Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File: YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier: Me27cw7TfbmZ/0kT4v2ll2aLH4cPcB6bBoxk4MSwmf8=
Subject key identifier: 4B:4F:43:48:03:45:AC:B2:08:5A:87:61:78:8D:CD:A3:86:C5:42:87
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer: /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial: 01989F39FC0B82A0A0061E26EF6CD25A7349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number: 0892
Signing time: Tue 12 Aug 2025 17:00:34 +0000
Manifest this update: Tue 12 Aug 2025 17:00:34 +0000
Manifest next update: Wed 13 Aug 2025 17:00:34 +0000
Files and hashes: 1: TRV1zvMwN77u4mbYXqSf5mMtgyk.roa (hash: AGCpSC7dzCZj1/xhxXIQK1OjIYEOjpJ4XzT4WLt1kl0=)
2: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: aqmt6UiYkNHJbyWqXVyHH7mIFm2hb2e71repoW1v568=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:39:fc:0b:82:a0:a0:06:1e:26:ef:6c:d2:5a:73:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
Validity
Not Before: Aug 12 17:00:34 2025 GMT
Not After : Aug 13 17:00:34 2025 GMT
Subject: CN=4b4f43480345acb2085a8761788dcda386c54287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:3f:2b:62:f0:c9:cd:40:d9:4f:88:f9:43:
66:5a:83:66:2e:61:7f:43:dc:fd:0a:68:ad:cb:de:
3b:cd:e6:7d:44:09:c8:c5:f4:08:0a:ca:58:9d:dc:
d8:2a:6f:38:b2:cf:a9:77:02:3d:c9:cd:e2:2d:eb:
95:e5:0f:41:ee:32:3f:44:d7:8e:71:a7:12:dc:a2:
3a:2d:9d:8e:ce:d2:1b:2c:a9:85:16:0e:0b:b6:74:
9d:f7:74:12:49:b8:8b:b2:01:df:11:6b:e7:b9:0c:
fc:59:c9:cf:d5:a2:e0:c6:d4:45:b8:34:98:57:82:
d2:e4:00:33:0e:8c:67:9f:28:c9:45:0c:cb:20:17:
67:75:ba:d1:63:0c:3c:1a:39:a3:35:16:10:61:db:
02:77:6f:37:0c:13:ae:3a:13:97:0d:d0:f9:ce:84:
2f:73:d8:18:6b:02:08:8e:82:65:8a:da:af:40:2a:
97:89:57:25:0e:56:d4:10:67:f6:89:36:a1:a7:16:
cc:28:56:b6:d2:81:1c:58:f0:c5:c9:e4:5e:8d:e4:
32:15:b9:c4:27:38:4a:ed:ef:68:f1:79:18:33:fc:
3b:74:65:6f:7a:12:3c:e1:ca:2c:47:fa:df:41:0a:
97:e1:ec:e1:e9:b0:a4:9a:95:83:80:41:99:c2:6f:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:43:48:03:45:AC:B2:08:5A:87:61:78:8D:CD:A3:86:C5:42:87
X509v3 Authority Key Identifier:
keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bb:28:2a:d3:c7:7b:ef:a8:20:56:79:e9:b8:dd:9c:ba:b6:
d5:b9:44:68:04:4e:cb:f7:bf:e6:14:c5:46:75:ff:b6:d2:c2:
ed:db:07:35:c3:9c:3c:ac:53:c7:9e:c7:f1:6b:9b:be:a8:19:
41:26:31:06:97:9c:14:1b:7c:d1:55:28:13:e5:99:18:89:fd:
93:ca:dd:60:3a:2d:b1:34:14:6d:74:96:9c:4b:88:95:1e:68:
d4:75:39:24:f6:98:5d:80:eb:88:c6:dc:0a:bb:39:06:a9:87:
0c:f4:ce:bd:85:a7:9e:86:ed:2b:e7:1c:14:60:4d:97:27:dc:
a0:ad:b0:f8:03:9a:6e:77:a4:03:36:6b:34:d8:87:df:63:90:
de:38:99:b7:00:d4:0a:ff:d2:88:02:f7:75:57:94:07:e7:7b:
89:af:27:1b:94:cd:d8:ec:52:ae:ff:86:39:10:4d:ce:6d:2f:
dd:66:15:40:fe:39:5f:e3:53:65:6d:7b:87:10:31:32:15:a7:
07:da:ff:02:0d:04:5b:50:2a:d7:1d:4c:5f:4d:80:37:7e:9e:
82:f6:b6:63:7f:0d:ad:b8:91:00:f4:e5:dc:79:b6:73:82:b6:
e0:6b:05:7e:52:f4:dd:9c:5b:c6:08:e3:80:32:a7:09:c7:50:
bb:a9:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:58 2025 by rpki-client