Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier: Xxrti7lzYeNLqZ7j5YmMAvglfzG6Td7KwjL8H8siWRg=
Subject key identifier: 87:AC:E3:50:8C:B5:C0:94:70:3F:33:71:0C:46:1D:12:4D:F9:4E:0E
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 01987D1C8801C0B9D8C094A68D1DD1080FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number: 1206
Signing time: Wed 06 Aug 2025 02:01:18 +0000
Manifest this update: Wed 06 Aug 2025 02:01:18 +0000
Manifest next update: Thu 07 Aug 2025 02:01:18 +0000
Files and hashes: 1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: Lmag9XkqlDUewkS0H56Yu261KFg2RDOo+dOUXOotlUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:88:01:c0:b9:d8:c0:94:a6:8d:1d:d1:08:0f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Aug 6 02:01:18 2025 GMT
Not After : Aug 7 02:01:18 2025 GMT
Subject: CN=87ace3508cb5c094703f33710c461d124df94e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:b6:d4:f2:f8:e2:77:3a:31:58:b0:83:b3:
46:e6:7e:bc:1e:7a:ed:7a:bb:59:1b:41:24:f9:0b:
6c:60:18:f0:50:6a:12:7a:b7:cd:dd:97:74:d1:78:
97:44:66:d8:b2:b8:ca:af:0d:38:cb:85:bc:55:d1:
a2:b0:f6:9c:da:3a:99:5f:8b:e3:5e:60:6a:06:ed:
54:52:7d:b1:f5:bd:22:48:ad:92:cc:a8:81:d9:26:
f6:08:c7:37:89:cb:2e:af:43:07:5a:1b:bd:88:ef:
a8:87:df:ba:58:43:32:d3:f6:98:8e:be:af:88:13:
df:47:38:34:58:41:52:4f:f1:8f:56:9b:df:2a:b3:
4a:8b:fc:6d:02:10:d7:65:9f:80:00:b0:9a:cf:26:
bd:41:c1:2b:d0:9f:13:d9:68:fc:93:77:55:51:2a:
b1:42:19:e4:39:3a:e1:84:3a:7d:1f:aa:8e:e3:af:
a0:46:a3:b7:be:8d:df:5e:7e:96:97:cb:c5:e2:6d:
34:8a:de:30:e5:1d:ba:e7:f1:65:be:be:37:59:18:
68:fb:18:0a:94:73:ec:e4:71:1c:25:06:37:b4:8b:
7b:58:79:a3:ab:ad:e3:f1:aa:32:25:de:64:cd:46:
1b:b2:9b:23:89:74:bb:66:34:6e:c9:11:eb:73:3e:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AC:E3:50:8C:B5:C0:94:70:3F:33:71:0C:46:1D:12:4D:F9:4E:0E
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:30:d1:4c:91:e1:b0:5f:c1:8d:08:d3:48:ab:b6:e2:71:28:
c3:f1:85:08:4d:1a:c6:f4:2f:b6:12:04:2a:f6:cc:b0:c4:ba:
22:36:17:74:7e:f2:fd:b9:9c:0c:b5:b2:06:b9:b5:23:01:52:
19:00:19:bc:6a:b4:46:da:d3:99:96:02:de:c7:ee:3e:5e:fe:
34:7f:70:18:3d:a9:50:02:81:d3:95:38:4f:d3:0d:a2:87:4f:
57:23:15:2c:37:a9:c6:34:92:a3:79:4b:24:99:9c:f9:01:01:
a1:f3:24:80:f8:b0:66:5e:67:da:43:a2:4c:f4:1a:63:07:1b:
0e:66:98:69:db:22:a3:b2:f2:cf:0d:ba:3d:4b:9d:6b:6b:3f:
37:37:92:d0:de:a5:91:60:84:0c:e0:84:2a:09:c8:40:13:61:
a5:95:a9:25:c5:68:4c:ce:73:70:04:ad:25:e6:7b:f5:56:9d:
49:4e:db:4d:9d:01:23:84:f1:94:73:ef:89:f3:dd:dc:db:c9:
a4:0f:6c:28:ff:f0:b6:a7:19:ab:7b:08:ea:c0:92:99:7d:46:
e5:48:ac:d3:8b:d2:34:2e:05:77:f6:e1:a3:43:c9:dc:36:dd:
8b:81:9b:5a:e7:a4:33:4f:28:5a:c7:57:3a:72:6a:60:f7:9f:
1e:67:af:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:21 2025 by rpki-client