Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
File: YFUCYwejbuxeaBw5SK71Oif5lzY.mft (raw, json)
Hash identifier: 1NbJpW5HU7RyprwEnT6cFaXIIjK2sep4XVz/lUHZjdw=
Subject key identifier: 07:A3:6A:13:CD:04:95:73:41:A6:8D:E2:57:10:97:15:21:74:AF:57
Authority key identifier: 60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36
Certificate issuer: /CN=6055026307a36eec5e681c3948aef53a27f99736
Certificate serial: 0198966DA7EE8F99F920BFFAFE9D8E85F4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
Manifest number: 45
Signing time: Mon 11 Aug 2025 00:00:25 +0000
Manifest this update: Mon 11 Aug 2025 00:00:25 +0000
Manifest next update: Tue 12 Aug 2025 00:00:25 +0000
Files and hashes: 1: 7jIqwtDbMy9vdRo0YUm5EEwEiSU.roa (hash: zcVysxxJ8InMIpqNYEgmGN9PoMJVnhc3HSBD/6SlWos=)
2: YFUCYwejbuxeaBw5SK71Oif5lzY.crl (hash: nRonL5EQIj7jqffs5C2CwJJEKxYCq8ahALcuXjsm6LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:6d:a7:ee:8f:99:f9:20:bf:fa:fe:9d:8e:85:f4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6055026307a36eec5e681c3948aef53a27f99736
Validity
Not Before: Aug 11 00:00:25 2025 GMT
Not After : Aug 12 00:00:25 2025 GMT
Subject: CN=07a36a13cd04957341a68de2571097152174af57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:17:6d:bd:48:54:ac:62:1d:7d:46:47:52:2b:
2e:0e:16:8b:b2:61:16:b3:09:3b:d7:fe:5c:33:19:
93:8a:bd:1f:8c:92:54:5c:8f:99:ea:54:2e:70:2c:
80:d2:2d:39:e3:1c:c0:7d:98:f3:cf:de:4b:e1:55:
ec:c6:14:05:ee:34:f1:72:07:85:73:2a:6d:b0:53:
36:00:32:dc:56:de:cc:48:9a:8c:ef:9b:14:a7:f1:
8e:a1:3e:ad:95:b2:9c:cd:47:49:90:bb:ef:c0:56:
8f:39:28:79:b9:3e:c1:bf:61:4a:c1:49:4e:04:3d:
76:86:04:64:52:4e:0f:33:ad:5d:e7:e4:7e:34:76:
62:26:a2:19:6d:33:52:81:78:64:99:e0:4d:53:f2:
d9:41:88:60:47:cb:93:58:97:90:9d:3b:3f:25:ce:
59:e0:4c:4c:97:50:05:21:66:17:18:fc:08:01:d1:
63:93:79:9b:95:81:a8:12:27:16:6b:c1:75:80:1e:
3e:df:38:06:24:3a:79:f5:ea:ef:8e:ea:0a:05:bb:
f1:bd:55:56:28:d4:53:91:a8:84:cf:09:f4:b6:98:
c8:73:6a:5c:7e:31:e9:30:82:c7:32:62:55:4c:a3:
d8:87:48:cb:ac:87:ef:77:5a:3c:94:18:51:7d:1a:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A3:6A:13:CD:04:95:73:41:A6:8D:E2:57:10:97:15:21:74:AF:57
X509v3 Authority Key Identifier:
keyid:60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:61:4f:40:27:99:9f:e1:90:9a:7f:a2:29:55:4d:0c:32:b4:
92:58:a1:ea:1f:d9:d2:e5:34:16:b2:b3:40:73:b3:bf:c8:f0:
77:29:82:40:98:96:22:bc:d1:8d:6c:78:d4:e7:e6:99:a8:b0:
d4:26:f7:6d:d3:17:1f:9a:27:22:9d:9e:1e:ca:af:cb:b0:bc:
bd:3c:0b:df:fa:04:38:92:83:0e:11:7d:17:e6:26:30:f1:81:
69:33:08:cd:cd:08:16:4d:d4:f8:fc:b0:6a:89:e9:09:09:69:
8f:b8:7c:8c:27:f0:ee:0a:8d:8e:0e:de:c6:1f:97:0b:d5:f5:
57:a4:cc:9e:23:3f:fb:3c:c3:93:5e:31:71:ca:e8:8a:08:95:
80:f0:19:3d:bc:4b:59:74:d8:a6:3d:74:cb:3a:12:38:10:06:
5c:65:5c:15:48:31:44:b7:da:b5:f9:c0:06:ba:9c:4a:b4:39:
f6:b7:65:01:df:a8:14:cb:30:fd:af:7f:17:8e:8d:1e:0a:66:
58:70:f2:06:82:96:01:f8:07:a7:1d:0b:aa:2e:44:11:a4:c0:
0c:42:89:39:29:b9:8e:85:a7:38:0f:a5:b8:3c:22:84:56:06:
ca:67:fb:e7:8d:6d:fc:43:09:70:1c:fd:1c:b6:4b:f9:25:fc:
61:f5:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:59 2025 by rpki-client