Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: xuVOtMfzNB5FlzSbZYdphuhzHRRmErAN7JEO3GFPTII=
Subject key identifier: 96:3C:A1:95:83:12:72:D7:92:8B:76:81:B6:3E:71:B8:75:33:75:19
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 0198898E588C5625E2E42BAD5327A7CB8E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0E19
Signing time: Fri 08 Aug 2025 12:01:03 +0000
Manifest this update: Fri 08 Aug 2025 12:01:03 +0000
Manifest next update: Sat 09 Aug 2025 12:01:03 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: ifoL9xjbgVc/N0CFxRTnNxWpQRpn4Lb3bMklrjsD7n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:58:8c:56:25:e2:e4:2b:ad:53:27:a7:cb:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Aug 8 12:01:03 2025 GMT
Not After : Aug 9 12:01:03 2025 GMT
Subject: CN=963ca195831272d7928b7681b63e71b875337519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:90:92:02:fc:d7:6f:4f:d1:c8:2a:07:1b:
32:82:dc:aa:62:81:15:f8:cd:71:74:e2:d0:b2:22:
da:bc:db:ff:06:11:c5:aa:90:96:46:f8:1c:b2:67:
b0:3b:e3:49:19:33:24:b8:02:12:5e:1d:fe:94:33:
70:5b:16:69:93:98:a8:7d:3e:ee:41:91:08:07:5a:
39:fd:c6:cc:97:4d:a7:2e:75:00:96:1d:a1:66:6d:
28:5b:99:57:3f:f8:2f:68:72:47:cc:41:d5:5c:84:
b0:67:ff:c7:30:1a:3a:b0:5a:ea:db:58:a1:07:dc:
66:02:dc:f8:75:64:a7:c8:64:b1:d5:56:ae:51:35:
94:6a:ff:a1:47:f3:25:e1:91:84:7c:64:ca:c8:b8:
32:18:9f:d2:b7:a9:a9:51:ce:20:2d:5f:3f:0a:0a:
40:2a:48:3b:85:d6:46:d7:0f:e6:94:cc:5f:ff:8f:
b7:1a:2f:36:46:db:cd:9b:d0:35:ed:78:d9:ed:36:
f1:39:d8:94:a4:76:ea:bd:e0:31:9e:2b:d2:e0:54:
e0:79:1a:4c:74:ad:12:6b:95:28:07:0b:b7:2a:28:
bb:d8:93:0e:15:e4:d9:07:97:e4:75:fa:2f:61:26:
25:e9:d6:25:64:26:51:d9:9a:fe:f7:d0:86:62:18:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3C:A1:95:83:12:72:D7:92:8B:76:81:B6:3E:71:B8:75:33:75:19
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:ee:52:bf:2e:ca:4e:7a:5c:e4:20:48:e3:fb:f4:c4:c4:
f8:73:fb:f1:5e:e8:44:ea:b9:58:32:f3:64:48:2b:a7:43:6d:
4c:d7:68:aa:86:ac:dc:6e:82:f3:a9:7c:be:20:6a:ac:a9:8b:
dd:6e:b6:c2:b3:83:8b:cd:f7:09:d1:05:51:1e:7e:8a:54:df:
c1:bf:a2:ed:b2:75:23:46:32:30:b5:b7:7d:f3:4b:3e:c7:05:
71:e7:6a:38:a4:0b:8a:b4:81:8a:c3:07:23:df:63:de:d8:1b:
79:e1:da:06:97:db:4a:d1:71:37:5e:25:f1:74:56:ea:5c:02:
a7:d9:3c:24:71:20:23:f5:24:4a:5a:9c:db:bc:4d:d4:c2:3a:
16:4e:8f:80:ab:e4:d2:42:9e:f9:06:a7:e8:60:39:bc:eb:1d:
f3:78:d9:1c:10:54:52:4d:74:83:87:e6:bd:ea:28:96:51:7e:
ee:b7:c5:16:bd:62:88:eb:91:ca:9f:0c:9e:c5:c7:39:2b:7d:
ad:ba:a3:8e:a7:d2:ed:da:9a:01:7d:14:de:e1:30:e0:ae:94:
f0:ba:f1:89:fd:34:ca:ac:75:41:90:b1:ec:41:46:89:77:79:
84:a7:e2:22:c9:5a:72:72:ae:18:9b:46:9d:7d:33:2c:be:97:
ff:a9:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:52:10 2025 by rpki-client