Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: Youc0oSfKFEPfxmiQDXViALUzErh/2Ix8AZSKzz2n1Y=
Subject key identifier: EB:C5:45:83:5F:14:14:69:5E:F5:4D:71:40:1F:11:08:C1:62:36:38
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019853E92987E3814083CFF81C91A0E951DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 02:00:46 +0000
Manifest this update: Tue 29 Jul 2025 02:00:46 +0000
Manifest next update: Wed 30 Jul 2025 02:00:46 +0000
Files and hashes: 1: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: nUqqFViBEdlqtGCfYPbS0KKLiicnO2STnWZ76yN51kY=)
2: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (hash: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:29:87:e3:81:40:83:cf:f8:1c:91:a0:e9:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Jul 29 02:00:46 2025 GMT
Not After : Jul 30 02:00:46 2025 GMT
Subject: CN=ebc545835f1414695ef54d71401f1108c1623638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:61:36:96:cd:36:b6:93:36:e4:ae:45:df:
e3:fe:de:06:45:f3:7b:a2:44:c8:df:5c:df:e2:a7:
83:1b:7f:a3:c8:db:44:28:04:62:71:96:1f:25:57:
ab:44:4a:2a:1b:0e:d2:6c:be:32:a1:da:b7:87:6d:
08:d2:bb:fd:33:eb:86:a4:13:01:1a:77:a6:41:c9:
cd:85:aa:80:93:cd:95:c5:f3:87:8c:de:1a:77:d8:
e4:4e:1d:28:e1:7b:84:9b:1c:68:a5:55:4d:85:ec:
03:eb:f3:f3:44:5e:60:57:7f:b5:18:2c:2c:8d:d4:
92:4b:d9:7b:74:3a:60:d8:5e:fd:e1:fb:70:99:aa:
43:da:79:10:46:9c:a6:51:d8:27:bf:8e:f2:17:c5:
8c:2b:86:94:1a:2f:e0:6c:99:92:b4:6c:80:f9:49:
8d:3f:cf:fa:88:57:b4:ca:9a:0e:1a:7d:8c:c3:b2:
8d:18:50:d8:82:45:d0:8a:75:5a:16:80:12:90:63:
0d:e3:57:3a:7b:de:c1:66:90:5e:6b:40:5c:5e:46:
36:67:bb:ba:cb:eb:4b:b6:69:b6:90:41:da:68:ca:
ab:16:9a:9c:ef:0a:6e:4f:ad:ea:11:dd:4f:a0:d2:
3f:1c:4d:7a:a7:80:ec:3c:0a:1f:c6:24:ed:1a:8f:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:45:83:5F:14:14:69:5E:F5:4D:71:40:1F:11:08:C1:62:36:38
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d1:dd:ba:06:c4:a0:2b:ce:24:8e:48:d7:f9:82:87:1d:52:
ed:3b:9b:c4:66:a9:43:ab:3f:ad:00:de:ee:de:93:9d:cf:3c:
5d:66:d8:3b:ea:52:a4:bb:b4:4e:19:c4:d0:ba:43:de:c3:cf:
fc:28:7b:99:6e:40:7b:ae:72:54:ed:1e:27:fc:6a:d9:86:84:
7a:5d:94:d4:27:21:5a:35:60:47:a1:84:21:00:a4:7a:8d:c6:
4c:6d:8f:46:a5:0c:ab:d7:8b:db:fa:bd:65:f6:a8:69:6f:a2:
50:da:a2:08:40:c1:8e:23:96:6f:48:44:25:a3:d8:5e:ce:01:
c0:d3:45:21:6e:7c:ee:29:be:63:a5:08:6f:df:f0:b2:d6:b0:
69:20:b7:70:74:e3:1c:26:f2:39:31:aa:e4:71:80:ab:38:b6:
9e:80:43:b4:b3:1e:07:fc:d0:8f:69:92:12:71:8d:52:27:ba:
72:a1:e8:31:18:2c:97:27:a0:9e:2b:05:29:7b:ac:ff:4a:39:
d2:a2:bb:5b:5a:81:3c:25:a7:24:54:eb:fa:8c:77:60:be:39:
0b:f5:35:2f:b0:ef:85:06:a4:74:76:de:a8:af:05:0b:93:8e:
c6:fd:3f:d5:cd:df:2e:81:1d:26:3f:2d:ba:cb:8c:49:8a:1c:
34:fd:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:47 2025 by rpki-client