Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: /w6ntENsElGkoojKNUgBT2DD6M6BNuLaJF0AoFLhxXE=
Subject key identifier: AA:19:B1:27:52:ED:0F:75:FE:41:D6:7B:78:F0:E2:88:27:CC:6B:C9
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 0198A15F95C05DE55889FB8865A59AE91885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0BFA
Signing time: Wed 13 Aug 2025 03:00:52 +0000
Manifest this update: Wed 13 Aug 2025 03:00:52 +0000
Manifest next update: Thu 14 Aug 2025 03:00:52 +0000
Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: 45SiAr0NXgGiGcgDkH+VP7+hpc0CHHNZgQNIyxnWYgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:95:c0:5d:e5:58:89:fb:88:65:a5:9a:e9:18:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Aug 13 03:00:52 2025 GMT
Not After : Aug 14 03:00:52 2025 GMT
Subject: CN=aa19b12752ed0f75fe41d67b78f0e28827cc6bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:92:4b:06:78:d0:06:02:ee:52:c1:99:0e:
95:df:49:ad:26:ab:e0:e5:a4:a5:72:39:b0:99:92:
04:fe:73:a8:c8:af:8a:8b:7a:9c:53:c4:fa:0f:f5:
d9:4c:95:0d:06:b0:23:29:f2:ee:00:79:98:09:06:
98:e3:1f:05:b7:47:5d:26:2c:f6:0a:e9:b2:78:ed:
af:5c:60:2a:5d:7e:51:d8:e9:28:47:e3:c5:b7:f5:
7a:09:82:03:f0:bf:61:59:39:99:81:c4:a0:68:f6:
e5:8a:98:69:0e:fb:3c:3a:2c:06:e8:1e:73:f4:2f:
8f:de:b5:e0:c9:e5:6d:e2:86:df:70:bd:ff:63:f8:
b9:dc:45:ae:89:1c:81:7f:48:c3:24:0f:db:6b:1c:
f2:71:e0:d6:84:6b:c8:dc:b8:65:e3:64:e8:54:4a:
b5:a8:53:cd:67:41:7f:46:ed:bd:fd:18:3b:af:83:
e9:5f:ca:f9:ba:3f:84:17:c0:ca:19:f0:ea:97:6c:
38:00:e8:22:70:5b:d7:ca:f2:76:30:d1:c8:fc:b3:
d5:78:01:1d:19:69:c7:4d:af:e7:e8:27:66:85:35:
b1:12:68:d8:aa:75:53:89:34:4f:ad:fb:46:76:5d:
0e:e7:f9:d9:61:3d:48:71:d4:9f:5a:75:7a:04:7b:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:19:B1:27:52:ED:0F:75:FE:41:D6:7B:78:F0:E2:88:27:CC:6B:C9
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2e:99:1d:ad:b4:6a:e3:a9:4d:44:a6:7a:0f:35:5e:eb:ec:
c0:4c:87:ce:f4:c0:c1:a7:a3:cb:7c:e6:d3:d9:a5:ad:96:90:
9e:a2:3c:65:03:c6:07:89:52:c6:37:73:3e:14:f9:d4:a1:52:
5e:29:1e:91:7a:57:63:a7:61:90:d8:8a:3a:92:aa:4c:88:d7:
3c:3b:d1:d8:54:66:04:7d:ad:c3:46:8e:8f:b0:3c:74:6c:e0:
b3:56:d7:ea:7f:9d:8f:4d:5c:86:37:2b:b5:47:ea:83:92:e5:
fc:fa:42:57:1d:1c:b5:6e:7b:aa:08:93:87:2b:4c:d8:11:db:
47:13:27:de:25:a5:de:a8:66:22:c0:f4:6a:a6:d3:00:4c:b6:
40:c5:b0:87:bd:ec:d5:0a:77:a7:6f:1c:a9:d6:05:dc:e1:d6:
8f:ea:ed:af:1e:82:69:c0:36:2c:4a:bc:88:16:54:e8:48:f0:
f3:88:12:f7:00:8d:a3:d0:27:fa:00:35:2f:45:6a:fd:41:00:
b1:2f:86:c9:2f:d7:48:d9:95:15:c7:93:18:eb:69:af:e3:cd:
75:f8:94:56:e6:fb:f6:27:fb:f2:9f:6f:e1:b5:82:14:17:18:
34:3f:d7:ef:6c:89:4d:07:98:cb:d5:9f:dd:e3:7d:f5:7c:c1:
94:c7:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:36 2025 by rpki-client