Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: BzmltAVaSaIjO9NbiqF+X1LU4xU/cPMwFtJJF5kxo8U=
Subject key identifier: 0B:40:AA:58:5A:0D:A5:23:E6:24:86:A4:98:2B:87:D5:48:06:13:41
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 0198D698022B04A0C45C97DC64E46E1E385B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0F30
Signing time: Sat 23 Aug 2025 11:02:22 +0000
Manifest this update: Sat 23 Aug 2025 11:02:22 +0000
Manifest next update: Sun 24 Aug 2025 11:02:22 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: NWkK52IfIuR52LZ9qcQmA4Y1Iaz2j+WaU7opRnG27y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:02:2b:04:a0:c4:5c:97:dc:64:e4:6e:1e:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Aug 23 11:02:22 2025 GMT
Not After : Aug 24 11:02:22 2025 GMT
Subject: CN=0b40aa585a0da523e62486a4982b87d548061341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:b5:50:31:8c:5b:77:3b:2a:48:53:c3:30:
4a:0d:38:ea:e6:a4:a7:c3:bc:d1:7c:ae:e2:5e:f3:
0c:80:85:4c:86:18:6f:1f:9e:a8:2c:48:85:6b:ef:
ac:d4:1e:03:35:55:9d:e8:a2:a1:fb:8d:fa:c3:c2:
e8:45:a7:f2:2b:60:4a:f3:02:bd:8b:44:00:c0:85:
ff:87:45:5f:17:59:f2:4c:f6:33:7f:5a:8e:58:60:
14:42:d2:24:ca:db:09:00:16:32:d8:08:4a:96:39:
c3:79:cc:6c:6c:d6:b8:b5:4a:92:b7:a4:0e:68:53:
8f:44:6a:7c:53:5a:52:0e:59:65:43:f2:03:38:84:
74:4f:c3:b1:29:e2:6e:ee:b8:c1:a7:42:0c:b5:bc:
a7:79:ea:3a:49:a1:f0:32:97:a7:04:43:a4:bd:4e:
2c:d0:44:e3:0e:32:d8:0d:8c:d3:61:25:b1:9b:7a:
56:0e:32:fe:c4:89:df:6b:b8:18:dc:9d:bd:6a:49:
a9:f6:a6:4c:26:c4:48:04:0e:88:a3:83:3f:62:0e:
38:24:bd:0c:04:cc:de:dd:10:5a:36:5d:0b:4f:86:
02:40:b6:b4:62:0c:01:a7:d8:10:0c:e6:af:ad:9b:
ce:c7:13:06:98:0a:ca:53:da:70:69:55:3d:51:3e:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:40:AA:58:5A:0D:A5:23:E6:24:86:A4:98:2B:87:D5:48:06:13:41
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d0:32:40:f6:bf:82:ab:2f:4b:f6:ee:9b:eb:62:69:86:88:
3b:1a:f7:43:b6:ee:3a:de:e9:e7:d6:6b:a6:6f:5b:43:65:6a:
fd:65:cb:71:c5:a4:1c:79:e4:bf:01:82:8b:a4:1f:ba:01:3a:
d8:e5:4f:5c:e5:3c:24:06:33:ac:4d:a8:7c:0d:b6:89:60:bb:
29:7b:81:41:b8:a1:d2:7d:0b:ba:7a:5d:2a:99:5e:c2:1b:c8:
6f:a8:74:b9:43:47:59:eb:c5:f7:09:79:34:53:51:97:21:49:
36:92:89:35:c3:d2:82:d5:d9:09:13:65:34:cf:3a:cc:26:8a:
18:d0:6d:9a:aa:0d:3d:24:ef:58:30:f3:19:e5:2d:29:a6:54:
bb:4c:94:8c:a0:fc:3e:e1:bd:26:9c:72:e9:0e:30:de:50:21:
36:75:1f:bc:63:24:55:c2:d0:9d:93:e7:56:91:15:ce:46:a3:
b9:82:69:71:a7:d0:f0:d6:95:e1:83:ca:13:70:bc:96:35:d4:
fb:b0:1b:5f:6c:dc:71:ef:71:00:91:bf:a1:b6:f1:04:40:02:
64:52:80:41:01:db:94:14:9a:af:50:6f:07:49:0c:2b:d4:e4:
1b:5a:6a:fd:43:fd:37:21:94:03:e2:ec:bd:68:e0:fe:3e:8f:
af:c3:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:42:36 2025 by rpki-client