Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: 6qcE2vReiqCZ8GP2z3RgQP7ERcjFfYvjLJ3gb1GXT38=
Subject key identifier: 71:8B:CD:12:C1:CE:88:EB:3A:DF:35:2E:E6:FD:61:80:C3:2A:D9:03
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 0198C649CCB803C7791B876F20289320B96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 10A8
Signing time: Wed 20 Aug 2025 07:03:01 +0000
Manifest this update: Wed 20 Aug 2025 07:03:01 +0000
Manifest next update: Thu 21 Aug 2025 07:03:01 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: 8TMO+OPKTjObOhNiWWWio0D/fqNjS+espiF62Ti2oLE=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:cc:b8:03:c7:79:1b:87:6f:20:28:93:20:b9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Aug 20 07:03:01 2025 GMT
Not After : Aug 21 07:03:01 2025 GMT
Subject: CN=718bcd12c1ce88eb3adf352ee6fd6180c32ad903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:45:32:5a:44:f5:8a:11:60:25:1c:96:9b:
a7:44:32:60:30:f7:31:d0:66:f3:f2:e3:0e:4f:78:
b7:82:58:f0:ce:74:ff:53:6a:33:46:7a:4a:ed:52:
6a:69:19:38:26:cf:64:17:87:8a:e9:59:41:ba:69:
3a:1a:e5:a1:62:a0:1b:f8:0e:44:a1:99:0b:a3:53:
d3:c3:fa:9e:28:37:56:05:16:71:0f:33:29:37:b7:
a2:4e:10:8a:c7:75:62:3c:75:76:99:55:56:e7:6f:
3b:1a:b0:c8:c0:39:cc:86:51:32:b7:1b:d1:5c:c6:
49:94:91:8b:6c:d1:7e:2d:6b:64:bf:17:34:0b:91:
a6:72:71:c2:29:eb:0e:b8:ea:22:d5:b1:bf:0c:28:
9e:fa:15:87:6b:40:4e:da:b2:f5:96:c3:f9:6c:71:
12:6d:ae:cf:eb:fa:7f:6b:11:d5:16:e7:37:4d:e4:
5c:e8:a5:6c:87:11:f3:33:14:06:0e:a4:63:ef:ec:
c5:c4:10:ce:78:50:0c:fb:02:d5:46:77:41:75:e8:
52:48:1e:c4:ea:aa:fb:d0:e5:14:b3:c8:4b:38:cc:
c0:98:84:6b:a7:7f:0b:6d:8e:4c:eb:d3:03:62:8b:
47:e4:ab:59:b3:54:af:d1:98:5d:27:86:17:48:ed:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:CD:12:C1:CE:88:EB:3A:DF:35:2E:E6:FD:61:80:C3:2A:D9:03
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:12:51:61:74:84:8f:49:7a:8c:6a:fb:a1:e8:44:d3:52:7e:
ae:f0:0a:19:e7:cf:da:d2:ed:5c:59:8c:60:4e:3f:12:24:0f:
6b:7e:0c:32:bb:0d:d4:70:a8:df:1b:1f:a0:b9:6e:27:2a:ef:
ab:be:2d:23:40:53:d4:a4:9a:b9:4f:0e:b4:d6:61:37:e6:ca:
22:60:e2:c2:bf:a6:08:f8:5b:c3:0a:66:46:0f:11:63:3c:2e:
fb:b6:7e:81:88:47:05:44:1d:86:13:9d:62:84:a4:24:ae:71:
c6:f6:86:b3:22:b8:04:34:19:99:89:67:b0:b2:b0:1b:ef:61:
9b:09:ea:51:fa:e2:dc:f6:24:96:44:d4:8d:0b:a3:66:88:1c:
dc:d9:dc:49:5f:2d:6a:29:e4:70:ab:71:7e:b2:0d:1a:85:69:
2a:ea:e7:2e:4d:1f:b9:2f:aa:b4:9f:87:9d:30:97:2f:04:b8:
66:b5:c3:eb:3d:e2:e0:2a:fc:16:46:3a:be:8d:eb:8a:b2:cd:
da:6c:bb:5b:32:f4:fa:f4:8c:55:e4:c1:94:b5:b3:b4:de:27:
60:ab:57:29:eb:30:04:ff:66:72:6a:9f:e4:2b:d7:87:cc:d5:
2f:2d:0e:7a:8c:c8:97:39:9a:0b:16:4c:b1:bf:2f:dd:a0:89:
ef:33:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 12:59:25 2025 by rpki-client