Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: mzPfqDl5NrjaVl4DlpoMhmhtYNGJOXg6vh+ZPJonUYk=
Subject key identifier: EA:A2:8A:60:B3:5A:A5:76:B5:41:2E:7E:B3:88:DC:89:B3:95:41:94
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019874F51F22D24853142529793AED8F0CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 056B
Signing time: Mon 04 Aug 2025 12:01:17 +0000
Manifest this update: Mon 04 Aug 2025 12:01:17 +0000
Manifest next update: Tue 05 Aug 2025 12:01:17 +0000
Files and hashes: 1: BWZ8TffzeheUILd5O5vwxA8ANgs.roa (hash: 9mVvCij2ArMXMv49a46m8ltBnU+gbtg05+eZlvNEdYk=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: jmnkr02Fp7kglJB3A04HvpmhChLqpvimhKG/gyfgAQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:1f:22:d2:48:53:14:25:29:79:3a:ed:8f:0c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Aug 4 12:01:17 2025 GMT
Not After : Aug 5 12:01:17 2025 GMT
Subject: CN=eaa28a60b35aa576b5412e7eb388dc89b3954194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:03:b5:d0:fd:80:1e:89:ba:b8:ba:5a:61:
a0:c6:13:5b:32:65:81:41:93:ee:ec:fa:00:41:23:
6e:1b:fe:8e:73:2b:51:83:64:47:5e:cb:f7:8a:e8:
1e:e8:ac:8d:d6:6f:8c:a3:cb:39:07:af:b6:a7:6b:
2c:8c:8c:60:88:77:05:e4:50:a5:67:f3:ad:b2:5c:
29:7d:a4:c1:90:0d:ac:34:9e:ef:5f:bf:93:d5:9e:
ee:17:13:2f:e9:06:8d:72:3a:aa:0b:45:e7:9d:4f:
5f:b7:64:24:f5:03:ed:1e:b1:7c:ab:80:e5:0a:a9:
8f:de:1c:4c:80:d2:d6:9c:44:59:0b:12:e4:49:37:
bd:50:43:3f:8d:94:ed:87:b4:74:00:09:4b:b8:e8:
37:81:1c:f6:94:f6:76:69:f7:af:31:9b:5b:f4:7f:
5f:83:be:50:d2:d6:0c:c0:bc:b1:11:ec:02:e5:4e:
a6:fc:ac:f0:e0:86:74:d2:26:56:00:f5:6c:85:6a:
28:2f:13:fc:0a:d4:46:1d:ee:26:dc:fd:92:c5:af:
e6:4a:72:a6:9d:38:ef:e5:35:27:16:bb:37:a0:77:
37:65:98:77:e7:86:7d:7a:12:1e:99:27:ab:da:95:
1a:d9:4b:e4:1a:1c:ad:cd:14:72:56:7b:4a:23:d2:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:8A:60:B3:5A:A5:76:B5:41:2E:7E:B3:88:DC:89:B3:95:41:94
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c2:cb:0e:b7:15:9c:ae:6b:67:5f:4e:50:ef:4b:5a:db:ca:
4e:4c:b0:a4:fa:e9:15:81:5b:c9:fb:7a:6c:40:26:e2:61:61:
1d:20:2e:15:76:dd:a0:99:52:9c:73:32:ab:6c:43:84:1b:8b:
47:97:58:84:e0:30:26:8c:38:51:54:4c:44:47:ed:d1:b1:9f:
e9:cb:9e:26:b1:ca:14:ae:7d:3b:45:f3:d3:25:75:c7:61:5b:
72:b7:55:ce:1f:c7:ef:18:46:ab:52:06:e8:65:e4:10:dd:0e:
e4:bc:fb:8d:35:b6:a8:e9:b7:a5:57:e6:ac:f1:48:a9:98:67:
f3:1b:4f:33:03:03:01:9f:a8:12:be:9e:a5:bf:e7:a5:19:ee:
cc:1e:0a:72:ca:be:0a:cc:3c:bc:29:e1:c8:d7:93:c8:bc:da:
2a:e9:04:fc:31:6d:85:ca:19:0a:87:d4:12:44:02:b2:56:2b:
1c:e5:9e:63:6d:c6:99:f5:15:67:74:c8:dd:7e:00:29:d4:fc:
d7:dc:2d:2f:f4:da:db:82:1e:b6:ea:c6:66:10:8c:8d:55:74:
24:74:de:d1:d1:06:4d:32:84:ca:64:1e:1a:a5:5c:20:e2:58:
05:01:03:da:d6:31:13:c9:77:b8:bd:c1:61:e5:cc:cd:3b:37:
ac:30:73:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:33 2025 by rpki-client