Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: khaFGZde1mMg/1NwxvnyBD5GUndkQA/m00gYKg+ypFU=
Subject key identifier: 02:B9:A2:A0:AC:91:0C:4C:7C:F3:6E:8A:ED:0F:9A:3C:FE:90:CC:D3
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01983A6055546607698E47B21B12110D6702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 11CC
Signing time: Thu 24 Jul 2025 03:00:48 +0000
Manifest this update: Thu 24 Jul 2025 03:00:48 +0000
Manifest next update: Fri 25 Jul 2025 03:00:48 +0000
Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: lpaOvUzP5kPv8dVHcqDMPPh9vzQCAM/briWGa9ZjrTg=)
5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:60:55:54:66:07:69:8e:47:b2:1b:12:11:0d:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jul 24 03:00:48 2025 GMT
Not After : Jul 25 03:00:48 2025 GMT
Subject: CN=02b9a2a0ac910c4c7cf36e8aed0f9a3cfe90ccd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:dd:3e:4b:5d:98:6d:68:0b:42:89:16:4c:
78:8c:b3:1c:50:a3:06:a9:c4:14:a5:7d:ee:5a:96:
53:dc:46:47:3a:69:40:ec:08:b6:d0:61:d8:fd:92:
55:d4:1a:ba:08:8a:fd:ef:2d:c7:5f:b6:ca:38:04:
74:4b:df:4b:99:b9:e4:2a:08:73:b1:ca:8f:1b:ed:
34:9e:3a:35:76:3c:3f:36:fe:d5:c2:d3:0d:22:9f:
62:13:22:ea:15:83:c4:ad:ef:44:ee:ee:83:29:5e:
39:3b:d3:6a:b7:b7:e2:e3:7f:0d:07:81:c1:05:b8:
6b:d8:f7:5f:bb:40:1e:c4:35:14:3a:7c:ef:8a:4e:
6d:69:6d:a9:78:34:24:aa:77:fa:c7:69:d9:c1:47:
df:2b:4c:78:9c:35:be:58:24:7f:de:d5:38:3d:b9:
6c:2f:a7:59:ad:05:d2:0a:de:7f:78:15:06:dc:7e:
65:5d:ca:64:3c:2e:d0:1c:5c:99:26:4a:64:59:de:
27:7f:9a:ae:1a:94:c4:60:62:a6:62:45:23:2b:fd:
33:ba:41:b6:99:ba:d2:91:47:dd:a8:cb:80:ee:20:
89:db:4d:4e:1b:ea:25:06:62:ec:6e:a2:97:61:e9:
b7:77:ec:a4:43:d2:ce:cc:de:5f:d5:0a:f3:20:95:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B9:A2:A0:AC:91:0C:4C:7C:F3:6E:8A:ED:0F:9A:3C:FE:90:CC:D3
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5e:72:b0:5b:ee:dc:de:c5:ba:5a:43:f7:99:ea:b5:d6:1d:
5b:0e:ae:8e:74:e4:8a:14:88:b1:79:a1:d8:b0:a5:78:b8:84:
aa:0b:b3:8e:d8:a8:df:9d:ff:dd:8d:89:7a:64:b7:5a:51:d4:
93:4e:4d:a9:98:89:9a:5f:13:97:cf:8f:5e:4a:4e:f6:d2:06:
83:d2:c3:0c:69:65:e7:22:65:c1:bc:3a:e3:8c:5e:ad:62:78:
ab:b4:f4:24:f9:ad:7c:13:0d:c2:2d:35:b1:36:8f:f7:f1:01:
be:84:4f:70:03:5c:85:ac:4d:99:54:35:61:b3:9a:c3:85:02:
35:72:31:24:6f:a6:37:a1:64:93:bd:58:ec:ba:c0:be:03:38:
d3:88:3f:72:b2:2d:21:4a:b6:a0:6a:24:67:ff:e3:f5:f4:0c:
09:ee:7b:99:da:c1:34:d9:92:44:88:43:71:25:ea:c3:c9:bc:
85:4e:ec:17:20:96:48:3c:a9:8a:b6:12:4b:de:68:9a:31:ec:
c1:ab:a3:bf:98:2c:ab:c0:6b:39:ef:67:a7:94:7d:c8:65:a0:
71:ad:91:51:9e:8d:2a:92:15:3b:69:f1:51:8c:55:d3:09:00:
62:ac:98:af:24:11:21:e4:9b:ee:21:11:a3:d2:48:d6:6c:f6:
ef:a1:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:52:21 2025 by rpki-client