Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: DUtmVU36dJIBYGhQhxyO43E+eftcXoIWAX7BYYTyvCk=
Subject key identifier: 26:56:49:F9:19:2C:0B:11:E2:17:5A:65:75:BE:A3:24:B5:70:5A:4A
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 0198D5165E05F490E180FFD862F31301E1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:01:09 +0000
Manifest this update: Sat 23 Aug 2025 04:01:09 +0000
Manifest next update: Sun 24 Aug 2025 04:01:09 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: 3aOYOCcK6lHngiUc2nhlb3jC52VgREX8j4g6jw3yYF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:5e:05:f4:90:e1:80:ff:d8:62:f3:13:01:e1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Aug 23 04:01:09 2025 GMT
Not After : Aug 24 04:01:09 2025 GMT
Subject: CN=265649f9192c0b11e2175a6575bea324b5705a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:de:d0:bf:40:2c:7f:11:5c:64:7e:84:42:
c0:69:12:94:9e:ed:f1:84:74:16:19:30:2b:c9:2d:
fe:52:f8:4f:59:40:4c:51:cc:3b:0f:23:7f:7c:fd:
f8:2c:ef:40:7d:9a:fc:a0:d5:3e:50:03:20:92:c3:
7f:60:4c:b7:48:28:8e:70:94:58:fe:35:e2:37:69:
ad:a2:c8:60:e6:c9:a9:1b:f7:f3:28:3e:31:b7:bf:
f9:07:34:35:b7:cb:29:39:4d:bf:a7:27:ef:b1:f2:
8b:72:f7:b7:27:85:d7:d1:2b:2a:73:13:27:fc:3e:
c9:7a:b1:74:a2:1e:d9:81:f6:5c:e1:eb:33:87:8d:
c9:e9:88:cd:92:36:20:33:24:57:91:ee:95:e5:bb:
71:8f:8b:a1:fe:e2:c0:a1:aa:95:71:29:7a:58:26:
8b:50:0f:35:b5:9d:cf:29:d8:92:1c:5f:80:4e:4f:
a2:f4:b3:2a:01:7c:80:d0:c5:ba:1c:11:30:5d:5a:
5d:e9:4f:57:0e:5f:59:10:6a:b7:e9:0f:ed:36:9f:
ad:6b:3c:8f:68:e4:1e:7f:f5:cc:9d:f2:de:48:22:
1c:c4:55:db:a2:df:73:00:e0:11:97:a4:41:70:1f:
dc:02:11:3d:22:9a:5b:23:06:a6:1c:f6:a0:ee:5a:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:49:F9:19:2C:0B:11:E2:17:5A:65:75:BE:A3:24:B5:70:5A:4A
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c4:10:ee:0c:f9:d1:32:2c:50:e1:ac:62:cb:27:e6:07:e7:
04:1c:fd:e3:22:5e:78:87:cc:fc:a5:6d:bf:47:58:4a:3f:7d:
03:d2:9b:7f:e9:f2:6a:4b:f3:40:07:b6:70:21:db:0b:31:36:
cf:df:76:8d:7d:a9:c6:a4:14:e6:04:41:2a:d1:ca:72:fe:4c:
c0:f5:9d:9e:65:4e:0b:9a:be:dc:5f:79:b2:8d:68:7b:4a:f5:
4b:26:e4:23:36:37:dc:74:25:10:d7:b9:e2:05:0f:22:2f:fa:
4b:7f:86:52:3a:aa:48:85:a1:c8:68:04:48:6b:66:5f:9c:fb:
5f:08:b0:ba:b0:e1:fc:ee:62:19:77:de:d9:f9:18:1e:6e:ce:
a8:c9:9d:63:27:13:40:6f:c8:47:f8:ef:10:0f:ce:a4:d1:cc:
0b:40:8d:53:e0:50:90:8d:7e:b2:40:9b:39:62:ce:39:07:a4:
8c:05:23:e2:a8:98:89:4b:6b:27:eb:85:c4:7e:72:ff:53:f8:
86:59:d9:0e:65:84:fe:74:25:c6:d3:4b:01:49:4d:c0:6e:f6:
c5:c4:27:64:b5:4e:61:55:11:6a:31:1c:5d:83:cd:21:74:7f:
19:46:59:a2:e4:fb:cf:ef:e3:3b:96:8b:89:59:0a:4c:38:9e:
1d:ac:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:07 2025 by rpki-client