Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: 6B5+FYt4dWmhtLEN7HvJAP7UqHiYPAcDenGNSwyxkws=
Subject key identifier: DD:56:B4:C9:8F:FE:B3:69:F1:A5:A1:5E:AC:71:54:EB:04:21:36:35
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 019880F9553D478E8CE1615B1EB653537CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: C0
Signing time: Wed 06 Aug 2025 20:01:20 +0000
Manifest this update: Wed 06 Aug 2025 20:01:20 +0000
Manifest next update: Thu 07 Aug 2025 20:01:20 +0000
Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=)
2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=)
3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=)
4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=)
5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: p7GioTBsak23UIgomXogFkfXu2zvExwTZGW/BpeT4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:55:3d:47:8e:8c:e1:61:5b:1e:b6:53:53:7c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Aug 6 20:01:20 2025 GMT
Not After : Aug 7 20:01:20 2025 GMT
Subject: CN=dd56b4c98ffeb369f1a5a15eac7154eb04213635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:7b:c2:28:81:c7:80:96:43:a0:01:91:18:
ed:86:de:a1:b9:a8:ad:70:8c:63:0d:c2:2a:08:ff:
8a:5e:6d:7c:71:28:f2:f2:5f:3e:c6:7f:59:d3:cf:
51:cc:0c:94:16:62:2d:20:1a:da:12:f4:2e:97:bb:
fd:9e:60:df:22:81:a0:b3:01:42:c9:d6:41:5c:d2:
2b:13:4a:b1:ae:12:17:d0:c4:18:83:e8:d2:10:a3:
27:0d:f7:bb:e1:40:84:6d:3b:47:c3:ba:1d:1a:a1:
7d:4f:d8:f1:f0:32:36:a3:c7:ae:3c:22:e4:be:40:
96:b4:03:53:5f:f3:3f:00:bd:78:f2:37:88:a0:6e:
25:59:c8:3d:7b:b2:f2:66:48:6b:62:20:10:d9:d6:
d1:4e:45:8a:ce:0f:fa:98:d5:a3:c6:28:5d:98:bb:
de:1d:ea:65:d4:55:de:ce:a1:5f:07:fd:d7:75:30:
79:00:66:7a:94:5e:5c:9f:49:20:31:6a:b1:5e:73:
d9:d3:ac:3f:a0:e2:34:55:58:93:5d:e6:62:bf:05:
0b:db:21:e8:55:00:10:02:46:e1:65:9c:89:25:62:
b6:99:fa:07:5d:93:43:18:00:fa:e5:56:1f:a9:93:
16:66:df:51:64:16:3a:d1:44:ce:dc:92:19:5b:0a:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:56:B4:C9:8F:FE:B3:69:F1:A5:A1:5E:AC:71:54:EB:04:21:36:35
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c6:62:39:91:33:a1:e8:45:54:51:ae:20:d3:f8:2a:de:b6:
7c:48:a2:ee:4d:9b:7a:57:79:fd:4d:9f:56:25:58:62:3b:5a:
44:96:ee:74:2d:2b:a0:65:d4:4a:2d:62:e3:7d:d3:71:96:5e:
d6:86:e0:6f:4c:40:39:72:0a:b9:59:fd:b8:e0:b0:3d:96:4a:
94:ce:18:f7:6a:92:81:d0:d7:04:06:92:de:4f:5e:ee:5b:68:
f0:9f:12:97:77:bb:8d:d2:3f:6d:ed:82:f7:88:4b:cf:8c:ea:
97:fb:8e:1d:a7:b5:24:8c:5d:4b:d3:ab:44:77:84:59:fb:3b:
dc:bf:98:15:89:8e:5f:6f:b2:b1:de:70:37:71:bd:2e:6a:3d:
bb:97:d9:e7:8d:e3:2a:3c:04:8d:68:ba:ca:bf:e7:66:ec:d7:
d0:34:bc:db:94:4a:f3:32:66:66:f5:dc:07:24:af:03:1c:e4:
09:4c:43:80:78:61:73:5f:f0:f2:18:5c:1d:cd:9c:9b:c1:24:
fc:3c:45:86:df:6f:8f:64:9e:40:16:a0:9a:13:c5:55:ba:69:
10:3a:ba:2c:24:1e:b7:8b:f5:80:d7:6a:4a:e9:3e:ae:ae:83:
5c:14:71:59:85:19:c0:32:fc:02:a9:86:c4:61:52:1f:37:84:
4f:b3:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:40 2025 by rpki-client