Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: N9kxeRUCG35f3UTxpfY/rtYPs5uqdfuGIllEQwrkaro=
Subject key identifier: 25:E9:34:24:11:18:F4:72:02:38:88:A0:23:B7:23:C9:80:06:CF:DB
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 0198D54E9628430DC7AEF5EA296E79E15FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0E45
Signing time: Sat 23 Aug 2025 05:02:33 +0000
Manifest this update: Sat 23 Aug 2025 05:02:33 +0000
Manifest next update: Sun 24 Aug 2025 05:02:33 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: evDR1U7nBBRB+XL8eceSiqtaxYp6el07qc2nBhdt/Fk=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:96:28:43:0d:c7:ae:f5:ea:29:6e:79:e1:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Aug 23 05:02:33 2025 GMT
Not After : Aug 24 05:02:33 2025 GMT
Subject: CN=25e934241118f472023888a023b723c98006cfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:7f:38:27:b6:be:43:ef:56:50:fb:db:2b:
59:bf:d6:59:d3:37:74:0b:4f:b5:ec:36:b4:c2:1c:
a2:cc:63:ea:1e:0a:f8:10:5c:93:33:2b:aa:31:e8:
74:c8:eb:08:2f:a5:c9:a9:5f:74:d1:bb:ed:94:c0:
38:e1:8d:e8:b6:bc:5d:4f:c3:84:eb:13:2e:1e:b9:
d3:b5:80:61:2b:d7:ad:d3:75:31:e6:dd:e1:a9:2d:
e2:a7:b1:3a:fb:b8:68:03:9a:46:c2:c3:b7:a6:33:
b9:91:58:dc:2b:3d:57:c5:13:12:f1:24:0d:6f:11:
bd:e5:27:d6:39:af:1d:92:6a:a5:46:ff:52:cf:8c:
fe:39:38:20:92:77:2a:1f:a1:69:d9:ee:f4:d0:52:
97:b6:71:f1:b8:3f:e3:6d:dd:26:89:81:5f:b0:01:
fb:21:cf:62:a2:7c:1c:4a:2b:e0:bd:92:1d:ec:73:
f6:0d:a2:59:19:03:f4:a3:08:b8:94:3c:54:1b:cd:
83:94:ca:9a:d1:54:3e:43:21:5c:3c:4b:cc:96:d2:
2a:35:d9:c0:84:83:55:3a:0a:e5:19:2e:6f:32:db:
6d:b8:94:aa:79:63:e5:2f:14:d8:51:18:48:f9:80:
e8:45:9c:e9:3f:75:f8:e9:38:bf:24:ac:ba:fe:42:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:34:24:11:18:F4:72:02:38:88:A0:23:B7:23:C9:80:06:CF:DB
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c5:7a:36:7e:4e:81:05:c9:ed:2c:92:c9:66:67:51:a6:e1:
af:dc:f6:dc:40:e0:a0:b9:ef:83:34:4c:cc:dd:1d:c5:ac:23:
ea:c7:74:d0:a4:05:3d:bd:29:d1:0e:d8:7e:5e:68:db:66:00:
63:97:10:b1:54:ad:4b:50:c9:8b:23:6c:57:6c:78:17:cc:e8:
52:ee:99:51:88:ce:d1:cc:dd:e1:bd:1a:85:c7:77:db:c7:c8:
f4:ac:34:f8:f1:ea:fe:49:86:c4:98:51:63:21:7d:a6:ee:69:
61:b7:28:00:d9:79:e0:d5:bb:88:45:85:b1:cc:39:71:33:4c:
44:68:63:5d:f4:e1:69:4a:ea:e2:13:16:4a:0d:05:a7:13:9c:
1a:ab:23:4c:b0:b3:63:d3:a1:4b:2a:96:58:ba:55:3c:0d:01:
9a:6c:8b:ed:d5:b0:80:6f:73:74:76:f2:f0:56:40:08:9e:bc:
cd:e2:e3:8e:ce:3c:ae:34:6e:28:ab:cb:07:94:bc:67:71:66:
dc:71:3d:c3:ff:b0:2f:fc:d1:3c:1e:28:1f:8f:de:bb:28:5f:
60:db:f6:c4:56:10:07:fc:6a:0d:41:b2:fb:75:79:cf:e8:b9:
79:51:da:41:fa:8f:fb:a0:46:35:83:be:07:74:07:26:5d:2d:
97:ff:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:14 2025 by rpki-client