Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: Rk/vpABVyRkqmzDTZplSlIbKrs++UNLM4p1XZsgZqeA=
Subject key identifier: 12:3D:79:37:A8:35:19:FE:F9:B0:44:1B:EA:61:C0:62:9F:17:D5:A6
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 01987298AF3D78477F37BDE28B1396038414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 01:01:05 +0000
Manifest this update: Mon 04 Aug 2025 01:01:05 +0000
Manifest next update: Tue 05 Aug 2025 01:01:05 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: XT68gGgF34pn49Pw5j8VyshunpO/yJQSNF7Xs5VSOI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:af:3d:78:47:7f:37:bd:e2:8b:13:96:03:84:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Aug 4 01:01:05 2025 GMT
Not After : Aug 5 01:01:05 2025 GMT
Subject: CN=123d7937a83519fef9b0441bea61c0629f17d5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:10:41:7a:d0:fb:c7:c6:d1:2b:15:b0:15:
84:7e:db:3c:ca:58:b3:ff:0b:3b:39:4f:93:84:e1:
5d:95:5b:ef:09:5c:26:8c:91:7f:e1:22:bb:36:e0:
9c:be:61:d9:bb:3d:89:66:fd:6b:42:b5:c3:3f:60:
5a:7c:41:43:8a:5d:df:96:5d:75:f0:79:29:a4:01:
06:06:6d:42:ed:fb:bb:d0:f6:b8:16:c9:34:30:6f:
f9:ec:71:48:c9:83:80:f4:5a:39:b6:ab:00:cf:d2:
e7:7f:13:53:04:59:ec:51:06:e6:db:7e:03:87:ac:
02:0f:91:b6:0c:03:ec:96:2f:86:86:7d:ef:fb:f5:
31:fa:5f:26:1f:a4:23:87:9f:f2:f6:55:cf:0a:71:
f8:05:17:c3:8c:cb:31:58:02:05:5e:cf:b0:b6:b6:
c1:3e:c0:77:a7:ca:c3:84:51:34:f5:5e:37:67:04:
b2:75:1d:2d:55:c1:53:2d:60:82:4e:4f:cb:b0:91:
43:16:f1:52:75:f6:e1:00:c2:a4:73:1c:aa:7a:16:
7f:8a:25:53:94:f5:71:f5:0c:d1:27:28:6e:b5:56:
c0:4b:83:0c:2a:a7:44:89:ce:d5:c5:90:1e:92:9a:
4e:88:26:c2:ec:62:f2:c7:6e:e8:06:f7:1f:bf:af:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:79:37:A8:35:19:FE:F9:B0:44:1B:EA:61:C0:62:9F:17:D5:A6
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:91:b1:51:a9:97:b7:f9:22:5a:63:97:c0:de:ac:2e:fa:68:
a0:15:98:78:41:f7:84:6d:85:12:46:be:93:ca:0b:98:5c:25:
76:37:df:f7:cd:0e:dc:01:e3:16:ba:f4:78:9f:fc:34:25:94:
ab:44:32:0e:4f:4c:be:9c:76:ff:58:06:9f:8a:a9:c7:ec:a7:
13:13:10:ba:62:e0:a0:1f:05:6c:6c:bf:e6:68:5a:b9:ec:8e:
7e:d9:f4:cf:bb:eb:e2:fd:16:c3:70:a2:d7:2e:ef:39:62:85:
a2:34:2e:dc:2a:5a:4a:5a:a7:1d:f6:ff:d7:bd:a5:e8:8c:63:
43:12:8c:39:dc:44:ad:4d:65:35:eb:ad:a4:9a:7b:ba:64:fd:
31:a5:74:ae:52:3c:b4:a7:f3:4c:f7:35:2c:84:03:b9:8e:31:
06:2c:b4:ec:6d:ac:33:b4:38:97:6c:f5:1e:39:0d:ce:7a:40:
01:ef:a7:78:01:f3:63:31:d6:bb:50:5f:bb:6a:05:e7:01:b5:
48:66:a3:46:68:af:17:5d:2c:2a:97:2a:2d:2b:79:69:e3:44:
e1:38:ab:b2:9c:f0:71:1e:d0:04:15:c1:75:87:ec:18:2b:28:
63:ab:79:1d:33:b8:30:e6:76:a7:6f:84:f4:fc:19:57:86:e8:
d6:3e:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:42 2025 by rpki-client