Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: L+hqPElxfAv9eL6Y4hNKT4uQjnYzxVM0YElFIJhYc9o=
Subject key identifier: 49:5D:E6:A5:E5:F8:8C:C8:FF:9D:3B:68:06:00:8E:DC:78:29:C6:96
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019879AD37DCB402C95CCC95E586E62F09C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 10:00:51 +0000
Manifest this update: Tue 05 Aug 2025 10:00:51 +0000
Manifest next update: Wed 06 Aug 2025 10:00:51 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: UNC21Z+esyd0FViDCoKBY6W1Dk0xruyVm6Qxu9uxmMk=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:37:dc:b4:02:c9:5c:cc:95:e5:86:e6:2f:09:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Aug 5 10:00:51 2025 GMT
Not After : Aug 6 10:00:51 2025 GMT
Subject: CN=495de6a5e5f88cc8ff9d3b6806008edc7829c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:d4:79:cf:da:77:07:02:9c:fa:e1:49:d8:
9d:1a:eb:00:c6:0e:52:0b:f8:6f:48:74:7a:58:28:
24:97:ef:61:b8:4e:8f:e8:89:71:29:b9:87:b1:a4:
d7:8d:a0:58:ff:d4:7c:1c:15:77:18:63:20:51:d9:
b5:42:06:86:a4:e3:dd:37:d6:52:13:80:3f:7f:fd:
a8:af:c2:ed:a5:c4:be:6e:c8:a6:59:21:9e:9a:09:
2f:75:bb:0c:c8:c6:40:76:cd:1c:a3:5a:5c:86:86:
04:e4:88:97:6d:94:1a:1f:72:52:cc:72:4f:30:b5:
0c:64:ea:39:57:89:7b:c6:ee:ef:85:4a:43:fb:2b:
20:3b:24:c0:4c:22:3c:5b:01:00:7d:53:c7:f8:f8:
c5:3d:67:b9:86:98:6b:35:2d:a7:e2:88:7c:8a:6d:
e7:9b:02:c6:ca:4f:63:c7:98:37:fd:b4:ec:c0:cd:
95:53:bb:75:e4:da:31:7a:b9:21:cf:61:99:1b:65:
33:e1:f9:ae:d8:8d:e5:8a:76:5f:f4:f5:63:2c:91:
f6:c1:0b:8b:b0:19:fd:16:88:79:43:aa:c1:dc:20:
3b:df:c0:61:45:1d:46:c7:8a:3c:08:56:70:00:6d:
fa:0f:aa:b2:da:04:92:8d:5e:47:f7:ad:02:b5:20:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:E6:A5:E5:F8:8C:C8:FF:9D:3B:68:06:00:8E:DC:78:29:C6:96
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e1:04:59:37:e1:14:63:ee:84:a9:0c:c1:60:1c:03:66:1c:
70:de:0f:7f:40:31:52:73:eb:b2:e4:c4:4c:3e:6b:01:b9:1a:
a7:f4:35:18:2e:ae:49:f5:79:9a:9c:54:a1:85:7f:13:c6:2e:
2f:bd:ea:64:a2:44:a0:2f:3a:20:dc:4b:ae:3e:fb:f1:fa:9d:
27:bc:9d:37:7f:c8:f1:cf:c2:81:3a:a2:c5:22:82:65:1b:c9:
2b:be:0f:55:13:db:44:55:9d:11:68:21:fc:88:64:50:ac:10:
bd:4c:a9:b0:09:28:c5:a4:a9:d2:cd:a7:7d:13:15:bf:12:33:
bf:53:f3:88:3e:5d:1f:c9:ff:ff:c0:57:2c:eb:24:92:f2:d6:
07:a5:4e:4e:96:fa:7e:56:08:27:5a:c6:53:74:e6:7e:48:65:
c3:0b:a5:a9:8a:34:87:48:78:62:29:f7:09:f8:18:1b:4d:a5:
ef:3b:3d:27:16:ec:a4:61:58:f9:78:02:80:7c:fe:af:df:1f:
84:ca:18:6a:16:39:aa:25:cb:a0:61:87:cd:fb:61:89:ae:ba:
f1:4d:4f:79:3e:6d:23:8b:40:f7:04:9f:bd:37:da:e7:5f:22:
a3:29:ff:f6:ed:0f:fb:b4:66:07:ed:51:9d:84:fe:0e:bf:84:
14:59:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:37:43 2025 by rpki-client