Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: n/+3mVZ0a4ctAj4Op0iPlPPXzDABsau+xXMop8b0iac=
Subject key identifier: 86:34:74:41:1C:95:97:BA:8A:92:53:CF:0D:FE:9B:48:F3:3F:80:5D
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 0198D73B0F906A098CE56C410A10A8A0645E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0C2C
Signing time: Sat 23 Aug 2025 14:00:28 +0000
Manifest this update: Sat 23 Aug 2025 14:00:28 +0000
Manifest next update: Sun 24 Aug 2025 14:00:28 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: 91NIIMVxOTxnqoBiNHhrFYZ/kQTrFQdSLFGvo6/KIZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:0f:90:6a:09:8c:e5:6c:41:0a:10:a8:a0:64:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Aug 23 14:00:28 2025 GMT
Not After : Aug 24 14:00:28 2025 GMT
Subject: CN=863474411c9597ba8a9253cf0dfe9b48f33f805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:69:8f:ba:37:09:fd:de:b5:20:7b:55:4d:
d2:a7:bf:5d:1e:b3:66:c9:32:35:97:18:19:d6:f8:
ee:f3:cb:78:50:c1:d2:ae:36:12:1f:c3:90:ca:c5:
69:46:0d:d1:6a:d4:99:84:d7:3b:6a:10:82:25:36:
30:43:2b:38:5b:b9:20:e8:51:7a:dd:9e:ea:80:d2:
c5:96:d9:b0:20:ca:bc:38:54:7f:cd:93:bb:82:f1:
48:08:04:ab:ab:f3:6f:86:95:71:46:88:86:d8:a9:
37:a6:a2:9a:b9:fc:e6:e7:00:88:27:38:ab:fa:d0:
a9:16:45:25:8d:6d:54:8d:70:7d:ed:0d:49:fa:b5:
ef:20:42:a4:09:5e:19:03:1d:26:5c:50:35:58:e7:
54:f4:24:de:d9:29:88:04:5a:d9:86:4c:d5:eb:53:
15:c2:e1:7e:ed:9f:b1:c3:d5:84:2b:d4:0c:e1:a3:
28:c8:24:7d:79:66:62:4e:d9:c8:40:67:e2:93:d5:
b8:3c:a5:08:50:75:e1:d1:ba:bb:21:d7:b0:2f:c8:
cb:7a:e1:9e:97:a7:97:e2:02:16:a5:be:dc:9b:a2:
67:21:72:e6:cd:fa:fb:cf:2e:e0:e1:57:46:da:83:
f1:cb:0c:0b:37:74:71:e8:01:f4:e6:eb:a7:75:2d:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:74:41:1C:95:97:BA:8A:92:53:CF:0D:FE:9B:48:F3:3F:80:5D
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:85:11:4d:d2:b6:89:a2:e3:6e:62:b4:a2:24:7b:2c:91:c1:
6b:15:65:1e:88:22:d4:9e:64:47:96:e2:ac:c2:31:e2:15:8f:
d1:b4:22:62:7e:36:22:25:e9:e8:b2:b2:b5:9a:15:ee:a1:04:
c5:72:1d:4e:db:bb:fb:36:46:cf:8b:71:ad:c7:eb:1a:75:d6:
56:9b:63:43:4a:77:9b:ed:a8:c4:64:93:38:4b:78:5c:91:1c:
83:6d:13:99:53:33:2e:36:04:1c:92:7f:0c:57:52:0a:ca:bc:
04:4e:3b:20:10:f3:c2:c4:ce:73:79:84:e0:5b:d7:fd:31:3f:
c7:79:76:53:1f:48:dd:84:5d:de:17:af:6f:cf:61:e3:f7:ff:
3f:84:17:74:cb:f7:a9:d3:60:01:11:fa:41:17:3f:9a:cc:07:
04:71:cf:6a:15:09:d4:bd:cd:7f:cb:b5:30:2d:b6:c0:6a:ae:
8b:86:bb:79:c0:12:c3:a0:92:a7:6e:bf:f5:0a:3d:0e:9c:2a:
d9:70:0b:7c:56:01:14:a9:6d:d2:f1:ce:61:b6:dc:7d:4d:8b:
5a:1d:65:ec:5b:aa:36:5c:52:a7:49:e6:98:00:9e:0d:32:d4:
3d:60:7e:80:d3:b9:75:06:de:3c:51:11:29:b8:af:5c:b3:2f:
a1:15:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:13 2025 by rpki-client