Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: fJtPoxP36d+xLNssWP5smAtkdRYM5teKcPVM2o/4AxE=
Subject key identifier: 59:E1:54:E6:C3:6C:BE:A6:78:F5:85:CE:78:45:75:CD:DC:4D:27:2B
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 019889200610E56B76BE3DD0E3F44C4CF0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 1216
Signing time: Fri 08 Aug 2025 10:00:34 +0000
Manifest this update: Fri 08 Aug 2025 10:00:34 +0000
Manifest next update: Sat 09 Aug 2025 10:00:34 +0000
Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: pzN4nrm2S94DyA88YFtAlk81CvRA/ETxVI4tK4c1WD8=)
4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:06:10:e5:6b:76:be:3d:d0:e3:f4:4c:4c:f0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Aug 8 10:00:34 2025 GMT
Not After : Aug 9 10:00:34 2025 GMT
Subject: CN=59e154e6c36cbea678f585ce784575cddc4d272b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:ed:10:21:d8:9f:62:57:3a:7d:ef:91:7e:
aa:5a:c5:fc:07:32:b5:cb:6c:51:c5:e8:60:1f:a0:
12:c2:53:b6:a6:31:4e:e9:c1:ed:df:a8:72:2b:f9:
70:db:b0:7c:d9:dc:7a:5e:b8:f0:9b:aa:4c:84:78:
bc:a5:1b:23:90:ae:a0:fc:81:df:eb:7b:cd:fd:8c:
d5:6e:72:b3:de:49:28:fc:a9:8d:98:ab:53:33:41:
56:2d:d2:22:f1:bc:1a:35:ad:8f:3a:ec:98:e7:24:
0a:9f:f6:ae:8c:52:90:16:ed:27:d5:10:21:d1:01:
90:7d:6f:7d:f1:29:b5:0b:a5:f2:33:aa:6c:7d:2b:
d0:6d:bf:b6:12:11:4e:87:53:7a:92:c6:f7:af:3f:
02:8d:cd:87:96:50:4a:a3:cf:14:15:9e:fb:43:80:
63:50:bc:31:f7:72:e5:39:be:26:b6:4a:ba:4e:9b:
8b:14:f1:3d:e9:b4:86:25:d3:2b:a0:ae:73:0b:e3:
19:fb:3f:5b:d7:f4:9d:7c:95:5f:90:96:0e:97:ad:
b4:69:8b:f6:35:6c:5c:32:20:95:31:fd:5e:78:98:
61:fd:0f:8b:19:78:8e:7b:f1:4c:55:5c:50:7a:85:
8d:72:71:3e:12:62:26:9a:20:a6:93:18:d5:2d:17:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:54:E6:C3:6C:BE:A6:78:F5:85:CE:78:45:75:CD:DC:4D:27:2B
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a4:15:fa:13:20:d5:2a:2d:19:05:95:71:86:5a:14:e7:5c:
50:0a:d0:cd:09:ab:91:d7:9a:0d:f0:94:71:b4:99:4c:88:2b:
6e:94:95:ac:75:7f:16:7c:0c:65:16:8e:8f:c5:fc:b5:0a:ca:
9d:c2:ec:4b:31:ee:67:7a:da:48:5b:c8:35:88:80:b6:24:02:
6a:fb:6d:b1:0b:94:50:3e:5a:0f:fe:e1:3b:3f:60:79:1e:f1:
bd:a9:60:4a:39:48:a3:1c:96:97:0a:96:ef:e5:3b:85:b2:c5:
f0:50:72:2e:73:f2:af:66:b5:26:a9:57:22:2f:3c:c6:db:70:
c2:fd:02:b7:e4:c1:a2:4b:1e:0f:4b:cd:40:f8:91:ff:c2:51:
c8:5e:3a:63:8d:f7:f3:1d:40:61:c6:90:65:63:ca:56:3c:0e:
21:ee:d8:8e:5e:7f:76:68:5b:57:30:38:e7:41:e0:1d:42:c8:
d1:58:06:94:59:36:34:01:e9:46:53:18:02:35:e7:0c:c1:fc:
0c:8f:43:eb:a0:16:b1:44:97:f7:50:b1:8c:07:a1:fe:73:e8:
44:81:d0:9f:1e:e9:5f:16:5f:5f:53:27:53:d5:a3:9c:46:d2:
d9:eb:33:33:38:c4:65:92:be:6f:70:bb:a3:ce:4d:55:95:94:
80:f0:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:33:03 2025 by rpki-client