Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: vFcLgWnFSuxYif6ZE7uUzSIuFgdWcLy87uv74VPeg0s=
Subject key identifier: ED:39:28:FC:C3:AC:CB:79:4B:76:B2:45:7C:64:69:EF:30:12:62:4E
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 01987A1B90DD2D36C67A49AC20EDEFA6DA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 14E3
Signing time: Tue 05 Aug 2025 12:01:23 +0000
Manifest this update: Tue 05 Aug 2025 12:01:23 +0000
Manifest next update: Wed 06 Aug 2025 12:01:23 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: PgufrC3CsCVOdkTdcUa6IL3mq1XB9pG0SoC4VHAd92s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:90:dd:2d:36:c6:7a:49:ac:20:ed:ef:a6:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Aug 5 12:01:23 2025 GMT
Not After : Aug 6 12:01:23 2025 GMT
Subject: CN=ed3928fcc3accb794b76b2457c6469ef3012624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:45:c6:77:6e:5a:11:da:00:6f:4d:b8:d6:
63:a8:b1:23:50:fb:1e:ce:e4:63:84:24:f1:75:60:
fe:68:04:85:26:de:40:9b:e6:88:de:73:e8:50:65:
35:24:3e:97:3e:f9:b6:88:9b:57:84:d6:87:f9:2b:
52:bd:c7:c9:25:af:03:8b:32:9b:9b:59:78:d8:01:
3e:35:b3:b8:78:68:c4:39:ad:66:6c:62:d8:8f:ba:
7e:11:45:5c:79:a5:dc:25:5b:1b:05:19:64:3a:0b:
11:05:b5:32:6d:db:80:65:22:d3:05:a9:e2:79:ea:
9b:f2:4c:d1:b0:df:20:9a:fb:84:79:b7:f1:c7:0c:
d6:23:6f:5b:3c:87:1d:77:86:36:87:0f:68:fc:eb:
ff:cd:13:c1:85:2f:11:ac:63:2c:3b:08:aa:cf:0e:
70:7c:a0:e1:e3:70:57:98:4b:fe:82:02:69:5f:c9:
c6:57:49:90:7b:28:21:2e:00:29:44:a9:a9:1a:9c:
af:79:c6:72:eb:e7:32:a8:7e:d1:61:03:70:69:0e:
bc:a6:41:94:68:8a:01:d5:44:27:85:53:6d:a0:a5:
ff:c5:df:68:f2:ca:5f:b3:22:d0:1d:c8:e7:8a:a0:
8c:44:74:b1:12:9f:cb:6f:90:af:a4:e3:ea:e6:d3:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:28:FC:C3:AC:CB:79:4B:76:B2:45:7C:64:69:EF:30:12:62:4E
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:78:fb:26:fc:94:ea:84:a8:b5:22:71:70:b2:18:b0:8c:e7:
a3:39:35:d8:44:da:f8:7c:45:c0:20:e8:b6:94:02:83:87:3e:
43:36:ef:7a:83:a0:de:86:11:44:a7:6b:b4:88:b6:c2:58:e9:
88:87:23:7a:4d:11:a9:38:2e:46:33:65:08:5a:35:4a:da:ab:
3d:c5:f8:84:30:8b:89:2a:6c:e3:c8:d3:84:d5:db:54:f7:ca:
5e:c1:07:fa:13:d0:88:a1:32:da:7e:4c:02:ed:2f:68:29:28:
2b:f8:61:8e:d4:36:88:60:78:3c:1c:90:1f:23:e6:cf:c4:8f:
76:cf:d4:ae:0d:57:6d:77:73:0a:1d:53:9a:7e:e5:b4:78:a1:
88:f5:38:f2:a7:e0:e4:d4:d1:9e:23:1f:ac:99:e9:c5:bb:a6:
3a:dc:b9:25:a4:15:2c:0a:ef:7b:0e:d5:5f:ba:36:76:ce:7c:
d8:84:b4:31:74:3e:9b:18:76:38:19:84:bf:64:40:63:6f:71:
65:ca:b1:7d:51:23:a4:b4:73:d0:45:ac:08:01:1e:36:2c:4a:
6b:7d:69:fc:ee:94:10:79:70:ea:15:a8:11:ff:29:0b:b3:5c:
25:7b:97:3a:28:0d:ae:6d:4b:94:44:ef:72:1d:32:ba:5e:26:
33:26:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:22 2025 by rpki-client