Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
File: YG03z4fxLyqy3vMTgMOGuCbBnWU.mft (raw, json)
Hash identifier: v0FBH6yvUeJjmSyZmHP8LGUXu0uVCJT6qYecCT1ARDc=
Subject key identifier: B0:B8:9E:AF:9B:98:DA:9D:0A:DF:5D:F5:9A:1F:31:9F:37:5E:89:95
Authority key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
Certificate issuer: /CN=606d37cf87f12f2ab2def31380c386b826c19d65
Certificate serial: 019849D38C00BF47E08F5F381EDC8074C84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 03:00:57 +0000
Manifest this update: Sun 27 Jul 2025 03:00:57 +0000
Manifest next update: Mon 28 Jul 2025 03:00:57 +0000
Files and hashes: 1: YG03z4fxLyqy3vMTgMOGuCbBnWU.crl (hash: kvQ/RF5uQfXzv2wczVAMtcFleK4+fkLw/wZbidoeKCw=)
2: nLsyVuehs4jeCS4JRJE2VO5aV5I.roa (hash: ypIKdtNC4Ic9Sqbxvpei64KUmu5yr6lYiqShQ2+fMBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8c:00:bf:47:e0:8f:5f:38:1e:dc:80:74:c8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606d37cf87f12f2ab2def31380c386b826c19d65
Validity
Not Before: Jul 27 03:00:57 2025 GMT
Not After : Jul 28 03:00:57 2025 GMT
Subject: CN=b0b89eaf9b98da9d0adf5df59a1f319f375e8995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:40:17:f1:d8:46:b6:8b:24:80:27:0c:6e:
a7:c0:24:62:1b:b9:f8:03:ac:4d:82:cb:ae:0c:3b:
50:12:05:53:72:78:d8:c3:f1:70:18:ee:96:12:b1:
21:67:c3:59:61:96:0e:3e:bf:80:c4:29:cf:af:1d:
06:b9:8f:1a:55:7f:6f:78:20:2a:5f:be:db:52:2b:
be:7e:51:1f:e8:04:10:2d:58:ae:22:13:2f:7b:f0:
2f:f8:5e:1c:8c:22:cb:eb:c0:c4:30:06:19:27:13:
89:d8:59:45:fd:9a:32:7d:da:34:cf:78:eb:67:92:
73:5c:ec:8b:02:8f:a8:bd:fd:c6:fb:58:c1:e9:fa:
91:8e:d3:b7:68:28:f0:dd:fa:9a:96:dd:d9:d7:80:
7f:e7:7a:be:65:17:2e:c1:e5:10:2e:f5:80:7c:94:
92:ed:5e:df:81:d5:34:54:28:f3:98:12:54:9a:ac:
bc:9d:4f:bc:94:99:ab:30:b2:5e:bc:b4:9b:35:fb:
d3:78:80:50:e1:23:0f:0e:ed:38:04:a1:a4:19:e9:
73:dd:f0:68:35:39:2c:70:b2:9e:31:d3:87:ff:ce:
9e:c2:57:1b:a9:42:e9:ef:3f:a1:b2:b4:27:41:e0:
ab:0e:46:8b:82:03:cc:42:c3:89:8f:a5:12:a7:24:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B8:9E:AF:9B:98:DA:9D:0A:DF:5D:F5:9A:1F:31:9F:37:5E:89:95
X509v3 Authority Key Identifier:
keyid:60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e8:14:0f:40:e4:27:19:db:f6:23:82:cd:7f:1e:07:ee:3a:
5a:e6:ce:77:c3:4a:87:e0:2d:a0:73:9f:f6:f9:b1:5b:30:65:
5f:a9:d2:f0:28:58:1b:59:95:d1:32:a0:3e:26:5e:76:03:a9:
fd:de:7f:cc:6c:62:c8:f0:b4:ab:da:ab:5f:a7:5d:db:e1:f3:
37:c0:e4:75:08:c8:53:4c:44:4a:ea:dd:3f:12:16:be:43:3d:
06:eb:6d:1a:dc:18:38:62:02:90:db:ce:0d:c3:c5:62:42:dd:
16:d2:d1:bd:b5:02:97:fb:bc:3a:c5:17:f2:0f:66:d7:b6:91:
be:89:76:3d:37:0b:63:39:92:e9:99:fb:e6:7a:9d:e8:c4:6e:
c9:ae:bc:3b:66:c8:1c:fb:4c:9a:a7:02:ec:be:ce:09:c0:b5:
3d:11:63:55:43:59:cb:ce:e7:26:40:38:0d:46:58:cc:b1:84:
67:0d:bc:ea:eb:4a:e4:e4:e6:26:04:ad:92:1b:eb:0d:a6:2e:
8d:6f:9b:76:9f:9c:2b:09:33:5b:8a:7f:8d:82:f3:f4:41:ed:
3e:bc:cc:b3:61:db:cc:d2:ec:ab:a5:ac:4c:ec:9b:e4:2d:a0:
e4:2e:d5:47:47:e8:74:e7:7d:65:2d:a3:63:55:93:19:8f:23:
c2:1d:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:44:22 2025 by rpki-client