Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: 1YYU0G0iV9aNebmLWIxlnLWQilzmvkyCXXkZzx3rMAg=
Subject key identifier: 92:16:93:52:85:97:06:BA:83:8B:98:D2:86:1A:8D:33:B0:4D:86:88
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 01988B0EE212A0EC2E877F5D05872281AD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0AAE
Signing time: Fri 08 Aug 2025 19:01:04 +0000
Manifest this update: Fri 08 Aug 2025 19:01:04 +0000
Manifest next update: Sat 09 Aug 2025 19:01:04 +0000
Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: aZAQzZOdmqpcOekDE0D/Fy4rysEu9h1wynQFRnEWgeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:e2:12:a0:ec:2e:87:7f:5d:05:87:22:81:ad:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Aug 8 19:01:04 2025 GMT
Not After : Aug 9 19:01:04 2025 GMT
Subject: CN=92169352859706ba838b98d2861a8d33b04d8688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:84:c9:7a:dc:15:2e:08:bc:36:f0:26:a6:
c7:09:e0:cb:30:c7:4f:ab:56:28:57:0b:52:64:17:
c5:fc:c8:da:89:6a:fb:37:0b:04:d7:09:6d:db:94:
25:26:50:80:33:3f:bc:4e:47:32:0d:fa:0f:82:0b:
be:8f:ba:35:70:be:31:b7:16:72:4e:e3:f3:f0:df:
b7:a2:79:dc:70:4a:7e:b3:b4:ff:b4:72:4c:c2:d5:
c9:d8:27:3b:91:9f:71:c3:1f:3d:30:30:92:43:16:
8c:d0:3f:76:7f:7c:73:61:8c:33:34:86:4e:6d:64:
a4:c4:57:f4:aa:b3:0f:88:30:9b:74:75:3e:64:2a:
1e:3c:26:33:8c:af:af:4b:26:4d:97:09:5b:65:ad:
15:af:d4:7f:6e:69:4b:e0:4d:e2:ab:89:e6:dd:1f:
8c:a4:be:a6:d1:5a:ca:a1:56:e2:38:45:c3:d6:b6:
8c:51:24:85:da:0c:74:dc:46:29:f4:f3:f6:fa:88:
cb:d6:08:3b:d0:3d:6a:a3:2e:b9:79:49:2b:ec:6d:
22:75:c6:0a:47:4a:e3:6f:61:bb:65:93:09:8d:ab:
db:09:bd:6d:b0:c6:eb:5c:4d:2b:b4:c6:14:5b:aa:
8e:f9:88:82:06:be:a5:ff:37:fa:91:28:d3:1f:b2:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:93:52:85:97:06:BA:83:8B:98:D2:86:1A:8D:33:B0:4D:86:88
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:58:71:24:c6:1b:8a:7c:16:aa:54:68:4f:9a:0b:ea:ee:05:
15:f7:73:b3:16:c5:68:5c:9f:1d:80:a7:e5:16:16:5a:f8:cb:
d0:9a:71:62:dd:45:ea:92:35:f9:c7:e5:69:fd:54:bd:a8:13:
4d:15:b4:1f:9f:20:f5:3d:a5:73:5b:86:ab:c7:2d:69:b0:50:
a4:b6:f5:40:53:58:7f:92:d4:01:7c:3c:20:7a:d1:1d:37:4c:
9f:be:c1:11:5b:cd:51:ee:3f:12:26:df:f7:c7:d3:49:0f:62:
90:83:f9:2b:17:d0:3c:c9:21:61:f8:d8:1f:20:f6:15:e5:95:
a1:1b:dd:a9:c6:43:b0:ce:53:de:67:b2:9a:cc:39:b8:b5:0f:
1e:43:66:ed:65:78:9c:7e:b9:bf:b6:aa:d6:03:c8:39:35:0b:
2f:21:f9:ec:33:db:f1:6b:ae:70:9d:b2:0e:83:b0:82:f5:0d:
c3:92:20:1f:55:a3:f5:6c:7f:f7:6c:94:85:64:a5:d1:62:8a:
b0:cd:8a:5f:7c:c7:91:e2:8b:20:b6:c1:3a:4d:97:5b:f1:1e:
bf:23:a9:43:56:7e:9b:6b:1c:a9:17:b5:1e:2a:54:86:8a:d6:
95:dc:eb:0e:c8:26:91:99:15:c9:a7:8f:09:2e:ae:ea:74:c3:
99:bc:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:00 2025 by rpki-client