Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: oENzTRcSgFkkqXaj9eQ+ZMPEFIGblsLhq/NuGlsz5fU=
Subject key identifier: FD:D4:18:C8:BD:3A:26:6B:56:52:28:44:29:8E:09:6A:C9:44:19:DB
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 019884312D2011D716688BBDFDB888A1A960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 067B
Signing time: Thu 07 Aug 2025 11:01:12 +0000
Manifest this update: Thu 07 Aug 2025 11:01:12 +0000
Manifest next update: Fri 08 Aug 2025 11:01:12 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: KmwU2vfuaK3hmpb4d/dy21lrSdWosGhZ2y7R1aDNxdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:2d:20:11:d7:16:68:8b:bd:fd:b8:88:a1:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Aug 7 11:01:12 2025 GMT
Not After : Aug 8 11:01:12 2025 GMT
Subject: CN=fdd418c8bd3a266b56522844298e096ac94419db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:e8:fd:05:a6:89:04:7f:2e:5b:7b:c7:2f:
3b:33:c9:2b:f4:c4:87:66:9e:3a:f9:80:4d:5b:48:
44:15:3a:be:32:39:00:41:3d:06:96:f5:e8:4e:fd:
01:22:2a:1e:12:1b:cb:2f:d0:0f:63:53:ac:a6:21:
83:30:9c:d8:a6:2c:ad:02:a7:07:56:37:0a:4b:b9:
12:a7:09:12:44:e1:5a:5b:ab:a3:a9:7c:62:44:a2:
65:5f:fa:51:ad:b0:20:f1:d1:50:53:e6:05:58:9a:
29:94:48:c4:98:3a:5e:d2:05:8b:d6:fb:e6:05:69:
58:43:48:57:69:08:64:e8:9d:80:1b:9a:fd:3a:f7:
aa:2e:8f:33:eb:2d:77:15:55:49:2d:93:a0:13:62:
95:75:43:b4:40:90:4c:62:f7:15:0e:e1:5e:56:09:
dc:e9:36:32:22:9f:ce:42:42:8f:3e:f7:c4:8d:a2:
e5:98:cf:7e:3f:61:1f:29:84:ae:dd:95:57:21:54:
e6:a0:1e:32:50:17:b1:de:4c:e3:ca:5b:f0:58:21:
73:8a:67:f2:c2:ab:1c:1d:7c:c0:5d:14:e7:0c:24:
9e:85:66:f2:2a:23:64:c6:35:ba:35:c8:8a:43:d9:
70:68:fd:3d:f8:46:c4:12:53:4e:65:f6:88:38:7d:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:18:C8:BD:3A:26:6B:56:52:28:44:29:8E:09:6A:C9:44:19:DB
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ae:b3:b0:50:8a:0d:fb:1f:04:44:1a:9a:28:b2:12:f0:12:
ae:ed:a2:b1:28:ca:eb:45:b8:d9:77:00:c1:ed:6f:db:81:06:
25:a6:80:46:7f:54:6c:9c:ea:c9:a0:e2:51:9f:de:23:73:48:
ef:fc:6a:ab:eb:5b:85:9d:1c:a0:88:1a:17:72:10:8a:bb:6f:
50:fb:42:f1:ae:eb:d6:d6:58:58:4e:0b:85:fd:fd:56:cd:a7:
de:46:e1:61:cf:09:6a:12:a2:12:5b:a0:b9:79:d1:74:ef:23:
b8:4f:2d:09:38:6b:7a:9e:31:01:40:e1:32:c4:98:c1:dd:48:
58:70:a5:3e:8d:7d:c8:b7:5a:65:9e:de:6c:8d:e4:86:0b:04:
be:94:f8:d4:68:44:8b:da:1d:ed:a4:7e:52:71:81:37:42:03:
9a:f1:ec:1b:12:54:bc:54:c7:72:72:67:51:8f:2c:8d:e5:62:
81:f6:7d:65:c2:11:50:35:ac:8c:81:c0:66:fa:97:2f:84:fc:
fe:91:82:0e:51:42:a1:f1:64:9d:04:da:38:64:b3:f1:01:a7:
13:5f:6a:f1:7e:17:68:e2:92:61:93:ed:f5:a5:b0:35:5f:20:
b4:13:91:16:c6:3b:bd:59:39:86:78:0f:6f:d8:f6:c4:3c:1b:
bb:04:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:00:46 2025 by rpki-client