Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: wAYp1E/CT73nYnPZ98lTloYHgW5ZOhYBUoXS0QEhFs8=
Subject key identifier: BE:F7:1C:53:9B:AA:FB:13:31:62:E3:E6:77:89:DE:D4:83:2E:52:DB
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 0198D8500FC521F7915D5C7E05D698032E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 19:03:02 +0000
Manifest this update: Sat 23 Aug 2025 19:03:02 +0000
Manifest next update: Sun 24 Aug 2025 19:03:02 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: U4+k0R9xk8orWPJeg3M7MRawxs4XkEbT6rCi14IHOok=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:0f:c5:21:f7:91:5d:5c:7e:05:d6:98:03:2e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Aug 23 19:03:02 2025 GMT
Not After : Aug 24 19:03:02 2025 GMT
Subject: CN=bef71c539baafb133162e3e67789ded4832e52db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:46:b8:0d:85:33:bd:fa:2d:7d:af:2c:71:
fd:ef:0c:0a:df:5c:c1:78:87:b7:67:ea:e1:88:c2:
5a:0a:2a:b5:15:3b:cf:79:0f:12:ec:2f:c5:83:62:
c1:b4:ed:6a:4d:53:db:db:cc:d9:24:76:8a:3e:e0:
42:a2:05:2b:5f:05:63:34:a1:25:cc:4c:65:31:ec:
86:ab:3b:75:94:66:cd:b5:13:37:17:92:8b:cb:b9:
48:fc:0a:54:ce:b6:bd:5b:45:b6:60:fe:8c:25:91:
63:4a:fa:3b:4d:03:f2:7f:87:a0:2b:1b:51:fd:02:
19:27:e3:94:ed:f9:8c:9a:ce:e8:16:48:13:54:f5:
3c:90:3f:15:f9:3d:1f:50:a6:b6:38:f6:98:a8:d3:
cb:9b:f2:b4:f0:89:3e:c9:74:b1:d2:17:f2:2a:2e:
f4:03:e2:60:04:5a:93:3e:89:4b:e9:dc:01:b1:ba:
e6:d0:7c:af:00:4b:37:b2:1c:fb:58:7d:37:ab:9b:
32:f2:9a:35:29:c4:0f:83:1a:a3:a6:99:8c:85:41:
59:a3:01:db:41:7a:e1:34:9c:64:61:28:da:ba:3c:
68:f3:8d:19:3a:75:23:b4:5b:4a:68:4a:dc:be:b6:
4c:2b:65:27:60:cf:8e:f7:f8:9e:d7:17:93:fd:0f:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:1C:53:9B:AA:FB:13:31:62:E3:E6:77:89:DE:D4:83:2E:52:DB
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:39:e3:87:e7:50:ac:95:b1:61:cf:02:75:ec:04:3e:6f:12:
d6:8d:69:8d:82:85:ba:f8:de:cc:c0:62:e2:15:d3:8d:3a:10:
d6:ba:71:97:84:79:a2:4a:77:47:2d:0b:a3:6b:59:c6:b4:24:
e6:cf:27:cf:24:f0:a0:ba:32:ab:10:aa:d1:00:b8:6a:94:76:
23:55:1f:23:1b:4d:d0:c6:04:c8:b4:eb:bd:fc:f7:8f:2b:48:
39:f4:91:c7:94:47:f1:49:27:12:62:0d:98:7f:a1:80:0d:8e:
5f:4b:07:a0:ee:ef:d1:d6:2a:66:b6:1d:7a:48:72:22:b5:b8:
58:fa:5e:6e:ff:f3:79:e1:ef:35:ab:a2:25:5e:4d:0d:c8:04:
95:cb:64:be:71:be:e3:11:e7:06:06:30:e6:8f:b0:31:4c:50:
cf:41:2e:ef:48:a2:37:4d:a5:c6:31:a5:07:06:e3:b0:22:8c:
62:1a:87:ce:0b:2b:91:2f:9f:19:1d:c5:48:0f:49:95:f6:8e:
f8:27:c1:5b:b9:14:91:8a:16:19:ee:cb:69:b6:36:e1:32:13:
66:90:0d:05:86:03:4a:3c:eb:ff:ad:05:ad:7d:11:16:c9:e4:
07:65:56:7c:55:ac:b3:ee:94:d4:24:ff:5a:c2:d2:58:14:ab:
05:4a:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:04 2025 by rpki-client