Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
File: YG03z4fxLyqy3vMTgMOGuCbBnWU.mft (raw, json)
Hash identifier: S5/53/p6VzSiehkwLEv3ho5YYIoi4HQAgGlf4wLr3ls=
Subject key identifier: 16:88:1C:4A:C5:71:5B:5A:1F:52:A3:1D:62:9F:1C:18:2A:0B:A9:06
Authority key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
Certificate issuer: /CN=606d37cf87f12f2ab2def31380c386b826c19d65
Certificate serial: 01987450BBB897A5BD825DEDD0517217A876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 09:01:44 +0000
Manifest this update: Mon 04 Aug 2025 09:01:44 +0000
Manifest next update: Tue 05 Aug 2025 09:01:44 +0000
Files and hashes: 1: YG03z4fxLyqy3vMTgMOGuCbBnWU.crl (hash: 4KYRmabL7kvoiduNrxscqQ+vjq272k0hA5LE70aTeYs=)
2: nLsyVuehs4jeCS4JRJE2VO5aV5I.roa (hash: ypIKdtNC4Ic9Sqbxvpei64KUmu5yr6lYiqShQ2+fMBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:bb:b8:97:a5:bd:82:5d:ed:d0:51:72:17:a8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606d37cf87f12f2ab2def31380c386b826c19d65
Validity
Not Before: Aug 4 09:01:44 2025 GMT
Not After : Aug 5 09:01:44 2025 GMT
Subject: CN=16881c4ac5715b5a1f52a31d629f1c182a0ba906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:6a:02:0d:f2:62:e4:cf:4e:4b:e7:10:7f:
59:ff:cd:68:13:c7:a3:5e:72:3a:e6:3a:44:f5:5a:
1c:19:5c:f1:83:7a:0f:f2:fd:35:19:0f:45:90:2f:
1e:6e:88:04:09:f8:6a:1a:45:80:ab:2d:65:f4:34:
2f:ab:32:e0:e7:04:16:90:3c:2f:c6:f8:a9:38:c4:
76:49:e5:c4:47:64:51:13:52:d0:a8:ee:88:ce:5b:
83:f1:55:01:d1:30:d0:eb:d6:cf:cd:9f:74:16:30:
99:c3:c4:7e:93:ec:70:46:f6:75:0a:92:f7:0c:05:
97:54:0b:d5:e4:da:d7:5a:b5:95:a5:a2:ec:b3:27:
77:aa:40:d7:e3:03:c3:d6:f7:71:28:96:21:54:45:
3a:95:37:43:22:1c:68:85:a3:dc:01:d1:ee:0f:b0:
52:53:8d:56:2d:c3:16:eb:f2:1b:87:79:f3:6e:a5:
cb:3f:fd:d9:54:05:7f:ad:ae:ad:56:8c:cd:0a:bc:
cb:b5:56:65:e4:49:8a:5a:93:81:a8:d5:54:ea:ad:
02:1a:aa:ef:fc:d2:28:95:46:de:a2:14:17:0a:8f:
ec:f9:b5:94:8c:1b:fa:f4:9b:ff:9b:d4:f2:db:f5:
df:24:3c:91:36:c0:a6:c4:58:fb:5e:28:ef:1e:6e:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:88:1C:4A:C5:71:5B:5A:1F:52:A3:1D:62:9F:1C:18:2A:0B:A9:06
X509v3 Authority Key Identifier:
keyid:60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:72:80:cd:a0:20:91:7b:22:98:b9:95:89:09:b0:38:dc:50:
01:46:ce:9c:f8:0c:11:23:70:07:17:c0:e9:9d:13:68:45:e7:
86:6b:6e:60:f0:3d:f1:7d:1e:47:26:35:c5:48:35:b8:c3:78:
f5:c2:70:3e:80:0f:ed:23:05:2d:8e:67:81:15:da:fa:c0:42:
9e:d5:bf:6b:57:9d:ae:19:52:f5:d9:87:3d:a6:90:21:d0:d0:
ba:54:60:67:ab:f4:1c:8c:71:9f:20:e9:f8:57:98:bb:9a:c5:
9a:0f:90:0a:b8:90:3a:5d:6e:8f:fa:12:c6:ff:1e:99:32:2b:
cc:c9:9c:43:01:8b:1c:56:80:c5:1e:57:56:b2:25:63:65:b7:
bb:4e:5a:78:fa:d8:3d:de:fd:04:19:0b:63:b7:66:7d:f3:57:
f1:6f:5d:31:6f:49:d7:6b:ac:2c:9e:c3:7b:73:a5:44:f6:92:
47:64:4f:78:55:e0:b3:7b:ae:b3:6d:08:ec:1d:45:9d:54:78:
08:b5:a1:73:34:33:1b:83:b9:95:ca:42:2c:de:d2:16:35:c9:
a8:5b:19:ce:77:f0:f6:f9:8b:45:f8:7e:51:35:bf:f3:63:f5:
35:37:28:71:aa:1e:44:05:1f:95:4b:05:62:11:2c:fd:0b:67:
33:37:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:25 2025 by rpki-client