Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: 2Pus3B8ANu/QMkbc3XAA5qojaSOKV19Uew6UsXtEGj0=
Subject key identifier: AF:0B:5E:8F:5D:59:FC:B0:CD:F8:11:87:17:3A:54:9C:0D:03:9F:2F
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 0198D4729C674BC9448042C34404974E7E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 3E
Signing time: Sat 23 Aug 2025 01:02:17 +0000
Manifest this update: Sat 23 Aug 2025 01:02:17 +0000
Manifest next update: Sun 24 Aug 2025 01:02:17 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: qzP5WysxlObWFi84gUdTHimCKrFK3FR6T91gRMRNVYY=)
2: ef5i4gFsUjQtA9jIFWXZmLBsI5w.roa (hash: nHPFZXhPCy6Yr/I1NdWh8sLmeUGTngr7MiMVHJxQNuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9c:67:4b:c9:44:80:42:c3:44:04:97:4e:7e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Aug 23 01:02:17 2025 GMT
Not After : Aug 24 01:02:17 2025 GMT
Subject: CN=af0b5e8f5d59fcb0cdf81187173a549c0d039f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:e4:d6:b4:13:a2:7a:db:de:fa:da:e2:16:
e5:19:d5:0d:88:e6:29:4c:de:ac:5a:9d:7f:ee:7d:
3f:99:9d:77:3c:12:33:f4:a1:66:5e:3f:5f:6f:d6:
e2:5e:bc:8d:00:9b:23:3c:db:f2:8d:2f:2c:04:94:
02:42:39:87:f9:5a:9d:82:4e:7a:6b:27:5a:9f:fa:
36:4b:f5:b6:26:17:43:bb:68:35:52:18:21:83:49:
a9:24:d1:e7:bf:fd:ce:91:0a:ce:ba:ee:ad:c7:93:
0d:3e:ac:95:a9:05:b9:ee:ae:9b:c3:36:4c:fc:5b:
64:0b:00:52:18:62:1b:23:b4:f6:41:88:56:32:e8:
a5:51:ef:db:1e:ba:62:9f:de:e6:be:26:a5:85:38:
db:d1:fd:5e:60:fc:f7:a0:d7:7c:c1:62:fd:ac:70:
46:5d:38:f8:95:49:e1:96:ea:a4:4e:33:60:0f:48:
84:50:79:36:fc:d7:fa:01:b1:d5:d0:df:e2:ee:57:
64:29:d8:15:a3:46:86:e2:54:05:f8:69:1e:c8:b9:
11:e6:19:71:db:17:e4:59:80:d9:d3:3c:2d:f0:43:
d9:75:bc:67:03:ba:3e:35:d6:64:22:de:10:7b:61:
ad:a9:58:03:ad:0e:8a:d2:0e:5f:a6:7a:a3:09:13:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:5E:8F:5D:59:FC:B0:CD:F8:11:87:17:3A:54:9C:0D:03:9F:2F
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:17:91:cf:8b:02:1f:20:65:b2:a0:4f:40:de:ea:a8:1b:
4d:5f:9a:36:b3:66:fe:07:04:20:8e:e3:65:52:8b:2e:07:f4:
eb:03:18:9b:a8:61:e5:cf:81:3b:4f:c7:13:f0:04:5e:7c:2c:
25:d1:74:66:3f:61:c4:f3:ce:2a:7a:ae:ae:5e:ae:65:31:a8:
f4:93:ab:be:cc:c8:49:a7:32:2a:29:81:dc:92:a4:34:04:34:
15:50:65:3a:ad:d1:00:d8:5a:0d:33:c2:b7:11:66:aa:98:ed:
39:de:31:4d:38:06:48:54:6d:00:45:22:e7:c4:af:18:b9:a4:
35:2e:3b:d0:12:55:8b:b0:04:95:0d:f8:38:f1:14:07:51:d3:
1d:93:10:99:d1:da:f2:b6:15:00:ec:65:9b:79:07:12:ed:09:
f8:9d:3f:67:6a:02:86:09:c7:b7:40:e5:14:c0:54:77:3c:f6:
7e:37:7b:e2:c1:40:45:f5:2c:75:a2:be:f7:f1:ce:f5:23:c0:
71:ea:ce:92:99:09:8f:19:85:9b:d7:41:1e:54:8d:aa:bc:57:
0b:37:6f:ad:43:e0:54:b2:32:8d:62:58:87:dc:57:c7:77:5a:
b4:3f:9f:4e:1e:9b:f9:39:59:ee:2c:53:aa:59:83:67:d6:73:
9a:8e:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:35 2025 by rpki-client