Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: 0Vk614y7uTqKSQjvjnOYAExopP/D7vpmurileGduReQ=
Subject key identifier: 13:DB:0A:DD:4A:71:45:17:64:36:D8:A5:E2:DD:47:B1:1A:31:F9:F0
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 0198808AE7CCC6CB5FEC3AE3F8E835AE7890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 057F
Signing time: Wed 06 Aug 2025 18:00:43 +0000
Manifest this update: Wed 06 Aug 2025 18:00:43 +0000
Manifest next update: Thu 07 Aug 2025 18:00:43 +0000
Files and hashes: 1: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: 1Jq/jEfdVz1rLo57v0XcD2qimKdkWoCXTgBdLrAiUiY=)
2: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:e7:cc:c6:cb:5f:ec:3a:e3:f8:e8:35:ae:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Aug 6 18:00:43 2025 GMT
Not After : Aug 7 18:00:43 2025 GMT
Subject: CN=13db0add4a7145176436d8a5e2dd47b11a31f9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:fe:89:5a:ae:d4:03:6b:4f:09:75:a3:53:
e4:26:06:b7:77:3b:69:2b:e5:52:25:66:94:81:69:
c7:40:d4:50:71:09:eb:82:c1:2a:da:ca:6e:bd:cb:
d1:ba:bf:ca:db:77:44:a0:f8:34:95:b5:da:25:d6:
0a:d0:78:31:66:45:d1:f6:16:f6:c9:04:bc:d4:d1:
54:25:66:e8:6d:ad:8f:b8:a6:ed:87:fd:8e:9d:cb:
60:0e:47:8c:96:ee:a9:9a:8b:42:1d:9d:36:5c:56:
8f:a8:03:2f:99:7e:70:b1:41:8d:28:17:c0:31:d2:
97:e4:57:d1:60:6a:cf:df:ee:f2:0f:59:c7:c5:58:
a2:4b:c4:ad:9f:fd:bf:16:68:82:c1:a6:c2:0d:99:
90:35:02:f3:4f:93:21:97:01:f3:98:b4:1d:f2:9c:
e6:35:01:46:8e:2c:e4:5c:b1:e1:f9:33:e5:00:6b:
9a:d6:ad:83:11:32:5c:25:1c:25:e7:78:f5:ff:3d:
c2:bf:0b:21:8b:ed:2c:85:a6:64:b5:79:53:e6:64:
5e:c0:84:43:ab:bd:2a:0f:5b:5d:4d:5e:e9:8f:3b:
73:3f:ac:07:6a:52:6e:05:b6:ef:c2:7f:5b:f6:e6:
8e:76:dd:ee:88:c5:62:e7:45:6a:dc:f7:f1:10:cd:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DB:0A:DD:4A:71:45:17:64:36:D8:A5:E2:DD:47:B1:1A:31:F9:F0
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:24:2c:a2:3d:59:9d:5b:b3:01:4d:f6:b2:d1:48:46:14:32:
e0:cc:02:7d:9f:20:fc:51:57:ea:95:a8:8e:66:e1:e2:7e:4d:
e6:da:e3:6c:b9:47:f3:f2:1f:4c:01:a9:5d:7f:84:36:bc:7b:
c7:4e:42:ce:6d:75:8d:c7:8d:d8:b8:fd:c2:84:c0:7c:52:1e:
9b:c1:72:b1:0e:a5:e6:9c:76:a8:d3:8a:4d:cd:36:4a:cb:7c:
67:7f:2b:cb:7d:77:cb:33:3e:57:84:bb:2e:41:82:9d:2d:f7:
c7:3d:8b:70:c9:c8:59:87:7a:5f:2c:33:a7:a7:65:e2:9b:0e:
c8:ee:37:e9:e2:9a:f5:25:e9:d2:ea:be:7a:81:50:03:e3:47:
bc:0f:f9:bf:d0:89:d9:1d:55:18:9d:d9:9e:1c:33:f8:f4:ea:
0a:18:04:2a:a7:5e:86:70:1c:b8:e8:db:54:a9:18:3f:3c:85:
5b:97:f4:b6:51:9f:4d:3c:7b:81:0a:db:43:84:0c:5a:20:97:
ab:36:a6:f2:ee:c2:cb:6d:d1:63:73:a4:d6:21:65:51:00:92:
02:70:c5:3f:91:08:f9:28:a8:d6:ba:3c:20:be:8d:5c:61:b9:
43:01:50:c6:5b:5f:00:cd:91:02:ec:19:96:5f:25:08:ea:61:
0a:d2:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:45 2025 by rpki-client