Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: 4tcdXLwMTj0aMaui2Yw9yQjQUNRbE4yAAN56ILH93LQ=
Subject key identifier: 9D:E9:93:4B:EB:60:31:C2:28:F2:06:E7:86:18:A3:4B:61:E9:C9:EF
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019881D55C4FDF54F053AE5FA71AE2957870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 0F3E
Signing time: Thu 07 Aug 2025 00:01:40 +0000
Manifest this update: Thu 07 Aug 2025 00:01:40 +0000
Manifest next update: Fri 08 Aug 2025 00:01:40 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: HemBPZ8Ucd94ofeBFSkV+WyRZd89E8GBxI9TC1709dU=)
2: gqHU5wrARNT7BxKe3BSk4XNORdM.roa (hash: uD22dYfbtURUQN6zPqLnmvBkI8fmrnMLZJG7fTTS2Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:5c:4f:df:54:f0:53:ae:5f:a7:1a:e2:95:78:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Aug 7 00:01:40 2025 GMT
Not After : Aug 8 00:01:40 2025 GMT
Subject: CN=9de9934beb6031c228f206e78618a34b61e9c9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:b6:db:ca:2a:23:86:0a:bc:3a:62:55:cc:
39:ae:e3:f0:fa:77:30:9d:a2:34:28:0b:c4:86:31:
88:c7:35:50:5b:1a:b1:52:e3:62:49:dc:3e:67:e5:
3a:90:53:0c:e5:e5:b6:fc:19:4e:f1:a8:c9:b7:22:
18:40:31:81:69:9f:1e:61:f3:3a:58:d2:5b:7d:8e:
76:1e:6a:d1:20:b1:86:8e:1a:b9:8b:09:b4:50:4e:
3f:d7:75:ff:f7:ec:a7:f4:fc:7b:55:12:1b:77:f3:
52:da:cf:48:8d:c0:c6:3b:35:cc:66:3b:07:2d:e3:
e2:6c:59:ab:50:d0:61:30:19:29:03:b5:a9:a0:65:
71:be:16:89:65:c2:bf:a2:f0:d1:e1:55:4a:ba:52:
5a:ae:d1:dd:76:f7:6e:1b:30:6f:49:35:02:43:3c:
c6:43:ac:23:69:ae:ff:30:01:22:8a:3a:d4:0f:a5:
67:5b:7d:ad:26:aa:95:e5:c2:37:80:59:1d:21:89:
5a:7e:42:c0:bd:22:0d:ec:53:1c:41:d3:e7:2a:e7:
62:a7:08:a1:91:63:9a:13:93:b2:03:66:fa:0b:ab:
49:4b:78:4b:99:ef:6a:0d:72:eb:50:74:40:bb:f2:
29:cc:ce:12:e9:32:76:8a:2e:1f:34:10:a4:fa:f7:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E9:93:4B:EB:60:31:C2:28:F2:06:E7:86:18:A3:4B:61:E9:C9:EF
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d1:f4:0f:7b:ea:6b:e8:37:44:5b:1b:e1:de:fe:5a:37:73:
41:45:dd:a8:40:06:fd:17:09:a7:79:6d:4e:32:09:a9:9f:8e:
45:54:47:be:8e:88:ae:dc:ea:cc:d6:1f:ee:c9:c0:ef:9b:82:
3e:d1:74:20:58:98:96:1f:2b:03:a1:20:97:ba:d0:b1:af:79:
e8:48:54:a8:63:f4:41:60:95:c5:74:69:89:fc:a4:23:13:21:
95:fa:2b:b1:12:0a:b8:a2:ef:51:27:a8:76:73:82:9b:0c:8b:
fc:17:ab:dc:c9:f1:51:e6:c9:2e:31:26:57:47:c0:f4:22:59:
2c:bd:9f:bb:36:94:b3:41:53:1e:59:b0:e5:03:45:0e:4e:6d:
1a:9e:d9:58:7d:8b:13:55:6d:af:e7:f5:4c:52:17:5d:cf:e1:
21:fb:d1:13:0d:50:2d:60:3c:e4:ba:9c:0d:b1:46:9a:c9:b8:
5e:07:2e:2f:c4:e9:e0:9b:eb:6a:ff:f5:30:c9:e1:6b:2a:21:
e3:04:4c:2c:36:c8:bd:0c:53:f6:e5:b8:19:7a:51:8c:43:d1:
92:80:93:e1:87:83:e3:b4:a5:17:ce:75:72:8f:e5:83:89:41:
6f:4e:02:aa:fb:b7:cf:dc:fd:0f:82:e4:a2:89:2e:91:0f:91:
d9:55:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:22 2025 by rpki-client