Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: 9c2l0RbudIYHNtPyA7TCre4LC6cNpuPz+88cpjN4jGE=
Subject key identifier: 33:E4:93:AE:D7:02:ED:F1:A1:AD:BA:58:DA:51:E4:29:C9:76:CA:F0
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 019880F8B90040A9D8B526642C959965F725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0AC7
Signing time: Wed 06 Aug 2025 20:00:40 +0000
Manifest this update: Wed 06 Aug 2025 20:00:40 +0000
Manifest next update: Thu 07 Aug 2025 20:00:40 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: AqhiUntrV9KpzLgouul74iqudhf3t3FMQ3gx6lGpK/E=)
2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:b9:00:40:a9:d8:b5:26:64:2c:95:99:65:f7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Aug 6 20:00:40 2025 GMT
Not After : Aug 7 20:00:40 2025 GMT
Subject: CN=33e493aed702edf1a1adba58da51e429c976caf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:69:94:d3:88:a2:08:8b:7b:8c:b1:d6:99:
91:b0:0c:99:22:72:f5:92:f1:11:81:f0:9f:fc:e9:
55:a6:a6:17:fa:92:07:fb:45:52:32:06:7b:20:58:
1c:ec:f5:42:9f:b8:f4:26:97:ca:9e:f6:88:57:11:
47:43:4d:1b:19:19:69:cc:9c:74:e7:4a:cb:c4:56:
83:0c:2d:0b:60:d4:3a:9f:f0:a6:53:70:81:31:05:
ad:cf:1c:f1:56:e7:e2:ac:d6:64:00:2d:1a:1f:ec:
07:d4:e2:e9:a5:a6:5b:0b:80:a4:89:3e:e5:ff:61:
8b:1c:ab:03:d3:e7:0d:aa:fc:97:87:05:79:35:15:
85:bf:ae:2c:49:70:7a:eb:af:6f:62:2d:f1:a2:2a:
25:d8:b5:fc:ef:5e:cf:94:ac:0b:c2:d6:03:0f:4c:
ea:6b:b4:30:a4:26:c5:5c:29:93:dd:40:6e:5a:90:
20:af:d9:cb:87:96:64:d1:6b:c3:4e:a5:3f:83:08:
db:49:28:56:81:48:85:a2:35:55:bb:36:8d:b3:ad:
f4:55:d1:41:69:2d:82:99:f7:b6:59:a4:0d:6e:54:
20:20:96:f1:34:1a:8a:16:d5:73:06:1b:1f:e8:4c:
16:5a:c1:bc:79:cf:8a:70:ea:41:3b:8f:2f:73:59:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:93:AE:D7:02:ED:F1:A1:AD:BA:58:DA:51:E4:29:C9:76:CA:F0
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:a3:fd:54:2e:e0:81:f9:76:a5:fd:d2:a0:4d:68:ab:9c:
c5:99:97:17:79:1d:57:50:b2:f9:e4:b7:18:ac:62:40:27:a1:
c4:38:dc:e2:0a:6c:a2:0d:b5:a4:ca:c5:94:45:6d:b9:02:c4:
b0:57:31:fa:ee:87:58:e5:9f:45:3b:59:fa:d1:35:61:fb:28:
be:f9:e6:c1:3d:23:83:41:32:a6:d1:94:fc:7a:e4:38:e0:73:
f4:bd:e6:bb:63:08:99:e1:13:94:ab:5a:95:08:35:b3:78:06:
ef:01:b2:c0:bf:fb:31:ef:93:80:37:fc:82:c7:f7:42:0f:4a:
d2:65:b8:2c:6b:94:a3:c0:d5:0a:9c:be:fe:c0:78:d5:5e:a5:
5c:58:bc:70:4d:b5:1b:1b:bf:96:f6:70:e4:eb:e4:4f:d0:71:
fc:63:6c:81:17:30:5f:3e:a6:45:a0:0c:bc:3b:8c:aa:eb:08:
c5:e6:ca:8d:6a:e1:11:41:ee:f8:b0:3f:81:70:0d:d2:e5:29:
76:c5:0e:0d:d1:0c:75:31:1f:b4:c8:78:3e:b4:65:14:29:cd:
b8:8c:d7:34:31:11:b9:e5:19:ac:1e:68:7f:2f:7c:bb:72:6a:
2c:94:4d:86:b0:94:9f:ac:2c:11:e2:1e:9d:f6:cf:10:15:89:
b7:60:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:02 2025 by rpki-client