Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: jqM3WISy45ztiMe2QKa13p3CMKig1Q1P6JQHN4DvGII=
Subject key identifier: 93:D3:9F:B8:F6:D6:77:44:52:1D:50:B9:8B:D2:E9:64:46:EE:C4:84
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 019959B1A744FC9BBD53AE72C19F5FD61AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0D70
Signing time: Wed 17 Sep 2025 22:00:38 +0000
Manifest this update: Wed 17 Sep 2025 22:00:38 +0000
Manifest next update: Thu 18 Sep 2025 22:00:38 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: fjiu0Tr7xrWQubuLIuvxGXr/KeQo38pHq4x9l+KhZ0g=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:59:b1:a7:44:fc:9b:bd:53:ae:72:c1:9f:5f:d6:1a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Sep 17 22:00:38 2025 GMT
Not After : Sep 18 22:00:38 2025 GMT
Subject: CN=93d39fb8f6d67744521d50b98bd2e96446eec484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:4e:5c:2c:36:4b:d0:b4:b9:1f:d1:08:68:
17:8d:ee:c8:65:58:22:eb:15:3c:90:48:55:27:13:
3a:2e:8c:6d:cc:36:d1:db:ca:45:03:f4:e2:43:eb:
44:18:c7:5f:8d:8e:ca:44:71:12:f0:d0:6d:38:67:
f7:a2:25:27:78:9d:6b:bf:e1:46:3e:fe:13:28:1e:
b1:e2:77:27:f1:ad:e2:39:92:32:2b:a5:8b:19:0c:
c1:4a:1a:fa:bd:6a:7e:a7:ff:b3:ec:5b:0d:93:f7:
ee:ac:a8:0d:80:a8:5f:be:eb:91:b7:b9:15:39:04:
ea:5d:35:16:e9:ba:44:35:39:a2:a3:9f:ab:7a:98:
a6:49:4c:d3:bf:f6:fe:7f:7d:38:b9:b4:4e:9c:ea:
d4:60:0d:48:21:db:72:9c:4c:88:d7:d8:95:10:bc:
d2:c2:7b:58:ea:58:e3:5d:e7:29:98:77:12:1b:43:
e2:49:90:29:fe:4a:a9:25:99:b7:a2:a2:95:71:36:
b8:31:1e:e2:65:e5:82:15:16:d4:95:ca:7e:fa:dc:
e4:58:5a:44:1b:e2:b0:49:36:08:35:cd:4d:82:75:
95:db:7d:f3:1a:98:ab:9d:82:5c:30:82:02:c5:cf:
63:85:02:f9:60:3c:0c:7a:c8:c2:fd:ef:48:fd:6d:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D3:9F:B8:F6:D6:77:44:52:1D:50:B9:8B:D2:E9:64:46:EE:C4:84
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b4:d9:88:56:ef:a4:0d:6d:45:d8:76:0e:29:dc:e4:0a:69:
e6:f1:35:31:fc:4d:4f:de:c1:27:d8:43:e2:3a:34:16:29:9a:
a6:4e:cd:e4:42:da:07:3f:d5:71:f4:d6:f5:6b:ec:da:fa:91:
a6:c8:dd:8e:3b:65:bb:e3:4a:b9:0a:19:0b:a4:93:e3:df:73:
cd:cf:fb:ca:27:49:db:10:ef:9d:9c:17:8c:d6:e4:e2:77:c3:
c6:d0:91:7b:78:30:e7:2d:49:54:4c:05:eb:c7:7d:85:b5:5e:
69:4c:55:bf:f4:72:35:64:26:be:12:ef:de:aa:10:a7:48:e3:
22:37:86:51:1d:e3:54:48:e1:15:e8:70:c7:3a:03:34:af:2e:
01:08:3d:e8:4e:31:ee:ae:7e:58:86:16:49:90:e0:c9:22:8c:
f6:b5:25:ec:1f:a7:4b:eb:ce:b2:a2:7a:62:60:7e:ff:f8:42:
30:dc:b3:8e:cd:58:1a:75:de:b1:4c:fd:13:5f:48:f7:7b:11:
c0:4a:55:f6:57:19:71:65:d4:bd:29:04:aa:af:d5:87:bb:4b:
b9:a7:6b:c1:6f:ed:99:fc:05:77:35:d9:f9:0a:b2:e3:97:52:
36:91:40:95:05:30:7d:53:11:43:e3:47:8b:aa:6b:e8:3f:2c:
e6:1e:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:40:28 2025 by rpki-client