Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
File: YHZWuPfoG1FJtIYPgSex1OO0h9w.mft (raw, json)
Hash identifier: 4x80Sa6G3efwxFtB+Dw0MEtOCeR/8rx3BA0hf+ZreQs=
Subject key identifier: C2:59:8D:A6:AE:43:80:09:52:82:5C:35:56:39:5D:49:75:FB:A6:88
Authority key identifier: 60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC
Certificate issuer: /CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
Certificate serial: 019845F60F62DD14ECD27E0F4765ED17C935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
Manifest number: 0C10
Signing time: Sat 26 Jul 2025 09:00:10 +0000
Manifest this update: Sat 26 Jul 2025 09:00:10 +0000
Manifest next update: Sun 27 Jul 2025 09:00:10 +0000
Files and hashes: 1: 7-uxb2sVoc0kcAT2m9SP5qVnZ8E.roa (hash: acdZUKxa+ye22RHZ+hlpmz4eeOUGVIjJiD1cAB8HEbo=)
2: YHZWuPfoG1FJtIYPgSex1OO0h9w.crl (hash: qTWIO+GnGiJHppnSaU9NORfbaspdcFpycGhePP77EuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:0f:62:dd:14:ec:d2:7e:0f:47:65:ed:17:c9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
Validity
Not Before: Jul 26 09:00:10 2025 GMT
Not After : Jul 27 09:00:10 2025 GMT
Subject: CN=c2598da6ae43800952825c3556395d4975fba688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:ec:c4:bc:85:8f:37:8c:d3:43:33:e8:05:
9c:9e:f0:ca:b4:d1:5d:61:1a:a7:96:bf:66:58:0f:
b2:77:68:82:01:36:ba:b1:9a:ca:1a:67:39:eb:9f:
9d:be:e5:a3:c8:a7:6a:f6:a9:b4:f4:d5:84:21:08:
37:e6:60:55:bc:ed:ef:0e:ca:a2:65:92:62:e1:1e:
40:90:1e:5f:84:a3:e7:16:81:06:cc:e3:80:7b:80:
4c:95:da:29:a8:cd:b6:80:31:c0:14:db:0d:e3:b3:
f8:8c:2c:c5:f9:f6:cb:ff:10:b5:24:73:4f:1e:19:
e4:76:34:02:ef:e9:a8:11:04:07:4e:4e:1b:dc:90:
70:df:04:37:08:b4:b1:87:ca:56:d8:43:e1:66:64:
b8:a4:f7:4d:fa:86:58:4a:5d:4a:ea:77:1a:bd:67:
20:12:dd:ee:1b:1d:ca:dd:91:04:1a:59:50:2d:d4:
24:95:07:9c:21:b1:3d:bd:f1:69:24:7e:11:46:22:
ce:fd:09:aa:dc:4d:e7:64:b2:d3:83:13:44:f1:65:
fe:89:80:27:39:a0:69:2e:a6:11:2f:a2:1e:bc:47:
3d:0d:13:d5:7e:a5:b5:52:5a:55:b7:88:58:1e:04:
6e:88:c1:ea:e4:6b:1a:9d:1f:c1:c6:f0:3d:06:b5:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:8D:A6:AE:43:80:09:52:82:5C:35:56:39:5D:49:75:FB:A6:88
X509v3 Authority Key Identifier:
keyid:60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fc:9f:cb:23:4c:71:13:4a:21:48:26:2b:6e:58:1f:7b:dc:
ce:05:f7:db:f1:cb:e5:e4:16:8e:7b:b4:b8:c4:3c:a5:69:af:
a2:fd:78:9a:3d:a6:12:83:a8:47:15:60:96:a5:94:b2:e2:20:
5e:0c:f3:94:1a:51:9e:e0:3d:87:17:64:8e:8d:e6:2b:50:a5:
fa:26:bd:eb:44:3f:4b:c5:91:23:4e:51:17:bd:96:90:ca:4b:
64:dc:f5:2e:47:eb:f5:b4:f6:56:9d:a5:ad:c8:fd:12:8b:f6:
82:6c:1e:d5:19:4b:31:61:e2:6f:0a:91:0a:51:f2:97:4b:32:
e8:89:d4:5f:38:b3:b7:10:db:bc:ec:85:68:43:1a:73:9d:70:
70:f1:cd:30:45:7f:99:ef:4f:b4:30:1d:5c:d9:49:62:25:51:
49:70:b7:9f:0b:84:53:ac:d8:44:63:3c:b9:51:e9:db:a3:ef:
2d:7f:63:df:01:35:49:55:e8:b9:93:89:55:48:22:61:c1:bf:
8f:98:e8:56:2b:aa:fd:d7:17:15:10:f3:73:46:6b:fb:c2:ce:
b6:e8:0a:a4:5c:e7:ff:ba:8d:f9:fc:20:16:b1:24:4d:6f:2e:
56:18:02:02:ef:41:10:27:a9:9a:fd:f5:51:47:10:16:97:0b:
c5:ab:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:17 2025 by rpki-client