Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: KlM0nml2UDASAweUgAls4r9WANnn1ARvCC9xm+lC0Ws=
Subject key identifier: 41:2B:7D:87:C6:F4:47:AF:F3:EF:F4:1C:25:5A:7D:7F:A9:CD:95:FF
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 019894B7FE0D64AA69040F521DB3144BF4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 162E
Signing time: Sun 10 Aug 2025 16:02:22 +0000
Manifest this update: Sun 10 Aug 2025 16:02:22 +0000
Manifest next update: Mon 11 Aug 2025 16:02:22 +0000
Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=)
2: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: NT6vCAu1InL93iTHpYmokRbcgox1qnyKACb4IHFFCaA=)
3: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:fe:0d:64:aa:69:04:0f:52:1d:b3:14:4b:f4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Aug 10 16:02:22 2025 GMT
Not After : Aug 11 16:02:22 2025 GMT
Subject: CN=412b7d87c6f447aff3eff41c255a7d7fa9cd95ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:57:11:67:85:3f:28:d2:71:9f:62:b7:f3:
3d:38:86:f4:7a:6c:90:2f:36:d2:f9:a0:06:19:28:
30:82:ac:85:a4:e8:59:da:c4:22:cc:8a:2d:0f:c3:
6b:65:8c:c2:df:d3:1e:7c:03:15:9b:4a:0f:26:2d:
33:1e:97:2e:b6:96:ea:a4:03:2b:df:a5:0d:93:d7:
e4:dc:91:0c:c9:4a:69:fa:8b:e5:22:4c:7e:d6:f0:
2d:87:ca:30:d8:fb:72:2a:2a:b7:2a:9f:6c:ef:c2:
d1:4b:a1:eb:ed:de:98:69:58:85:a3:d2:c4:39:c8:
90:4a:d9:83:7e:b0:d8:33:3d:39:0c:b3:d1:94:03:
61:d7:02:3e:f3:e3:cc:96:30:39:76:b2:9d:fb:c0:
84:21:9c:fc:a1:16:d2:d8:cf:a4:da:99:7b:03:2c:
20:76:17:e9:f5:e6:55:c6:2e:23:05:06:e4:6b:76:
69:41:79:8a:ac:60:78:04:3c:28:b3:3d:6c:38:8a:
16:d7:2d:8a:42:09:7f:35:1a:1a:45:ba:b8:4f:2a:
46:c6:74:b2:92:62:7e:cd:fc:de:11:5b:cd:5e:03:
f0:54:54:a0:8c:16:d3:9d:66:a5:9b:c4:2e:29:c2:
23:fc:b2:a0:e7:71:c1:22:ec:38:ae:14:a1:84:74:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2B:7D:87:C6:F4:47:AF:F3:EF:F4:1C:25:5A:7D:7F:A9:CD:95:FF
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f4:68:26:81:ae:a4:bd:55:f8:66:7f:b5:c3:e1:75:22:29:
f9:7a:bd:76:9d:8f:25:19:c6:b5:51:b7:bc:0b:93:ca:3c:4f:
24:96:5b:a4:0f:a8:ab:b9:54:f7:12:6f:a5:c5:53:1e:8f:9b:
31:39:08:ce:3c:3b:85:c3:43:8a:29:70:ed:ee:53:59:c1:dd:
4f:c4:fa:d3:43:b0:0c:9a:fa:2d:d6:13:92:6f:1d:43:11:b5:
ff:f8:4e:97:99:b6:a5:72:4b:b6:20:b8:f0:db:59:83:08:5c:
5d:bb:78:fd:a8:d7:c4:2c:cf:63:92:5f:e3:33:50:6c:42:72:
0d:d0:af:6d:c0:30:76:fd:96:41:33:21:3f:eb:23:3d:c1:d8:
90:3e:bb:0f:e9:6d:d2:db:db:07:1b:93:23:3b:c9:69:17:f8:
34:eb:16:59:8a:44:e0:80:0f:c1:dc:89:a6:b4:62:fa:3f:93:
dd:8d:2c:96:52:d6:ea:e9:82:08:6f:cb:42:d7:c8:cb:5d:f0:
1d:07:c8:79:88:35:72:c8:eb:c2:65:e1:42:e3:e6:85:19:e8:
50:cd:c1:28:44:3d:ce:e1:81:1b:18:61:2a:7b:5e:59:73:e8:
af:5e:43:85:ad:c2:59:de:ef:55:26:72:d8:3b:56:85:6d:9e:
c6:ad:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:26 2025 by rpki-client