Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: ImBKBdqiNEBx0o+IEQSbws43pGVAO0eCP5GJsaYSzIA=
Subject key identifier: 32:51:14:A9:0B:7B:13:CC:6E:32:03:91:1A:3F:D3:D2:34:E4:FA:DA
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019923D61EBCB674C50E9BA916F4E9B217D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 11:00:58 +0000
Manifest this update: Sun 07 Sep 2025 11:00:58 +0000
Manifest next update: Mon 08 Sep 2025 11:00:58 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: FDrsd0vVE6O4Krhoa5toGcmyZm7nzExPK+PVHA3vEcw=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:1e:bc:b6:74:c5:0e:9b:a9:16:f4:e9:b2:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Sep 7 11:00:58 2025 GMT
Not After : Sep 8 11:00:58 2025 GMT
Subject: CN=325114a90b7b13cc6e3203911a3fd3d234e4fada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:d9:39:7f:f6:cf:02:64:b1:ed:5a:e2:4e:
8b:6d:25:19:5a:c3:bc:6b:86:a9:b9:41:31:19:ed:
20:44:5a:d2:2a:77:1b:f5:27:7c:1f:6e:e0:3b:30:
b5:d1:3e:4d:49:6c:e0:45:09:b9:d3:59:ed:53:8d:
25:c3:18:5a:60:c4:05:eb:f2:42:45:9c:73:3a:c1:
cb:0c:97:aa:a3:77:bb:6e:a9:74:e8:f7:5c:db:4e:
07:e7:10:61:56:cf:70:b1:77:06:b4:a6:e9:78:d7:
c0:a3:fc:e1:f7:cf:92:b6:79:87:cc:1a:23:f9:01:
b4:f2:93:71:f0:6a:ef:a4:0f:9a:0b:07:73:0e:a4:
92:e7:0b:fb:2d:18:32:e7:6b:75:25:8a:0a:52:a8:
89:8d:0f:dd:16:ca:17:ed:ae:63:9e:e2:56:22:f5:
17:d6:93:f1:49:ad:69:af:3b:9a:62:61:d0:c1:ae:
ca:e9:79:90:82:50:d9:39:dd:e7:ed:c6:e2:fa:ba:
51:17:2f:2a:2a:88:dd:77:28:c8:4d:5e:f5:d1:ed:
d6:28:87:e5:f3:7f:71:df:f9:b5:dd:d1:3b:90:ea:
e1:e7:9f:e7:54:28:e7:f4:8c:e9:12:da:a4:9d:ed:
78:74:54:5a:d8:52:69:4e:20:d6:d2:6c:fe:57:59:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:14:A9:0B:7B:13:CC:6E:32:03:91:1A:3F:D3:D2:34:E4:FA:DA
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:e8:0c:5a:e1:f3:68:36:bf:5e:6a:d3:b7:2e:31:f3:cb:
33:dc:a1:3f:06:5b:c3:a7:24:d9:e8:53:44:6e:58:0b:fe:50:
00:70:c3:b4:f3:b1:14:5b:d1:b8:eb:ce:83:44:29:dd:39:8d:
97:a5:82:d2:cb:37:95:f5:3f:13:79:6a:50:02:16:b5:3b:5f:
00:82:0a:9c:a5:c9:7b:d6:8f:d6:4f:dc:8e:f2:3b:8b:1f:98:
e3:e5:c0:2e:72:e6:aa:bb:e6:c8:b7:eb:9a:8d:16:15:e6:82:
b3:57:15:77:2b:eb:b5:93:0f:45:14:55:87:2a:7f:6f:80:0a:
40:da:92:98:f9:ed:ac:ae:57:de:f2:55:9b:4b:5c:36:d6:e7:
15:df:77:67:04:82:8b:28:be:07:4f:0c:56:73:b2:55:64:5e:
3d:30:51:e7:ab:db:58:b2:3b:64:73:fe:25:d8:8a:c9:5c:c9:
ff:30:05:f2:62:70:50:60:27:dc:d9:31:d8:87:6a:ee:b3:30:
69:ad:62:66:03:27:d6:0c:4b:84:11:ac:11:d7:ea:9e:12:2d:
bc:da:72:9d:63:20:ff:64:20:49:9c:40:b7:6a:42:a7:1c:1f:
fa:86:79:50:01:3f:39:f9:eb:37:53:6d:f4:01:a6:97:92:4b:
9b:fb:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:13 2025 by rpki-client