Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: bjStgWRyTeERkjE7em1qIBCDP963jKqrBqwutkC6YEo=
Subject key identifier: 52:51:2E:DC:3B:3F:D6:7D:31:78:9A:4B:44:3E:DC:14:28:DF:63:BC
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019844AC9796F405B34D0973A3363800B147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 10C2
Signing time: Sat 26 Jul 2025 03:00:18 +0000
Manifest this update: Sat 26 Jul 2025 03:00:18 +0000
Manifest next update: Sun 27 Jul 2025 03:00:18 +0000
Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: slcQeNO66w9pcL69C3obYaqp1ieW/67XJSUoSmm63CI=)
2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:97:96:f4:05:b3:4d:09:73:a3:36:38:00:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Jul 26 03:00:18 2025 GMT
Not After : Jul 27 03:00:18 2025 GMT
Subject: CN=52512edc3b3fd67d31789a4b443edc1428df63bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:8b:14:87:ba:61:c1:e2:90:dc:97:90:a9:
25:98:56:4f:6c:af:12:e9:74:56:14:c8:6d:7c:a8:
ed:0d:86:f8:07:78:9f:d7:13:86:9f:99:0a:70:5b:
a2:8b:7f:4b:4d:2e:10:44:8b:39:4b:57:ee:42:09:
93:db:82:70:6e:85:01:78:cc:a7:e5:e1:11:ea:29:
4a:7f:6a:69:fc:0a:7d:6a:c9:e9:5f:d5:53:56:95:
07:90:59:41:c6:16:7d:8e:38:40:d2:1c:75:22:7c:
24:ef:81:8d:42:54:b4:e9:b8:16:db:6e:83:5d:cd:
25:22:65:ee:bc:03:7d:85:44:82:ba:0e:b9:89:f9:
75:df:b1:bb:1f:b9:7f:4a:d6:d7:eb:b9:94:b7:e4:
ce:09:df:02:15:5d:5f:a2:7c:05:f9:e5:c7:3c:65:
e7:6b:7e:49:7e:10:a6:d0:d4:58:ff:32:3e:63:5a:
e7:70:8b:1c:57:2a:97:76:9f:4b:6b:69:51:00:1f:
89:1f:07:44:7f:6d:ba:0e:d6:25:78:16:6d:f2:17:
5b:c8:f5:7b:6c:e4:6b:f4:3e:c3:e9:22:3b:ac:d0:
51:15:8b:a3:9b:fa:e4:c5:59:dc:9c:46:57:48:a3:
c5:70:27:bf:ee:6d:ee:52:e7:52:c0:13:c4:67:fc:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:2E:DC:3B:3F:D6:7D:31:78:9A:4B:44:3E:DC:14:28:DF:63:BC
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d0:30:ff:6f:5b:e2:0e:d4:5d:56:5a:12:e1:51:c5:ba:24:
df:fa:2c:b6:4b:32:5e:1e:18:ed:19:72:05:1d:a6:23:c8:ff:
34:0f:2d:2f:9b:eb:6e:79:88:0c:b4:e6:ea:81:0e:5a:40:25:
7c:e9:5f:ba:ce:e5:e3:c8:0d:9a:8b:63:c0:c9:3d:4a:0d:70:
2e:e6:8a:94:ae:62:c1:9e:1d:c0:07:fd:2b:a7:6d:e5:4b:bf:
b6:bf:21:af:4d:6d:15:02:00:5d:f2:e0:76:2a:7e:1d:64:2b:
fc:64:d6:66:92:d7:e7:53:15:f8:af:65:85:c1:a9:26:1d:f5:
56:8d:c3:6a:d7:62:ea:ab:18:dc:8c:31:d9:cd:82:91:9e:64:
af:20:d0:bb:4a:74:ad:e9:cf:3b:1c:0d:9e:50:0c:06:20:49:
ac:a5:00:eb:a1:cd:64:b9:86:16:e8:88:49:88:60:66:34:97:
77:19:dc:4b:bc:9b:31:3b:23:6d:57:18:34:a8:57:74:49:43:
e2:85:c8:0e:b1:02:44:ef:af:5b:60:f9:5b:6e:df:e3:ba:43:
b8:7d:a6:d8:33:24:d1:5b:dd:7d:cd:b0:68:fb:6c:f7:fb:33:
45:6d:91:39:d2:48:ce:00:09:3a:01:ad:c4:f2:b0:59:c6:1f:
01:b6:cd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:16 2025 by rpki-client