Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: Fkyv9iO/8nY+EEyEqZjEIvmJAL3HU/29drplnPboRts=
Subject key identifier: BB:68:FA:C0:C4:5B:C2:C4:64:54:8C:E9:1A:94:AA:3A:D0:53:A0:BD
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 019889216F850E6021E3D7DED52708EE16AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 17
Signing time: Fri 08 Aug 2025 10:02:06 +0000
Manifest this update: Fri 08 Aug 2025 10:02:06 +0000
Manifest next update: Sat 09 Aug 2025 10:02:06 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: 4AgP+EGQ5B84O0WNtLb79U7VcQJny6YxJmtNbXWNfQU=)
2: ef5i4gFsUjQtA9jIFWXZmLBsI5w.roa (hash: nHPFZXhPCy6Yr/I1NdWh8sLmeUGTngr7MiMVHJxQNuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:6f:85:0e:60:21:e3:d7:de:d5:27:08:ee:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Aug 8 10:02:06 2025 GMT
Not After : Aug 9 10:02:06 2025 GMT
Subject: CN=bb68fac0c45bc2c464548ce91a94aa3ad053a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:f6:75:1d:c8:a5:b0:5b:21:1d:53:4e:e3:
2a:cb:4e:0b:3d:d1:93:61:37:84:21:75:7f:77:94:
30:e6:be:a1:97:a5:22:5f:58:61:02:f2:d6:48:ab:
e9:ec:60:5d:9f:da:b5:17:f7:bd:48:d9:68:66:ad:
36:3c:ed:ce:71:4f:8f:d2:3b:7a:ea:7d:64:45:66:
e3:dc:8a:72:e5:85:d3:f5:f5:5a:85:66:aa:37:79:
1f:15:5a:57:56:07:44:72:35:9c:50:b5:96:2b:9a:
e1:59:07:c7:52:f1:d0:f1:c5:3f:68:7c:ca:88:52:
f6:f9:a2:ea:ae:f0:aa:72:1d:81:c9:aa:59:45:6a:
b6:96:13:05:51:12:0e:41:19:b5:08:f6:50:ad:29:
70:96:76:28:d0:cb:9d:af:76:18:13:f2:0c:66:24:
87:cf:35:67:41:da:eb:7a:c1:22:26:02:de:f7:b0:
cd:5e:4c:f9:d2:76:52:09:67:8e:75:b6:26:ab:a8:
2f:2d:bf:da:3a:db:c2:44:d1:66:cf:4f:6e:8f:f6:
32:89:53:0d:34:2e:4f:51:ba:a8:2c:79:ec:fa:ef:
d3:98:27:bc:84:29:bd:a9:49:18:7a:2b:e2:25:45:
16:1a:08:30:37:8e:62:fd:ae:c4:22:80:6c:ab:b6:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:FA:C0:C4:5B:C2:C4:64:54:8C:E9:1A:94:AA:3A:D0:53:A0:BD
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:01:15:a8:07:5e:f7:2b:90:4d:5e:70:8f:36:42:3c:bb:
58:5f:79:99:42:b6:26:f3:8b:fd:6c:d6:03:c7:de:59:65:43:
05:bc:72:57:58:da:fa:46:09:46:31:d7:e7:d5:ab:b5:98:64:
15:62:36:71:8a:e2:27:b3:ce:b0:8b:db:b6:55:3f:83:c5:c4:
42:a3:33:fb:30:04:f1:71:49:bd:31:e7:b5:6c:db:ef:6c:c2:
86:7b:82:83:51:ea:a9:ee:49:cb:8f:83:57:e2:8c:70:84:65:
40:3b:9f:f2:c0:63:e4:32:bd:63:a1:1c:72:5b:7c:a7:55:28:
dc:fa:c7:a3:21:a4:98:64:c1:c3:34:36:3a:8b:34:55:5d:a7:
c7:68:c0:bd:a0:b5:b5:7d:91:c5:fb:e6:f6:66:3b:0f:56:d5:
31:27:9c:4a:ca:91:e4:7f:30:53:15:c1:fc:aa:a3:58:6a:e8:
30:12:36:94:3a:ab:51:b6:ac:25:24:74:43:4c:aa:7d:f0:bd:
67:1c:90:75:0a:34:ce:57:b6:da:4e:cf:1e:df:ec:b3:7b:90:
80:1b:f2:c6:59:54:c2:f5:b6:a6:a9:bc:5c:b5:b6:5d:6f:3a:
e2:46:ba:df:d5:99:02:5d:40:99:f2:b8:0e:e5:6c:7b:76:75:
29:91:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:52 2025 by rpki-client