Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier: skmNy2q+mMzkMqpc6DbS7YgFOCiYvqmRb5tUQCN/Blg=
Subject key identifier: 86:16:98:39:FE:C8:2E:F2:90:14:4D:38:C5:2C:4C:68:DD:D1:99:80
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 0198857A69CF48BA54B2D39A72547D1A3251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number: 0105
Signing time: Thu 07 Aug 2025 17:00:48 +0000
Manifest this update: Thu 07 Aug 2025 17:00:48 +0000
Manifest next update: Fri 08 Aug 2025 17:00:48 +0000
Files and hashes: 1: WJ8mDGp2R9SerzYw88vehn3HSik.roa (hash: h5SXKLsi4QXI6eIjbslnIuS0eoxKGY5pZRrkhG82mKM=)
2: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: u2BobJdOX+8eHJXrv3Dp1snt08fr1/30SfUp+e9wDhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:69:cf:48:ba:54:b2:d3:9a:72:54:7d:1a:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: Aug 7 17:00:48 2025 GMT
Not After : Aug 8 17:00:48 2025 GMT
Subject: CN=86169839fec82ef290144d38c52c4c68ddd19980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:ac:18:a8:db:26:87:1a:2d:d6:51:74:28:
78:1e:dc:2f:8b:c2:59:52:48:81:ae:d4:6e:4d:74:
05:83:f1:51:82:c6:3e:52:99:4e:ad:5e:9a:fb:1e:
30:9c:88:9e:4f:d0:97:79:9e:92:b3:17:5b:f1:93:
81:83:b4:ad:0d:cb:03:9f:96:fd:96:f7:50:af:21:
d1:58:e8:44:05:02:8b:0d:7c:bd:d1:4b:f2:d7:eb:
db:55:a1:26:21:4f:75:72:96:b1:ae:4e:2d:b1:12:
70:bc:f0:bd:6b:77:8c:ec:22:2c:50:58:30:a0:15:
af:42:a9:b3:45:68:49:63:08:2f:8a:53:f3:5f:36:
da:f2:22:5b:1b:2a:8e:d7:43:aa:78:49:48:f2:aa:
b5:a7:72:82:52:20:61:0c:01:34:00:20:2c:36:ab:
bd:78:aa:d3:0e:9d:0c:0a:86:7e:9f:9b:95:ef:7a:
b5:fb:2c:16:b3:b6:d6:81:94:8a:07:1e:e6:93:28:
77:86:85:f3:e4:3e:26:ca:61:79:dd:5a:10:74:73:
90:fc:e8:3e:10:0f:8f:10:d2:78:73:8f:7e:1e:0e:
5f:4a:26:5e:5d:f0:2a:61:7e:c8:57:61:32:d6:da:
cf:c2:cb:e8:55:43:6e:0c:77:d3:7e:71:53:93:b2:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:16:98:39:FE:C8:2E:F2:90:14:4D:38:C5:2C:4C:68:DD:D1:99:80
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1e:0c:28:0c:eb:4a:23:e1:a3:5c:82:03:f3:a9:e6:f7:7c:
93:ed:dc:e3:b1:c7:f7:c9:5f:e4:0f:f6:97:a3:c4:1a:80:8d:
4a:9c:0c:75:8e:cb:b5:0e:da:1f:a2:db:f5:9d:d0:60:43:fb:
5d:17:68:28:3b:c1:7f:28:7c:76:7c:b8:e8:b3:5a:5a:a2:e6:
f7:e0:17:8a:6a:c1:16:98:5a:b9:40:ec:85:84:12:2f:6f:2d:
47:71:23:f4:8b:39:8d:5a:8c:a4:05:22:d0:c8:34:0a:76:09:
97:3a:c0:a5:df:44:2d:4d:17:99:ce:91:2e:50:e5:d3:a3:b5:
31:38:0c:4c:47:72:1f:a1:03:1e:02:79:f3:63:09:b9:65:a4:
73:3f:86:c3:d8:27:d7:eb:dc:0a:88:74:87:95:de:4c:ae:1e:
11:5f:94:af:8f:5b:24:48:6c:f7:fe:41:8d:c8:a4:34:c4:0a:
86:90:ff:21:18:24:b6:6e:89:3b:62:b0:14:0f:54:47:61:d7:
ca:cc:7c:49:2c:15:61:26:53:8e:ef:3e:d0:75:4f:46:83:f9:
b8:ce:c8:8a:85:1e:50:5d:0d:4c:78:77:2f:70:e1:7f:19:7a:
ef:36:f0:87:31:6f:60:69:06:90:1f:ba:b4:9c:a9:1e:8d:de:
a9:42:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:00 2025 by rpki-client