Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: oLbSpBHptxWamI5ODEuIQqbrmo/XCU7L0YP9f8uKBsE=
Subject key identifier: F9:36:5C:3C:90:BD:12:31:DC:BE:76:00:79:CF:3F:30:1F:36:E6:F6
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 01987E65A42DA73D53DA957AE78778C8F721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 0D2F
Signing time: Wed 06 Aug 2025 08:00:47 +0000
Manifest this update: Wed 06 Aug 2025 08:00:47 +0000
Manifest next update: Thu 07 Aug 2025 08:00:47 +0000
Files and hashes: 1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=)
2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: msoN+2yTdYoz/5cInguiT+NTQ282OX6gJcHcqDlLhBU=)
4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:a4:2d:a7:3d:53:da:95:7a:e7:87:78:c8:f7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Aug 6 08:00:47 2025 GMT
Not After : Aug 7 08:00:47 2025 GMT
Subject: CN=f9365c3c90bd1231dcbe760079cf3f301f36e6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:0d:d2:dd:ea:c5:b2:e6:c1:80:96:11:a7:
de:14:6e:94:a9:c3:47:14:52:e7:16:64:c2:13:17:
24:3a:de:d7:5a:25:26:9b:f0:ac:2b:b1:80:a6:2b:
96:26:24:68:e5:c6:fb:86:65:ec:dc:45:48:79:ba:
d0:59:f2:5d:2a:24:b2:a2:ad:8a:f2:52:94:6c:2a:
a3:42:83:4c:0a:02:54:88:12:f4:e0:98:ae:32:66:
b5:49:26:fb:c2:a1:f3:da:ef:df:47:87:a0:d4:de:
24:ee:8d:81:d5:8e:67:44:f0:13:03:a5:a6:71:fa:
f2:fb:b1:56:98:26:c7:51:00:19:97:34:1c:a1:4c:
7e:5f:e3:a5:20:60:f8:55:46:fd:de:dd:e9:fc:73:
a2:b3:59:9f:95:1d:03:87:6c:de:fc:e0:89:c7:df:
a6:1d:d8:12:4f:6c:0f:ea:78:87:9f:4d:d8:6e:38:
59:19:ab:80:a4:26:e1:42:32:06:58:07:98:59:6a:
61:c6:66:fb:7c:f4:a8:52:9b:7d:9d:83:82:aa:24:
4d:6f:1b:28:0e:52:04:a6:13:c7:a6:5d:54:85:93:
7b:07:e4:d8:10:4e:7a:01:d3:c3:04:46:e5:5d:a7:
2f:e8:ab:0c:12:bc:fe:ab:d3:34:38:f1:68:ea:c7:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:5C:3C:90:BD:12:31:DC:BE:76:00:79:CF:3F:30:1F:36:E6:F6
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4a:8d:4c:01:fc:97:f7:47:44:5e:0f:71:5d:97:e7:e5:2e:
ad:7d:a8:c2:25:2f:b9:a5:a8:e7:72:cf:e1:90:9a:19:42:c9:
29:9e:4c:e6:a8:11:7e:7f:2e:9e:48:44:6c:9e:b4:45:8b:86:
c0:99:c5:9c:21:68:45:a2:06:5a:ea:f3:cf:9b:10:30:32:98:
94:27:5e:da:d8:63:b9:ff:09:3d:b7:5b:e6:80:54:6e:f0:61:
a1:6b:8e:7b:58:4b:d2:71:2e:bc:24:d0:84:f0:ba:b8:a7:1d:
f4:10:48:ec:50:2f:47:5c:5c:67:04:1f:38:95:fd:e6:f2:f0:
88:9f:52:fe:ef:c1:33:f7:4a:aa:59:ff:02:c9:21:01:b2:25:
50:4c:9e:67:c7:24:f4:3f:e7:f2:4f:77:b2:a9:f3:de:14:d5:
f3:d1:b1:0d:0e:72:bc:9b:aa:35:eb:48:e0:82:bc:3c:e1:46:
55:83:59:a1:90:91:de:b2:e2:81:44:c7:5a:03:77:94:b7:5c:
4e:a9:29:a1:07:ed:1f:74:5b:0d:2c:a4:fc:e3:bd:c9:30:6e:
46:9e:67:1d:d8:05:80:e6:e6:62:62:61:6b:76:a5:b0:ed:b3:
44:13:b8:2e:c4:96:8b:ae:9d:09:5e:e8:58:77:2e:bc:16:1b:
8f:cc:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:08:30 2025 by rpki-client