Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: fLocylXJbuf2a7+9gTW0MLwwx6ydyMosukPfJeF4OSk=
Subject key identifier: A8:78:C8:FF:D3:39:6E:74:63:26:66:FA:9A:4A:7F:0C:4D:34:78:FC
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 01984C2FD0EE2311E978D7603B315E802B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 042A
Signing time: Sun 27 Jul 2025 14:00:58 +0000
Manifest this update: Sun 27 Jul 2025 14:00:58 +0000
Manifest next update: Mon 28 Jul 2025 14:00:58 +0000
Files and hashes: 1: 8tq6vUxikXVafkdQNOumeQjFfpc.roa (hash: UpmsMokgr2OHdk8MVVsUZdaiVZYh5g21JKYfdCc4ZA8=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: r0ZPI6cNCe88Hoeh/rDZWsE/1DLoiDfXhCw0emw0xK8=)
3: j89ASOslTb0sA8qPaNCnvdarbHI.roa (hash: pTH6+0WVaBMdNBqgh83yrPXmlHTEaPDbAotvSzt0CT4=)
4: vSrVfCiFhwuThaFge_HlQGTrHjk.roa (hash: Bc63krCzWLaf7LOD/k916HgQOiH2H7M6asbeefYBGos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:d0:ee:23:11:e9:78:d7:60:3b:31:5e:80:2b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Jul 27 14:00:58 2025 GMT
Not After : Jul 28 14:00:58 2025 GMT
Subject: CN=a878c8ffd3396e74632666fa9a4a7f0c4d3478fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:de:1e:3c:af:bb:5e:3c:98:6d:4b:ed:ae:
8f:2b:48:5b:7d:1f:c3:a3:71:86:18:fc:e4:7d:2e:
a5:a9:19:b3:45:09:dc:b0:a8:da:68:6a:74:97:02:
13:ff:17:8a:14:70:4a:80:92:47:7b:99:e9:db:cb:
87:6f:f5:7a:a4:66:5b:a9:4c:49:07:25:d7:65:e0:
e4:b9:30:b3:2d:06:61:e1:ad:f3:4c:6e:73:5f:aa:
b0:37:44:89:57:9f:2d:fe:95:ea:f3:10:bd:da:95:
91:9c:e4:de:1d:1b:4e:6a:f6:44:08:69:75:c7:05:
a0:76:df:d7:a7:92:32:a2:aa:a0:57:e0:0c:d6:ab:
b9:39:07:4f:2a:70:2b:a1:9a:bc:9b:88:30:2d:d3:
39:1a:9f:47:bc:8d:aa:b4:64:42:63:36:1a:0e:5b:
30:a9:c5:ed:21:92:a9:04:83:bc:0f:dd:92:6d:34:
5f:27:6b:5b:43:ae:33:53:a9:23:41:84:20:68:f8:
2f:b6:9c:d0:ff:25:42:51:09:b3:f2:6b:84:c4:89:
f9:a0:e1:1e:ee:c3:6d:48:07:f6:a7:cb:18:92:59:
70:b4:9b:fc:8e:4e:29:68:df:56:83:1c:d2:e3:9d:
d1:c8:d4:41:9f:b5:55:cd:d6:fd:2e:3f:52:38:ee:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:C8:FF:D3:39:6E:74:63:26:66:FA:9A:4A:7F:0C:4D:34:78:FC
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:59:98:3c:18:bf:10:1c:51:3a:38:3f:76:0d:f6:57:61:bc:
4a:2a:5c:10:12:06:7a:14:c4:bd:e9:dd:3d:9b:6d:8b:e1:ff:
09:a8:68:e3:69:d6:56:66:d4:a2:90:11:d7:d4:88:35:a5:77:
39:ab:ed:3a:32:13:39:10:c3:e7:f2:7e:3c:c9:d4:69:3e:33:
ba:e0:48:e0:07:1d:fd:d1:11:bc:0d:5b:b4:90:75:cc:37:2b:
35:50:8e:d3:12:7c:dd:b9:fc:71:d2:92:15:ea:b5:67:b1:27:
98:b3:b1:23:18:93:12:78:ea:5d:e0:b9:93:96:7d:4d:0b:cb:
af:06:d1:ac:7e:8d:73:48:b0:38:8f:c7:05:81:a5:79:bd:02:
bf:a0:60:08:d1:a2:f5:6c:7d:2f:76:1b:04:f7:89:71:c1:a3:
61:ad:d8:ec:5e:f4:a9:eb:d1:09:5f:00:ea:7b:2c:06:e4:4a:
3c:f3:a9:8d:b7:1c:25:d4:10:67:fe:c3:19:7a:ad:d8:df:81:
1d:89:aa:af:0b:6e:4a:c9:b3:7c:66:32:d8:22:3a:c3:65:8a:
20:36:d4:de:4d:d7:9d:13:b2:a6:15:f2:22:20:8b:51:fa:83:
93:81:b2:3c:44:fd:0b:d0:ba:b4:1f:53:ad:b6:6f:0c:0d:d2:
a0:16:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 19:15:47 2025 by rpki-client