Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier: Jz7DDeaRfqHgVbpbEQypFPkS6PsvdB5HuJBWZucRwSg=
Subject key identifier: 75:45:3E:85:3E:90:35:35:CD:76:C7:1B:5F:98:30:AC:4F:32:DE:2B
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019874506FB51B71EE00268AF5C4FCC42CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number: 07C3
Signing time: Mon 04 Aug 2025 09:01:25 +0000
Manifest this update: Mon 04 Aug 2025 09:01:25 +0000
Manifest next update: Tue 05 Aug 2025 09:01:25 +0000
Files and hashes: 1: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (hash: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=)
2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: TT150dvnh5kuxuR3ty3COLoq1b3+xSbQ0MrHKrqw+r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:6f:b5:1b:71:ee:00:26:8a:f5:c4:fc:c4:2c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Aug 4 09:01:25 2025 GMT
Not After : Aug 5 09:01:25 2025 GMT
Subject: CN=75453e853e903535cd76c71b5f9830ac4f32de2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:e5:da:45:61:f2:53:67:93:ec:57:98:8a:
c2:74:4c:e7:83:b0:08:c8:dc:f5:dd:90:3c:c3:3d:
25:74:1f:30:cf:ac:22:93:a7:99:af:52:45:ec:13:
f7:5c:f6:1a:11:56:39:44:2e:4b:26:92:4b:a7:61:
7d:bf:d9:59:c5:75:57:76:db:fb:38:b4:78:42:c9:
e7:e5:82:74:e6:39:1b:47:93:c6:3d:9b:a4:10:ca:
92:b1:6e:e8:44:0f:6e:cf:f0:10:5b:38:72:dd:40:
96:84:28:ab:2c:89:ac:0b:4a:5a:6b:14:6c:6e:c3:
2c:f7:22:1e:fd:11:a0:ad:07:96:35:9b:73:0a:3f:
3c:68:9d:a7:85:ec:e5:b7:de:22:03:07:2f:30:63:
a0:52:de:9f:ef:92:8a:85:70:fa:fb:14:bc:70:85:
cc:87:ec:f6:1b:07:e8:5c:a6:e2:79:6a:41:9f:b2:
96:0f:b6:bc:97:b6:7c:02:79:9f:29:5d:04:d6:ce:
4c:ce:54:fc:07:d8:88:7d:0e:d2:24:df:36:1f:46:
b3:69:e2:02:9d:11:68:80:65:70:eb:c5:e6:7f:1c:
f2:cf:12:da:2b:e7:07:f6:0c:6d:a1:f6:ca:da:3a:
cd:8a:57:d7:4b:b2:c5:b0:0e:9b:38:47:da:7d:d9:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:45:3E:85:3E:90:35:35:CD:76:C7:1B:5F:98:30:AC:4F:32:DE:2B
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:49:0b:30:99:3c:9f:e7:40:38:2a:a7:0e:59:25:ce:e2:35:
e4:97:a8:6b:de:6f:87:5b:bc:d5:fb:1d:74:15:35:2c:51:f9:
8d:92:69:2a:ed:60:a3:25:c0:e7:81:a6:8b:ed:e9:09:3e:6f:
3f:11:af:62:1b:ec:ac:31:90:41:79:b8:d6:b7:e4:50:64:a5:
1c:a3:b9:0c:d0:97:be:56:ee:de:87:a4:9c:ef:90:4d:fc:4b:
c6:a8:0a:59:82:72:44:0f:39:31:83:98:fa:fc:88:87:5a:3d:
b5:9b:3f:77:12:69:5a:f1:f2:9c:07:6a:ed:0f:2d:cf:6c:6b:
22:61:82:84:81:a7:c9:f3:a1:3c:53:57:8f:f1:f6:33:23:42:
3d:1b:26:7a:d6:a1:53:fd:28:26:a8:13:81:c9:a4:b7:4d:8c:
88:03:09:5b:dd:0c:ab:4f:91:20:6e:f9:90:5c:3b:13:b6:32:
df:8e:90:2e:34:9e:8e:de:91:ae:4c:79:46:c5:70:a0:02:35:
98:02:67:00:dd:c7:ea:4d:f9:f3:1d:44:96:46:bb:57:92:16:
58:61:47:d5:6c:c7:c6:19:8c:49:7e:86:9f:fa:29:b1:14:39:
3e:b3:17:3f:cc:83:2f:1f:e5:68:a9:de:24:fc:4a:35:34:8c:
2f:13:aa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:58 2025 by rpki-client