Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: JAmyWnLOTqoQcnbqICjadlusW8fkxueMdobsUyZ8xMc=
Subject key identifier: 44:19:A1:AF:4C:07:E9:FC:75:E5:C1:FF:E7:72:AE:E8:78:06:7D:3D
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 01987C40281490F9D59C38D6796242133644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 09E1
Signing time: Tue 05 Aug 2025 22:00:35 +0000
Manifest this update: Tue 05 Aug 2025 22:00:35 +0000
Manifest next update: Wed 06 Aug 2025 22:00:35 +0000
Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: lAN+d99w8dxj2CClBLpwkI4g8qPrrFfvnWKbzHIwbx0=)
4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:28:14:90:f9:d5:9c:38:d6:79:62:42:13:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Aug 5 22:00:35 2025 GMT
Not After : Aug 6 22:00:35 2025 GMT
Subject: CN=4419a1af4c07e9fc75e5c1ffe772aee878067d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:16:be:b4:70:a2:2b:2d:8a:2b:40:35:cd:
4f:fb:a5:94:b6:d4:54:e1:6e:e7:bc:55:3f:35:6a:
b0:54:b8:13:1c:3c:41:57:b2:08:46:0b:4c:82:20:
7c:f6:15:54:a5:0d:b2:4e:1c:ba:27:94:04:3d:1a:
5c:76:9c:8a:6e:ab:a7:de:af:47:db:82:48:72:e5:
95:18:bf:88:fa:52:24:94:78:15:22:72:80:fb:9e:
79:a5:77:b0:ad:e7:22:c3:87:ac:66:7a:e6:2a:ec:
74:ce:13:dc:69:f9:38:54:04:4d:38:b7:67:e5:a4:
ef:c6:7a:88:df:11:3c:1a:ff:9b:7f:8b:a0:83:f9:
7b:3f:7a:66:1d:99:72:b7:cf:ca:36:c2:d8:4f:24:
ea:97:35:a9:64:e0:94:17:b3:a0:ba:13:50:d9:33:
2b:e8:b4:df:f2:ce:aa:2b:6a:ae:ba:b7:5d:39:96:
60:ae:d0:b9:56:41:1a:90:7e:f9:c6:ca:fc:6e:84:
a2:e0:15:68:e8:5d:9b:0a:84:29:bc:ee:d2:a7:53:
1a:c3:af:04:b7:5a:51:44:44:44:2a:2a:57:8f:0e:
ac:8d:33:35:60:eb:8e:87:30:d1:c5:f1:13:cd:46:
38:cc:cd:aa:60:5c:ed:06:a3:dc:68:87:ab:6a:ef:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:A1:AF:4C:07:E9:FC:75:E5:C1:FF:E7:72:AE:E8:78:06:7D:3D
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8a:54:9d:f8:66:4d:e4:b8:fa:1b:24:22:4a:14:42:f7:af:
18:59:d4:bf:d7:7a:d6:98:2e:aa:18:06:1e:49:cf:9c:79:3c:
75:88:70:ae:36:8c:00:5f:bd:29:82:c8:b4:cf:21:d7:e7:ae:
bd:f5:b2:99:0c:9d:1a:28:9e:ac:e0:6f:56:55:00:57:c7:56:
c8:96:8c:0b:6f:9d:d4:a2:be:a5:08:d2:bb:05:70:a5:2d:61:
2a:1f:7b:e2:2b:39:b2:74:18:32:44:f1:a6:ef:19:a9:87:ca:
b6:d7:b1:ea:2c:7d:32:f5:40:e1:12:b4:61:55:4f:21:f0:68:
b2:70:19:d7:9d:5b:49:4e:e0:99:75:f4:bd:98:4c:f3:f8:eb:
07:47:e3:e8:a5:91:3e:25:b9:4d:1b:35:d5:9f:8b:03:29:6c:
47:79:09:bc:34:d6:e1:8c:8d:da:4f:b7:01:72:7f:1f:23:19:
4a:4f:1b:4e:d9:5f:c7:ca:57:a5:6a:de:68:ca:e9:ac:f3:97:
67:d6:a2:0b:e2:53:64:aa:35:58:61:30:cd:8c:2d:f1:cb:f1:
99:a5:ed:50:dc:b2:69:94:03:b2:12:a1:52:e0:68:c5:1b:75:
a4:61:9b:a3:76:55:8c:5d:b2:9e:e5:53:4e:8c:4d:cf:1e:cf:
2e:95:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:02 2025 by rpki-client