Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: 9zus+pNRY/ZiwZ0yZlW0kj1R/aLDX5dWwrv9PY9DKLM=
Subject key identifier: 5A:94:B9:DB:8E:7E:2B:5F:BC:48:AF:7A:C6:B8:53:DA:6F:4D:61:DC
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 0198A04D8C3F69E432D1F9D268A957094F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 0A53
Signing time: Tue 12 Aug 2025 22:01:33 +0000
Manifest this update: Tue 12 Aug 2025 22:01:33 +0000
Manifest next update: Wed 13 Aug 2025 22:01:33 +0000
Files and hashes: 1: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
2: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: DP9GO+Bq1C2ajs0pc/q+R7B1Dlxb77ky+DXN9cA/3qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:8c:3f:69:e4:32:d1:f9:d2:68:a9:57:09:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Aug 12 22:01:33 2025 GMT
Not After : Aug 13 22:01:33 2025 GMT
Subject: CN=5a94b9db8e7e2b5fbc48af7ac6b853da6f4d61dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:01:23:d4:70:ac:cc:64:29:ba:f0:fd:48:
c0:8b:4e:0d:cc:bc:f8:a3:50:0c:c7:0e:a8:cf:a4:
77:13:f6:92:48:89:fc:2e:4d:e8:63:20:dc:d1:92:
5a:bf:6c:a7:60:c4:ef:9d:cc:ac:0e:b6:d1:49:a7:
71:89:3f:dd:83:91:c8:f1:fe:e4:99:5b:5e:89:43:
9f:76:63:61:2d:65:28:cd:d5:02:ed:16:5d:3e:b2:
32:68:81:74:e4:0a:ea:15:8d:53:a8:90:ef:eb:0a:
94:ab:54:1b:91:63:8e:38:81:86:71:b8:eb:37:ea:
87:7f:7f:fa:c8:86:67:bf:b9:02:57:f5:d5:77:9c:
58:2b:94:81:0d:f2:52:23:18:4d:29:ac:01:b6:ea:
62:37:0c:f9:3e:eb:16:61:4c:b0:e7:d8:94:c7:b1:
be:20:bf:24:2b:c4:2c:9a:2b:35:3b:e5:1b:a2:d7:
e2:ed:85:78:6a:69:b7:ae:b7:fa:f2:f0:6b:e1:79:
48:56:e3:cc:67:99:28:36:be:5a:a7:f6:c2:33:9d:
c8:2e:9b:b2:81:6a:38:d7:4e:5c:09:e1:82:db:85:
f3:0a:b1:e1:bf:ab:5f:72:17:61:6f:b4:27:16:92:
ad:52:80:40:b7:ae:3f:9c:db:6c:d5:ab:da:68:e3:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:B9:DB:8E:7E:2B:5F:BC:48:AF:7A:C6:B8:53:DA:6F:4D:61:DC
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:22:6d:b9:45:bb:63:54:31:04:85:51:8e:91:28:ba:df:fc:
5c:2e:31:69:bd:c4:b7:b0:cc:c8:c7:67:4c:05:2e:d7:5a:54:
b5:3f:7f:f2:cd:09:7c:b1:2e:a5:30:cd:c3:02:06:74:a7:8d:
de:97:aa:64:6e:28:5e:25:ea:10:fb:2e:35:77:98:c6:0d:73:
ef:19:bc:3e:34:b5:a1:2b:e5:8f:73:da:86:d4:c7:a0:43:df:
36:3f:36:f7:bf:df:37:3f:d6:3a:e1:83:21:7c:38:85:ea:09:
d5:a1:59:a4:2f:2c:fe:3f:67:b0:5d:fa:5f:8f:0f:3b:10:88:
9d:db:01:30:48:e8:54:34:52:68:7d:bc:14:e7:61:2d:6d:4d:
35:eb:3e:00:79:1e:8b:7a:b7:2f:d2:83:e4:5d:5d:1f:6c:5e:
37:36:e2:df:72:44:94:01:a2:57:61:fa:8e:77:8d:f1:09:21:
b6:c7:f0:2e:41:cb:6f:7f:1b:11:5b:8a:89:7e:2d:24:9b:d1:
3d:03:6f:5d:d7:77:19:9e:d4:43:00:8b:71:93:67:d5:83:df:
ef:11:87:b9:1f:49:b7:b0:ba:a3:3d:53:a2:fc:48:1b:fc:33:
13:cb:5d:31:78:ff:4e:71:cc:9c:c3:be:95:b9:e3:9d:b4:2f:
35:a4:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:51 2025 by rpki-client