Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier: 15/A9zGP+6hMQM1xN42dnUCz8aOUKqY+5XeM9h3l4TM=
Subject key identifier: E9:A6:EA:17:94:BA:AF:36:05:5B:2F:37:35:C5:F0:08:CB:44:92:CC
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 019849650C69A4FA06685FB9EE1F2528853A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number: 0EDC
Signing time: Sun 27 Jul 2025 01:00:15 +0000
Manifest this update: Sun 27 Jul 2025 01:00:15 +0000
Manifest next update: Mon 28 Jul 2025 01:00:15 +0000
Files and hashes: 1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: wi1oBD9wv8FYKmP8+yAx53prUTONKfwAkf+BewdhGS4=)
2: qx-NGj8MV_Cd9zpPet-1VEa08Ro.roa (hash: cxZbSa6oQLmYFFxeIAfjlhTWw1+qGjLvscb3SdGJg1o=)
3: r2K_C06ic0Dj0a3NFZhhI6ooNvs.roa (hash: bne8Sm5wB0CMu858I+GoE6ZpkxWpdhA80NITFW1Cun8=)
4: yeRaarOsqQL6T8MId8Dw-zjDpyI.roa (hash: PcKi02vr0pDiDVlpa/LbtFTT0UyPuUQNtlWvZyQzOuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0c:69:a4:fa:06:68:5f:b9:ee:1f:25:28:85:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Jul 27 01:00:15 2025 GMT
Not After : Jul 28 01:00:15 2025 GMT
Subject: CN=e9a6ea1794baaf36055b2f3735c5f008cb4492cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:14:90:61:61:91:e7:0b:91:b3:5a:89:5f:
4c:a8:70:aa:56:99:ce:8c:a4:10:90:b1:9d:1e:4c:
9a:a0:2c:e3:2b:6f:51:7f:07:a6:3a:03:f9:9d:44:
89:65:24:bd:1b:50:b9:53:4d:29:e9:65:74:7f:cf:
a1:9a:4d:21:09:e4:db:dc:fd:7c:f5:ad:5e:8a:c5:
63:e3:dc:41:77:71:ce:79:88:5e:18:fb:e9:e3:ba:
b0:e0:ac:11:d3:c1:8c:0b:e0:8b:4a:d8:91:90:46:
ac:f3:50:54:69:fd:88:f4:0f:6d:a2:e0:60:be:5c:
a7:6d:36:cc:8c:6e:5e:6c:47:6c:07:2c:cc:00:e1:
2d:2e:ae:c7:52:b4:58:e1:e6:5d:6c:67:92:0a:90:
72:b5:cb:d7:d9:1d:88:1e:c1:f2:23:c6:4c:0d:d5:
65:0c:99:29:8c:c3:07:19:70:42:0d:82:54:14:6f:
58:1f:0c:19:42:3c:87:15:3c:41:0b:cd:7a:8a:e0:
f3:29:73:6e:69:61:55:3d:ad:65:6d:af:a2:11:8c:
11:01:34:25:59:72:e4:66:b9:9a:12:14:f5:3e:dd:
e4:0d:b9:d6:19:84:0f:bd:64:f0:7c:6e:65:34:ce:
83:40:84:5e:3a:1b:64:d6:1a:09:66:fc:62:2d:b5:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:EA:17:94:BA:AF:36:05:5B:2F:37:35:C5:F0:08:CB:44:92:CC
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:40:96:9c:09:81:b5:fd:0f:eb:c8:37:1b:7b:0b:8f:6c:63:
81:6c:3e:a2:4b:8e:0b:82:cb:2b:37:4e:22:60:27:42:16:c2:
3e:d7:0f:dc:0c:29:be:cd:5d:da:c6:80:7e:0c:87:36:ce:82:
24:b7:af:0d:a5:f6:23:00:f1:89:81:9e:d0:df:cd:8e:68:52:
fb:c4:4c:df:97:9d:b1:6e:da:9a:ae:f8:32:4f:dd:3a:d0:06:
55:fd:fd:ae:3c:05:9b:b8:44:92:08:19:2c:98:80:43:1a:85:
cd:49:c0:90:e1:c9:e7:6d:26:db:39:f4:fd:b4:3b:8a:29:44:
d9:3c:67:0d:de:aa:fa:30:f4:fc:29:78:c4:53:16:f2:4a:e6:
d2:0a:9f:61:9f:db:d6:69:fb:62:26:94:99:4b:ac:c1:63:ba:
65:83:57:3f:73:c8:4b:1b:87:55:30:b2:dd:9b:f1:ed:34:48:
2e:56:0b:16:b2:0c:b0:57:62:7f:45:bf:3b:51:70:8a:e5:83:
54:65:7c:e3:69:50:02:b8:c5:19:0a:c9:2a:ef:54:88:3a:59:
a2:13:87:4d:c3:27:04:bd:64:c3:e1:16:da:b1:8b:8a:07:61:
59:eb:09:b6:9b:e4:81:80:ae:7b:0d:5a:8e:ba:9e:2a:13:5a:
4d:14:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:33 2025 by rpki-client