Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
File: YIH8-etwqw4f3KwJx_m7XgFMnb0.mft (raw, json)
Hash identifier: h6JZe/Fph7mRARc0hpbfKhKQ0rYcTtuNHij6xW5S9Kg=
Subject key identifier: 2F:E1:3F:73:F5:24:C2:71:E4:46:DD:2E:E0:E2:1E:88:30:44:B6:61
Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Certificate serial: 019874BDEFF3F497339D5C7442EDED61380E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
Manifest number: 0B72
Signing time: Mon 04 Aug 2025 11:01:01 +0000
Manifest this update: Mon 04 Aug 2025 11:01:01 +0000
Manifest next update: Tue 05 Aug 2025 11:01:01 +0000
Files and hashes: 1: SCQrnzyM4Bx20DPOMtssZk-Wu68.roa (hash: wtLko9TY7/20VtwY2KqfAs6WX/4oN6rpkwycX+Q3z5I=)
2: YIH8-etwqw4f3KwJx_m7XgFMnb0.crl (hash: F6wbWnJEbSKqA7VSxpWDRWvsUwU8WLBKuWKHzcyJtg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:ef:f3:f4:97:33:9d:5c:74:42:ed:ed:61:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Validity
Not Before: Aug 4 11:01:01 2025 GMT
Not After : Aug 5 11:01:01 2025 GMT
Subject: CN=2fe13f73f524c271e446dd2ee0e21e883044b661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:54:4a:39:09:9f:ad:13:25:6b:81:0e:41:
9b:00:7c:cd:19:b9:75:0e:56:4f:9f:ca:cd:48:87:
cc:34:f5:bc:25:12:18:08:66:1d:fc:a9:5d:6d:ec:
8c:88:ef:06:5e:de:29:7e:e2:c2:e6:38:6b:af:30:
7d:92:46:da:11:4c:80:db:23:bc:a5:6f:bb:d2:64:
16:42:b7:5a:01:d8:8a:22:ed:52:f2:eb:90:13:9c:
32:04:a6:3f:2d:a4:bd:02:da:ec:9b:61:d6:91:67:
94:f5:42:80:91:5b:1f:d9:fe:e6:92:3d:ee:06:4d:
df:97:91:27:ac:95:34:05:32:d8:b3:4e:ff:7a:4f:
b6:42:46:b3:fd:a2:ca:db:fa:86:d7:b2:c1:18:1a:
5c:e5:b3:8d:05:aa:69:23:84:e1:6d:82:11:de:88:
0b:b5:a2:67:9d:31:2c:d6:79:59:80:20:68:9c:81:
74:ff:ac:8c:13:0c:1d:4d:fd:a0:7b:1e:1a:7b:49:
8f:d8:55:d4:5a:9a:15:0f:96:49:67:2e:48:72:76:
59:77:d1:09:5b:13:fc:64:6a:3b:13:6e:ef:a1:1d:
5d:b0:76:ba:88:a3:86:12:4c:b0:05:a2:0b:0c:d1:
5f:46:97:e4:e4:2e:2b:b0:0e:a4:de:ca:a4:01:fc:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:3F:73:F5:24:C2:71:E4:46:DD:2E:E0:E2:1E:88:30:44:B6:61
X509v3 Authority Key Identifier:
keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8b:fb:23:7d:25:84:b4:c2:49:73:93:ff:33:35:b2:06:9e:
ab:df:fb:3d:04:5a:ba:77:e5:b2:8a:46:fb:26:5f:0d:46:e8:
94:01:29:29:9a:b1:1c:8d:5a:85:68:99:7e:1d:20:39:da:27:
45:fa:44:d5:b1:56:b1:11:13:ba:94:91:70:98:b7:08:a3:81:
0b:ce:85:8f:eb:95:81:d2:3b:1f:f3:73:0c:b9:7a:df:bd:1a:
f9:ac:a1:b5:ba:87:e8:3b:fb:8a:0c:72:9e:9b:78:d7:cd:24:
78:97:60:46:f1:f9:9a:a2:ea:da:5d:c8:8b:96:be:d4:ad:c9:
c2:21:65:99:09:dd:aa:4a:6d:71:94:83:92:2b:a7:af:33:be:
ad:73:10:50:9e:71:92:f3:c2:0d:9b:27:3e:33:9f:ff:f4:67:
04:41:ec:27:05:a9:af:50:f0:66:9f:46:7c:8a:42:25:62:7e:
ef:4b:e8:69:aa:c3:df:bd:96:75:26:39:d2:91:11:d9:e6:84:
36:a4:9f:91:03:02:7d:91:9f:2a:a0:de:d6:85:b6:bf:0f:90:
96:dd:ff:eb:ed:d8:9f:70:84:9c:75:dd:c7:32:ca:12:46:5d:
7a:74:88:cd:b2:50:57:6b:24:0f:2d:11:0c:f5:d5:ce:2d:3f:
a5:53:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:55 2025 by rpki-client