bb:51:04:bb:c9:1a:aa:ad:18:d7:3e:08:
e8:49:ee:27:e3:7d:38:73:72:fe:93:72:2b:8d:ab:
d6:1d:8c:3a:d3:df:dd:24:d6:29:a2:67:45:9a:5e:
e3:6f:d8:fc:8a:e2:0a:e9:23:3a:ff:d1:1b:58:33:
fd:92:4a:32:5f:43:b6:49:ef:a0:da:98:34:0b:d6:
7c:e6:ca:46:5b:03:f9:e7:70:a3:1e:a8:ea:b9:a6:
ab:a9:6f:16:a2:53:b0:c1:d1:3c:0a:d1:28:2a:12:
5f:a0:e9:ed:98:4a:f9:32:e6:40:90:3e:16:ac:0f:
bd:61:a5:b3:b6:17:a1:ec:7b:d0:1b:03:89:4a:ee:
cd:4e:83:ba:90:ac:33:03:03:25:e8:2c:f2:f7:89:
f6:b2:73:24:fd:b4:5f:e3:b0:9f:9e:24:8e:77:63:
32:2e:28:92:da:76:32:ae:c6:bc:17:13:32:13:cd:
f9:89:b2:c0:ae:0a:f0:2f:b9:d3:ee:86:7a:d3:a2:
1a:a6:cc:65:29:5e:03:43:46:26:02:d2:27:b4:f6:
ee:3f:11:a0:f0:16:d9:2c:69:95:fb:25:09:3e:5e:
10:23:b5:ea:6b:80:07:92:f3:0f:65:8e:01:c7:56:
49:44:fb:51:ed:39:09:20:7c:56:4d:ae:6e:24:0b:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:E0:35:7C:CF:C9:00:AF:A7:F6:95:A3:A4:B4:05:04:77:EA:07
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:95:cd:e4:b5:c9:e9:ec:3b:02:f2:2f:c3:60:d0:d5:a7:d7:
72:cd:7b:8c:e1:3e:6f:6d:f4:7e:05:80:ef:90:7d:3f:2a:57:
8c:a7:89:92:69:2e:c0:37:76:30:ed:c4:9b:e2:19:78:dd:9e:
ea:75:7f:7c:14:05:63:2f:b3:48:a2:cd:51:77:9a:3e:e6:43:
c3:4e:f9:f7:7a:4f:c2:66:e7:20:fb:54:5b:34:04:0d:bc:3b:
b4:80:bc:55:46:9d:b1:f7:ca:66:bc:8f:35:38:32:0f:79:52:
da:a9:2d:83:67:22:6c:44:fa:c4:6f:3f:e6:33:b3:f1:32:d6:
26:e7:95:96:96:d7:a5:12:10:2e:2d:1c:2b:c9:87:bc:7b:d7:
e2:4b:34:98:ca:89:53:c0:ed:8a:8e:fc:f4:c2:bf:b6:4a:60:
58:c3:d4:79:8a:db:fa:16:61:95:38:23:2e:bf:21:4d:40:40:
3b:43:b5:20:91:d1:0d:d2:ad:c9:0a:31:8a:c6:2a:a2:e2:b9:
1c:5e:f6:d2:1e:49:08:1d:f1:d0:9c:da:6a:ea:e7:c2:bc:43:
67:e4:7f:fc:c1:3b:e5:e9:8a:14:4e:59:90:a9:b8:81:e1:79:
1f:82:20:7d:30:47:e6:7a:d8:08:f1:6c:4f:48:04:23:3b:d5:
62:5f:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:37:32 2025 by rpki-client