Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: XZn8SFu3uwmROmjxPoPGyjAdyN1GT57q/Ike/8GEE0k=
Subject key identifier: 60:E1:A4:C6:64:25:46:26:36:21:CB:5A:AF:E6:B5:23:C5:3E:25:53
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 01987ABF932CDB689F7486AC2380D7219645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 15:00:31 +0000
Manifest this update: Tue 05 Aug 2025 15:00:31 +0000
Manifest next update: Wed 06 Aug 2025 15:00:31 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: B6JiQexvowXf1KS025iVuWUVNMOxwrkUBZYg+tK0s14=)
2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:93:2c:db:68:9f:74:86:ac:23:80:d7:21:96:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Aug 5 15:00:31 2025 GMT
Not After : Aug 6 15:00:31 2025 GMT
Subject: CN=60e1a4c6642546263621cb5aafe6b523c53e2553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:47:db:e5:7e:f8:72:47:6c:08:cb:1d:a3:
a5:13:53:ef:36:c3:63:21:26:d8:e0:22:6a:33:7a:
2e:4d:8b:42:dc:67:29:f8:2e:9f:c8:97:35:b7:e9:
1f:66:51:e6:32:dc:87:d8:57:22:ef:01:19:a4:fb:
7d:bc:72:7d:a2:b7:c6:a6:2a:5b:fa:41:93:92:21:
41:7d:8c:f8:06:bc:00:35:79:8a:4b:06:6a:cd:78:
1b:82:7f:07:58:28:6c:0a:82:87:1c:ad:24:58:66:
23:df:88:1f:99:1b:44:2c:34:32:e5:dd:7b:78:8c:
a2:de:d5:f7:1a:56:f6:ff:bc:12:b7:fa:63:d3:46:
36:77:0c:16:34:df:df:76:e9:26:6b:84:1f:08:52:
ad:40:a0:0a:9e:2f:82:aa:1a:c5:8c:8f:fa:90:3f:
41:7a:03:aa:c1:34:e8:9f:7b:27:41:b2:c7:51:c9:
ce:49:ae:1a:b9:5a:30:f2:4b:71:e7:03:fe:f4:e5:
60:21:86:64:c8:36:09:d1:ba:08:b7:0d:76:2d:8a:
ea:b9:d3:b3:9a:61:8b:92:52:67:ee:c8:71:23:63:
88:c4:6f:64:39:bd:8d:6d:9d:ad:ee:9a:a4:c5:5d:
9e:5e:37:14:2f:91:c6:c8:e4:3c:19:0b:3a:80:5d:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:A4:C6:64:25:46:26:36:21:CB:5A:AF:E6:B5:23:C5:3E:25:53
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:21:c1:88:19:cb:23:0b:01:0d:1c:34:eb:be:77:b8:8d:eb:
76:3d:d1:ab:4c:ec:a3:97:fa:c3:4e:c8:de:ca:57:62:f3:60:
63:e0:49:e5:82:b2:b0:fb:9e:f3:05:3b:bd:e9:02:2f:a8:37:
ec:bb:9d:75:38:26:d5:c7:44:4a:46:0e:6d:13:c8:a7:3d:d6:
64:98:a4:10:a1:b1:16:d5:e1:6b:ca:38:e5:a5:2d:81:03:75:
2d:84:12:2f:80:83:8c:41:d0:59:03:b0:58:f0:3e:6f:9f:73:
94:6d:9e:32:9d:03:cd:71:19:65:54:38:1a:15:b0:fc:08:cc:
a1:18:2d:b7:c0:4a:69:94:e5:1a:fc:d5:37:8b:97:b5:e6:8e:
7e:98:93:e1:a9:b2:97:4f:43:56:22:aa:29:2e:5b:cf:73:1e:
e8:8c:9d:65:ec:6c:10:9b:2c:ce:41:22:07:c5:07:df:4a:23:
d9:94:fc:e9:08:76:da:f4:fb:03:27:72:c0:4f:7d:a6:04:48:
da:01:e7:cb:fd:e2:ef:59:dd:92:c4:11:ae:10:8a:b2:5f:6f:
fe:15:c7:cb:1c:da:35:29:34:3b:29:bb:40:90:f4:3a:5b:db:
95:d7:55:69:e0:7b:da:73:96:4c:46:31:f6:ae:6c:1c:bd:f6:
44:e7:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:55 2025 by rpki-client