Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: SM887nlb46srKOBOSlqf5Op4aohO8UdlMO7+n/r2Gug=
Subject key identifier: 54:BA:4A:E8:D5:32:C8:9B:04:80:D3:20:CF:78:D7:B2:E5:F3:6B:50
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 01984589BA4C92C4BB42845BEA08EA397CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0CE1
Signing time: Sat 26 Jul 2025 07:01:50 +0000
Manifest this update: Sat 26 Jul 2025 07:01:50 +0000
Manifest next update: Sun 27 Jul 2025 07:01:50 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: ei3/4VpVrrvF3gIacGOj1vjn5S6nI7KvoVf5y6XzZJs=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:ba:4c:92:c4:bb:42:84:5b:ea:08:ea:39:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Jul 26 07:01:50 2025 GMT
Not After : Jul 27 07:01:50 2025 GMT
Subject: CN=54ba4ae8d532c89b0480d320cf78d7b2e5f36b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:5c:f5:a7:dc:7d:f5:92:b1:25:9b:bf:39:
52:9c:32:cf:a9:2c:07:e3:c5:09:82:c3:86:c3:0f:
d0:6a:f1:e2:eb:87:e5:86:8c:22:b7:d1:8b:21:c0:
81:b4:bb:1a:3c:fd:2f:87:11:56:38:1c:a4:a2:51:
99:7c:24:aa:26:ae:5f:5b:6f:ce:37:c2:81:f5:cb:
f1:80:7d:bc:ed:e9:a3:13:d3:4e:12:12:88:b7:c7:
f4:7d:45:6a:24:c9:2f:aa:fa:ed:54:32:81:44:87:
18:a3:e9:77:94:75:7d:27:5a:d3:be:47:f5:8e:1d:
c2:a8:3b:d5:52:2f:cc:7a:a8:30:54:ff:12:08:d7:
1f:82:e1:76:92:4b:47:b4:65:4a:07:90:86:e8:9b:
9f:fa:9c:58:a3:ff:8a:b2:5e:99:c8:ca:9e:72:8e:
82:0f:c3:11:22:43:cc:37:b9:70:39:92:50:9b:93:
a4:47:9c:dc:5b:58:0a:5f:9f:96:a6:cb:5d:62:bf:
f9:07:2a:d4:db:59:98:53:e0:62:d4:75:6c:d7:26:
00:3b:68:b9:a5:4e:56:8c:af:4b:b0:29:69:61:d3:
40:e9:b8:2d:21:b4:33:af:ee:b4:df:1a:1d:d5:8f:
bc:5e:04:03:fc:80:c4:7f:01:01:bb:df:58:3f:92:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BA:4A:E8:D5:32:C8:9B:04:80:D3:20:CF:78:D7:B2:E5:F3:6B:50
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c2:e8:03:90:9a:b4:02:0b:61:7c:e5:ed:90:49:ed:f0:99:
4b:01:a3:67:56:3d:61:af:3d:a9:90:fc:ee:f0:f9:8d:f9:69:
d7:a3:dc:bb:c9:29:77:a6:99:52:64:10:99:0a:74:8d:bb:82:
cc:e6:4b:54:15:16:a4:39:7a:82:88:ea:e6:93:5a:48:53:93:
be:9e:f7:be:e0:9f:43:d8:94:58:3d:4b:0d:90:d5:bc:cf:c0:
b2:11:68:bf:12:30:51:0a:29:e7:28:78:1d:93:6a:8d:a6:13:
73:87:77:cf:62:c3:ed:88:37:56:ae:b5:10:ef:13:82:8f:84:
68:41:2c:05:bb:92:8e:02:09:38:5b:d1:11:fe:79:46:3d:eb:
df:80:22:0e:bd:97:93:1a:e9:de:ac:80:00:6e:39:eb:84:c0:
54:2e:fe:68:40:a9:e7:d4:56:72:ea:01:6d:63:2e:5f:08:4e:
06:3f:2e:ad:0b:7f:b0:1e:9b:c5:23:6e:5e:b3:32:57:f5:30:
d2:8a:9d:e5:85:cb:9b:04:c0:6c:26:44:73:62:3e:2a:81:4d:
2e:1a:74:96:b0:0d:83:f2:03:3a:00:18:f2:d8:32:b0:c0:6a:
46:56:11:b0:f8:c8:87:85:a8:d2:2e:a1:a8:79:06:65:e4:5d:
9d:0a:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:00:19 2025 by rpki-client