Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File: YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier: e8e8Z8+Y1qf4ENcsAOguQahHKctK1niF72WI2uFpj8U=
Subject key identifier: ED:EA:F7:3A:50:5A:4B:B6:A5:D5:9B:91:AF:A6:C6:04:95:AB:71:CD
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 0198744FB88A7190D4819561A105BD5666F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number: 0BAA
Signing time: Mon 04 Aug 2025 09:00:38 +0000
Manifest this update: Mon 04 Aug 2025 09:00:38 +0000
Manifest next update: Tue 05 Aug 2025 09:00:38 +0000
Files and hashes: 1: 4ohGnWINC3iPFe6nDpOqBOx7d2s.roa (hash: 9AbJKb6HLl4DZwmq7R7PVZTsMXxo/QDCXs2EgLL85AU=)
2: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: N9GM0LQZZyeVO2MNSChGyn+1A6yfOBUEQ2adwga6+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b8:8a:71:90:d4:81:95:61:a1:05:bd:56:66:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Aug 4 09:00:38 2025 GMT
Not After : Aug 5 09:00:38 2025 GMT
Subject: CN=edeaf73a505a4bb6a5d59b91afa6c60495ab71cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:da:0d:df:4e:9a:3e:fa:fb:d5:63:c9:fc:
09:dc:e4:6b:18:cb:ce:ad:4d:1c:1c:28:d8:3f:64:
a2:12:a6:58:8d:bd:7b:86:53:08:02:04:c3:07:9a:
5c:7f:89:54:17:07:ae:ef:1a:39:41:a1:ad:72:6e:
08:3f:c4:0d:3f:b7:b1:5c:75:0f:c0:09:00:42:0c:
68:91:56:19:eb:2c:a1:25:d2:d1:8e:c7:3d:e3:e0:
5a:a4:cd:40:3b:22:db:12:36:0d:b2:18:5e:b6:6d:
60:05:f7:f0:c1:c1:d4:a1:7c:c6:c6:3c:fc:e3:6b:
b6:33:8e:8a:92:b2:c9:2c:07:52:cc:c3:f0:1a:73:
0d:54:6c:23:e6:6a:e3:07:36:70:86:af:ad:90:11:
24:de:c7:84:9c:d6:fc:d9:29:a8:6a:8a:0d:64:17:
79:b9:36:38:19:42:60:da:ae:69:7f:81:21:72:bd:
4a:83:20:7e:6a:e0:46:80:4f:27:bf:6b:bf:bf:e0:
3f:85:5d:e8:7e:6e:1e:39:54:d7:c9:62:e3:c4:6d:
c9:11:32:ea:cb:00:ee:37:db:4c:1a:9b:be:27:b6:
b5:c1:7f:a1:23:4c:08:f9:ae:b5:14:4f:38:49:a2:
de:df:b1:a2:1a:b4:71:3e:a4:de:2d:ae:fb:66:f5:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EA:F7:3A:50:5A:4B:B6:A5:D5:9B:91:AF:A6:C6:04:95:AB:71:CD
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:33:a1:26:62:39:19:5e:82:40:d4:8c:81:39:77:29:da:40:
69:33:aa:c9:78:0a:57:dd:ff:d3:fd:7b:7c:ba:fe:69:24:a3:
35:08:cc:80:f3:0d:d4:26:90:56:0e:a0:19:d2:06:ce:0c:f0:
1c:49:28:fa:a1:8e:a2:77:0c:e6:d4:25:23:c3:88:f1:f7:e5:
a9:a1:ab:46:b2:9a:b6:f3:5e:10:7c:72:c1:b4:c7:8c:13:12:
16:44:50:ec:d2:ed:12:f0:e6:6e:ad:65:1a:65:73:0c:9a:5e:
9b:79:f0:3e:6e:a1:0a:6d:0d:71:44:3a:90:f6:ff:eb:33:6e:
e2:8e:22:57:5e:f0:1e:45:db:fa:44:b4:35:46:a3:da:3f:29:
b1:c0:af:aa:46:39:8b:d2:dc:c0:d0:b2:6d:bf:87:0e:34:c3:
6e:77:39:8d:ec:bd:89:c0:b3:65:79:bc:4a:51:c0:4e:f5:a7:
a1:a4:be:19:a9:73:ba:04:69:5d:a4:2d:0c:25:b0:6b:c0:d0:
e1:2e:06:22:a8:63:f3:89:c2:8b:a1:6f:2a:74:e5:ce:d0:cb:
70:a5:63:63:2a:e0:ec:35:e8:0f:00:d8:f1:7f:f3:af:16:6f:
c4:85:55:fd:f2:bb:f6:2c:93:87:2a:c0:75:81:bb:dd:28:75:
b1:3d:4d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:22 2025 by rpki-client