Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: tITkGuZz1R5nSLK82DbrR0foqXj1FTmuR+UH96eM69g=
Subject key identifier: 42:0F:54:EB:5D:21:39:79:67:AA:F1:95:CA:79:C5:3A:F9:20:73:5D
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019922C3691C48915A81380FC7E31934A400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 05C5
Signing time: Sun 07 Sep 2025 06:00:55 +0000
Manifest this update: Sun 07 Sep 2025 06:00:55 +0000
Manifest next update: Mon 08 Sep 2025 06:00:55 +0000
Files and hashes: 1: BWZ8TffzeheUILd5O5vwxA8ANgs.roa (hash: 9mVvCij2ArMXMv49a46m8ltBnU+gbtg05+eZlvNEdYk=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: ZS0AuvV61nCZgy6avYPqARyBLNq8Bsegv+dJn/5gp1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:69:1c:48:91:5a:81:38:0f:c7:e3:19:34:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Sep 7 06:00:55 2025 GMT
Not After : Sep 8 06:00:55 2025 GMT
Subject: CN=420f54eb5d21397967aaf195ca79c53af920735d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:12:33:ce:c1:69:3c:ed:72:f8:1f:bc:d5:
e9:9a:ad:47:42:3f:7f:a6:5e:c6:c4:3e:53:2e:3f:
b0:c9:af:a0:93:a1:80:e8:c2:a8:6f:5a:aa:2e:a6:
30:fb:41:7d:a5:67:e6:1a:d8:c2:a4:76:b4:14:90:
49:d5:88:55:49:66:36:d3:80:f0:5f:4c:ba:b3:4d:
d4:b8:59:c4:e3:b8:64:cc:27:38:47:39:9e:cb:fd:
20:42:1a:e5:cc:e5:56:42:33:f8:71:c5:92:70:12:
3c:c2:77:bf:c6:29:77:68:8c:3e:a7:f5:f4:4b:2e:
3f:20:2b:a2:15:4c:8c:48:9c:f7:b4:b2:17:fb:9e:
3f:9d:67:54:fd:ae:e5:5a:68:99:74:3a:dc:a8:9f:
32:96:5a:48:a9:c6:d0:7d:8f:0c:1d:85:3d:3d:f5:
2b:68:5a:99:7e:8a:74:e4:89:fd:8d:00:c0:ab:8e:
f3:3e:b1:7f:b3:37:d3:3a:41:d7:a2:e9:b5:84:6d:
19:81:18:12:ea:d8:a7:dd:fb:58:f0:40:17:2b:e2:
b3:d3:43:1d:90:79:db:e7:e9:1a:3a:59:9f:dd:19:
b3:2c:78:e5:4c:58:58:40:b0:51:08:4c:af:aa:f5:
0d:c1:30:79:b5:87:ee:b1:af:74:3f:35:0f:2d:56:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:54:EB:5D:21:39:79:67:AA:F1:95:CA:79:C5:3A:F9:20:73:5D
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1f:c4:a5:9b:cd:15:e2:7f:a9:15:f4:e4:6a:2e:53:4d:89:
da:84:16:8b:18:a9:ba:68:5b:17:27:b7:18:9c:97:53:65:c1:
f9:ff:07:f7:13:79:95:b9:0d:aa:41:35:eb:0d:a3:1e:8f:4a:
5e:28:59:5d:e9:c8:39:da:82:99:9e:1d:89:0a:09:f3:5e:93:
43:7e:33:f4:f6:87:76:f3:5f:44:93:94:77:74:57:6d:b3:7b:
8e:c7:18:e0:98:85:85:1f:3f:42:89:78:9e:af:4b:b0:88:91:
4e:9c:63:37:e9:91:fc:2d:09:86:52:55:1d:41:94:5c:59:a4:
1e:8d:28:3f:c8:e8:ff:8f:38:61:ce:d4:5a:05:83:4a:50:58:
48:6d:9c:e0:61:39:38:8f:e7:8d:48:2a:8c:fc:17:e7:0e:5d:
b2:d9:9e:e3:80:72:f1:0f:ea:76:15:11:75:85:d2:63:e1:7c:
5a:50:2a:38:65:d9:f2:94:1a:7d:d1:ab:25:5d:8a:32:61:78:
92:8d:a3:6e:4a:74:a6:dc:00:5b:52:cd:61:59:df:ff:34:a2:
c2:4c:a9:50:ad:0a:1f:bd:80:e5:4d:0f:a7:7f:e2:8e:20:5d:
2f:99:8f:b5:7b:a1:9d:5e:6a:ac:0e:e3:60:41:d9:71:95:c1:
38:ff:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:53 2025 by rpki-client