Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier: hXJPd3bEDjeKBjwQPujh5J0PNRM+48er0oBPtx9Xhig=
Subject key identifier: D1:DE:10:9E:61:2C:39:3E:F6:E4:3B:B7:E2:5C:FA:67:DD:4F:39:C2
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 0198D58347D541A43798062320921F78D1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number: 05F4
Signing time: Sat 23 Aug 2025 06:00:07 +0000
Manifest this update: Sat 23 Aug 2025 06:00:07 +0000
Manifest next update: Sun 24 Aug 2025 06:00:07 +0000
Files and hashes: 1: 86GrooClUl71gkQpid-FncZdZKU.roa (hash: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=)
2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: Zpv2R9PllIFG6qhCG5lonmpnV3vP7zNRgyZlvPngpj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:47:d5:41:a4:37:98:06:23:20:92:1f:78:d1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: Aug 23 06:00:07 2025 GMT
Not After : Aug 24 06:00:07 2025 GMT
Subject: CN=d1de109e612c393ef6e43bb7e25cfa67dd4f39c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:45:8b:cc:0d:18:bc:ba:81:39:bf:f7:60:
01:84:bc:a2:6a:d7:72:80:21:3e:69:18:4c:06:8a:
4e:ed:f2:04:21:6e:03:10:be:01:83:5a:09:a0:24:
76:f4:c5:03:ea:c6:26:12:6b:b6:d8:d0:09:21:60:
75:36:09:f7:fa:7a:b4:ed:34:4e:9e:0a:d3:c1:8f:
71:ad:e0:45:81:ca:4a:41:7d:c9:35:2f:63:2d:63:
29:c4:a0:56:60:58:fd:26:f3:a7:29:c9:fa:d9:61:
43:1a:95:2b:3c:94:2a:c5:58:ac:44:b9:42:e4:42:
87:f4:06:e5:08:5d:3c:a9:f9:a0:ca:2e:eb:64:fe:
c6:e3:7d:3e:f8:18:dc:89:72:c5:4c:a0:e3:cb:b7:
f1:cd:e6:0f:a7:77:12:b9:96:8a:17:2f:28:ad:e3:
70:3f:73:0b:35:7c:20:d2:e6:a0:ce:7f:03:67:3c:
24:53:83:e7:f9:ff:53:ff:c7:76:b8:85:90:02:e7:
6a:33:7e:02:d5:50:ba:e4:07:27:80:15:2e:cf:2f:
11:bd:2e:68:41:fc:46:a4:d3:b1:2e:57:37:48:ed:
5e:1b:78:ce:8e:e9:b2:3e:e3:07:c0:64:d6:9d:95:
97:c8:b6:75:66:dc:88:95:7e:b6:e6:3c:6b:72:45:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:10:9E:61:2C:39:3E:F6:E4:3B:B7:E2:5C:FA:67:DD:4F:39:C2
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:fc:24:1d:bb:1c:0b:94:72:52:58:32:f4:60:4d:89:0d:
07:69:4c:0c:45:cc:52:2c:f5:78:b5:33:cd:b1:fd:d9:48:95:
2f:34:c3:37:d4:2c:48:16:e6:cf:bd:24:c4:f8:22:0d:43:ea:
5d:0a:0f:e2:81:a5:b2:59:71:62:7a:42:25:38:d9:19:de:9c:
2a:fa:74:70:82:c1:ea:81:67:e6:cf:f8:bd:71:a3:9b:fa:c9:
23:69:8d:dc:a9:2d:09:ba:c3:f4:4d:ef:29:7f:4f:a9:ee:a4:
82:9e:75:0a:79:2e:e8:4a:b9:f2:97:94:2a:1b:61:e3:53:ab:
01:27:dc:9b:af:6e:b3:e0:61:22:fe:69:98:51:f3:cc:02:3e:
e7:b3:ca:52:46:35:dc:19:69:10:ac:53:20:69:92:57:dc:ab:
22:9f:bb:ef:b4:94:2d:48:27:cf:07:2e:78:ac:e9:f7:07:f4:
32:93:4e:8e:f6:cf:47:3c:c6:e2:1c:64:71:0c:37:8a:ee:44:
6f:b5:68:73:a3:e6:da:f6:c8:c6:cd:6a:91:11:4d:c3:29:53:
f8:21:ff:3f:e7:06:ef:2a:60:de:70:43:22:41:b1:f8:d2:16:
8a:5d:6e:1b:11:4b:3e:c2:1f:5d:92:ab:f0:fd:94:8f:ec:0b:
51:8f:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:15 2025 by rpki-client