Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier: XRdXVmYxD46QHpvvRCLUA+SFT+EvVwCHVg/0ERFJ58o=
Subject key identifier: E7:DA:D0:EC:C3:29:3A:3F:31:64:0B:E4:D6:26:87:71:50:0B:BE:50
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 01987D8BAD8200EA75F019D58B78FFDAE2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 04:02:42 +0000
Manifest this update: Wed 06 Aug 2025 04:02:42 +0000
Manifest next update: Thu 07 Aug 2025 04:02:42 +0000
Files and hashes: 1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=)
2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: r7rP+dGGTeV2C1YQcTD3PdA67oDXnVEefwDy8gzEyVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:ad:82:00:ea:75:f0:19:d5:8b:78:ff:da:e2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Aug 6 04:02:42 2025 GMT
Not After : Aug 7 04:02:42 2025 GMT
Subject: CN=e7dad0ecc3293a3f31640be4d6268771500bbe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:c4:44:96:d0:0e:6e:a3:51:40:93:16:61:
94:89:a8:96:5a:c7:81:e9:ad:e5:f9:0e:1c:62:d3:
dd:c1:af:e6:39:82:09:25:32:33:e5:58:a5:87:15:
8c:c3:d7:35:2b:39:55:70:d7:99:74:1f:0e:b8:24:
f6:7c:7a:0f:e7:10:10:96:11:6b:2f:48:39:3d:28:
98:40:3a:9a:c7:29:71:0e:2a:f7:83:94:f6:58:e0:
b6:66:9d:c4:4c:97:e7:81:bd:4e:21:2f:d3:aa:59:
97:cd:2b:5d:42:6a:22:0f:7e:09:c3:06:67:ec:02:
a5:69:93:a1:7c:80:2b:01:bd:a0:e7:fe:f5:f2:11:
a5:a9:d5:a9:59:dc:2d:69:1d:15:e6:c3:2b:64:13:
68:50:ac:94:3d:4a:85:11:0d:6d:d1:47:00:82:8c:
e8:37:72:12:c1:47:e6:d9:af:1e:3e:07:8a:36:b5:
e1:21:da:1a:37:02:fa:a6:e7:43:b6:95:34:92:9e:
56:7b:61:d7:59:70:c5:16:de:e9:ad:16:55:f4:72:
a1:1c:4b:90:59:11:37:44:9f:40:0d:69:4c:53:bf:
fa:4e:be:10:13:79:73:b6:17:5b:44:a1:ba:53:c0:
06:3c:de:ff:02:86:00:d9:a4:1f:38:61:04:38:7c:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DA:D0:EC:C3:29:3A:3F:31:64:0B:E4:D6:26:87:71:50:0B:BE:50
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:f3:33:84:37:cb:9c:47:57:ed:b7:5b:5e:e4:4b:3a:a5:
b9:4d:4e:96:d6:25:cd:e1:d3:87:d3:b1:43:b4:59:3d:50:99:
f8:45:69:13:97:58:bf:01:6b:ef:3a:1c:b6:2d:8d:6b:ca:95:
e5:af:f9:59:7a:ac:da:5a:b4:e5:61:84:ce:5c:fd:90:80:28:
45:91:28:41:bd:c6:f4:ec:dc:30:49:13:1d:21:57:1c:51:6f:
e8:d5:93:a5:42:79:3b:83:e5:56:0e:99:24:0f:6a:a8:cd:d8:
3e:15:0f:cd:98:7e:04:6e:72:8a:50:ea:f5:68:25:74:52:13:
14:9b:f2:78:3b:50:6c:d1:4e:75:b0:8a:6d:3a:f5:ca:08:72:
29:ed:e1:43:c0:9c:1a:ac:5a:1c:1c:bf:82:f8:8e:02:3d:70:
a7:00:a4:ab:38:0e:ce:3f:77:b6:28:f5:8f:70:0e:b0:64:cb:
e9:58:a7:30:e5:7f:c0:8c:61:78:55:b7:bf:da:4f:87:75:e8:
f0:1f:9e:f9:f2:d7:61:f4:57:50:75:a3:5d:e2:37:95:cb:f3:
84:f2:e1:0e:55:a9:bb:fe:8d:d9:2f:15:2a:d1:37:1c:f9:22:
e2:42:7a:2d:de:48:01:f4:d8:f3:e3:b4:97:4d:73:3d:17:c9:
2c:a6:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:33 2025 by rpki-client