Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: zC55DOTcJcfmbA1ZjeKlpxKXmNFe+FkkWuNDenydUYk=
Subject key identifier: D6:27:76:12:B2:71:2D:D8:2C:24:F3:91:5B:AF:42:3D:AA:9B:05:14
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 01987486C9EAFD9B6E18B3FE439709D9528E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0E38
Signing time: Mon 04 Aug 2025 10:00:47 +0000
Manifest this update: Mon 04 Aug 2025 10:00:47 +0000
Manifest next update: Tue 05 Aug 2025 10:00:47 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: tBBpTuVBp7Vhj9frqNIxrtK4dk4PMbdo+f39M9r2JT4=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:c9:ea:fd:9b:6e:18:b3:fe:43:97:09:d9:52:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Aug 4 10:00:47 2025 GMT
Not After : Aug 5 10:00:47 2025 GMT
Subject: CN=d6277612b2712dd82c24f3915baf423daa9b0514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:08:5a:37:fc:09:0d:88:1a:65:96:97:29:
ac:ca:6a:08:65:3a:c6:9f:8d:bf:d3:b3:5c:72:95:
ca:cb:c1:1a:9e:ac:0a:73:bb:e6:0d:d6:90:4a:a3:
bc:6d:14:5d:99:07:67:04:5e:79:40:08:4d:53:59:
38:f4:1a:21:28:70:41:d0:f7:19:93:bc:ab:ec:a5:
64:f9:d7:5f:89:c6:38:33:0e:8a:e1:b2:c3:91:f6:
da:c4:8c:56:04:34:55:86:1c:ed:aa:7a:41:0d:7f:
d2:04:d7:20:d9:c6:7d:35:f3:09:3c:bf:b6:54:29:
34:f6:20:58:cf:fe:f0:16:ba:2e:d8:e1:a3:e2:02:
05:25:ba:e5:c8:a4:5a:38:d8:15:2f:fd:d4:5e:d2:
c5:50:bd:08:b5:85:17:c4:93:3a:17:ad:e5:c0:ec:
d7:45:73:9f:44:07:11:92:9b:b3:be:2b:ad:85:a3:
ba:d5:de:d3:3e:5a:27:c7:93:d9:3d:92:c2:d4:9c:
44:ad:76:7c:66:46:fd:88:60:b0:73:62:60:bf:f3:
29:ec:09:16:d1:81:b7:95:4e:aa:45:d6:66:26:1c:
e0:49:a2:f6:ab:07:18:68:b6:bd:3b:df:a7:1d:d0:
81:32:9a:84:73:11:85:83:cb:70:f6:4d:61:90:ec:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:76:12:B2:71:2D:D8:2C:24:F3:91:5B:AF:42:3D:AA:9B:05:14
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7c:03:a3:d8:c9:94:0b:73:1c:41:c2:6c:ec:f1:4b:b4:42:
c0:2e:e2:46:83:86:a6:91:c9:83:ad:ef:39:cd:30:82:f3:ac:
95:19:da:fc:ca:43:78:2f:91:3e:39:8c:22:b7:fc:3c:a5:2a:
fa:3a:02:f4:95:17:19:8f:97:bb:95:12:af:c6:f0:59:de:01:
d2:9f:9e:6a:38:56:04:a8:1f:91:49:1c:69:f1:5f:dd:4a:ac:
56:1a:66:33:40:4f:52:39:f0:a4:a0:44:86:e3:47:36:93:aa:
0a:0c:cd:b7:00:58:7c:7d:7c:39:92:fe:55:87:be:c9:5a:a9:
61:30:4e:54:30:23:c2:2c:50:88:63:be:c3:31:a4:59:48:96:
98:91:2f:aa:5d:7f:34:7e:ee:33:df:1f:eb:e2:e3:cb:66:89:
27:ab:55:c1:41:80:d6:89:07:f4:26:2f:c3:4d:87:9e:4b:12:
d0:4a:d3:73:14:ed:3d:e6:ea:69:50:a3:59:de:36:99:e0:8b:
aa:96:10:9a:c6:7a:74:71:5f:e7:5c:d8:ec:9f:44:d4:ba:09:
3b:6c:e0:d3:58:90:40:dc:9b:5c:d9:44:06:7f:87:b3:33:fa:
59:36:9c:ee:83:23:20:88:4b:e9:a5:a6:79:30:ca:aa:b4:21:
44:b3:6a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:45 2025 by rpki-client