Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: cgDAMVQSvb6CO+vhDup3qaVDyVgGvA1M+32oxA26Tuc=
Subject key identifier: 09:9E:4A:9E:E0:70:91:65:2A:4E:36:0A:BE:EE:D5:3E:F9:CA:63:2F
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 0198A0839EC5B2E1440106CF1DABC214F4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0F14
Signing time: Tue 12 Aug 2025 23:00:36 +0000
Manifest this update: Tue 12 Aug 2025 23:00:36 +0000
Manifest next update: Wed 13 Aug 2025 23:00:36 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: YUr1JVtvDAyphBQaKnBthvuCggacuRJpr4etGI9zrpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:9e:c5:b2:e1:44:01:06:cf:1d:ab:c2:14:f4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Aug 12 23:00:36 2025 GMT
Not After : Aug 13 23:00:36 2025 GMT
Subject: CN=099e4a9ee07091652a4e360abeeed53ef9ca632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:07:f5:b2:ca:c7:61:5b:42:e4:87:19:1b:
b3:5d:f6:0e:97:64:44:3f:13:1b:b0:95:0e:ec:ef:
9a:c1:3e:d1:6c:23:de:14:d3:21:1b:ff:c6:71:a1:
00:90:de:bb:7e:b6:20:e2:0d:d6:85:c3:b5:ed:fa:
63:de:9a:7e:f3:0a:d9:a0:13:8c:e4:46:0e:5f:ef:
4e:d1:49:7c:7c:cd:44:59:8c:c1:36:b4:bd:30:89:
35:ee:81:8c:15:09:c1:63:18:64:59:be:6e:b3:1c:
2e:48:f0:9d:dd:a4:6c:90:e4:c2:51:4c:39:bd:9f:
f7:d2:56:3a:5d:02:88:bd:32:63:51:76:52:2f:17:
58:c9:9e:43:ba:b2:37:35:70:a9:b6:28:d3:83:03:
b4:c4:06:83:fc:88:94:11:20:92:8b:c7:12:61:b3:
bf:6d:97:a7:2b:70:f6:f6:1b:19:ba:47:55:38:5d:
3c:78:ba:b9:ca:2f:e4:6e:e4:06:51:21:ce:11:39:
88:d5:8c:09:28:20:b8:3f:2a:25:57:f2:d5:82:2e:
c8:de:67:72:db:c0:a2:2a:1b:40:c4:a8:8a:fd:a2:
da:37:c1:dc:96:f5:47:6c:95:1f:e9:3c:a8:f3:db:
88:39:9d:17:2d:01:cd:f8:48:21:18:0f:f3:09:5b:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:4A:9E:E0:70:91:65:2A:4E:36:0A:BE:EE:D5:3E:F9:CA:63:2F
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:73:13:67:fa:c3:19:08:4a:93:23:70:19:a6:d3:f7:b1:42:
9e:8c:9b:50:72:e2:f9:97:7c:df:36:9c:cd:bb:76:9f:b7:76:
8e:7e:38:37:1a:de:47:df:36:10:13:e6:d5:f7:12:c5:15:e9:
e2:d1:25:4c:57:64:e2:cb:99:43:f0:a2:ce:15:10:b0:5d:36:
7f:b9:a7:0c:e5:ee:59:4a:ad:0d:47:d5:8b:cc:a3:db:6b:41:
fd:e6:dd:25:54:e5:c2:75:7a:18:75:20:a8:99:c5:8f:a8:15:
d4:9e:0a:d3:55:cb:f2:19:59:49:76:8e:cb:0c:60:cb:8e:92:
6b:bc:68:79:f6:9b:8e:bd:dd:63:d1:32:f7:0b:41:27:44:dc:
fe:d6:e1:2e:18:8a:97:8d:c1:48:44:68:19:d9:47:ce:05:55:
34:5b:35:94:e2:b7:10:45:4e:a3:2f:fc:89:1c:c9:5a:d2:ec:
ba:5c:5a:0a:46:55:23:56:6b:16:15:a1:8b:60:f6:58:b4:ad:
27:b8:77:56:e0:b4:ee:dc:ca:14:bc:4d:fa:98:4d:08:40:ce:
71:3a:76:07:06:cf:e3:fd:53:f5:b9:5e:95:d1:de:e1:50:6a:
dd:af:e5:19:63:37:0d:66:cc:48:a4:2f:e9:f3:30:ff:5f:1c:
0d:0b:10:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:46:01 2025 by rpki-client