Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: /WJ03zA3poyv/WGgGa6SyM9U5ns0ULrzcq0jjoNPoCw=
Subject key identifier: 29:02:D7:C9:2C:F8:AA:8C:E8:5E:35:3A:DC:07:AB:A3:31:D6:57:DB
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 0198D4E05F7CE920BA61DD85799CF8B6D1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (hash: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=)
2: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: YTB7Hw6yMJYiifHUaFiGL4yjjzK2P2V26qsh73t2/J0=)
3: a-LdFc8kFHmTn2Z0Vu6JHLUtEY4.roa (hash: zTR8ty0nmJzU13XE2BvXWY2tGZYklQKm1YYaB327LpQ=)
4: el7j1J3bDKT27ieG83FPrQYbZJc.roa (hash: T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=)
5: od_NfkWMgnzZGkwU7wJ-RgWOeM4.roa (hash: OZscsQ8cir5jkIZyLY0FUkHozKmgjWJmCvTcbzJzQOg=)
6: tinXUk407KICO2MXsH1p4TReydw.roa (hash: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=)
7: wxZtKKgCuX_XkT9wjC8PBIL2aLI.roa (hash: tIV+HptpEfjZ8DjgmHhOJU8c4e/cERhkwqc7ixWl0UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5f:7c:e9:20:ba:61:dd:85:79:9c:f8:b6:d1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=2902d7c92cf8aa8ce85e353adc07aba331d657db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:08:0e:ae:fe:47:c2:40:dc:8d:d3:31:b2:
8c:ce:55:69:26:3d:ba:c5:26:2c:2b:0f:90:b0:1c:
d7:cd:1a:bd:5e:1e:4d:26:fb:2c:af:39:2f:93:b3:
32:7e:32:ec:fc:ca:25:0b:db:35:4d:b9:63:33:7c:
9b:b3:81:1e:c5:1a:9f:36:bb:a9:a4:5d:35:02:c8:
17:b6:54:61:61:ec:0c:35:37:da:d4:5c:66:59:d4:
0f:ce:d2:92:3c:c9:02:05:b3:5a:d4:8a:0a:66:b5:
39:0d:b8:3c:6f:d1:65:20:dc:ff:c0:72:db:21:97:
59:ed:b7:ad:9e:ed:52:2a:16:3f:43:4f:e2:e2:52:
6f:44:e8:5f:e2:a3:68:15:ad:01:d2:7f:2e:93:cd:
b5:8a:c4:c4:d0:3b:6d:0a:62:c0:1a:b7:f3:a0:4c:
d5:79:96:6a:32:39:d6:ad:61:a0:57:b6:0b:36:74:
06:21:93:88:61:7d:bb:fd:4b:e8:d7:fa:c2:99:8a:
f1:e2:b4:37:4a:36:83:a4:fb:1d:0e:9c:ab:92:96:
2f:5e:06:ce:c7:e1:6c:34:0e:05:6a:e1:80:30:65:
88:11:3b:3f:09:55:46:2e:50:ce:ab:82:c5:fc:2e:
fa:60:dc:c8:fd:23:20:5d:d9:6c:7e:f5:f2:6b:ff:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:02:D7:C9:2C:F8:AA:8C:E8:5E:35:3A:DC:07:AB:A3:31:D6:57:DB
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:12:63:ce:62:30:e7:1c:1b:4a:eb:54:8a:71:5b:16:9c:6d:
2a:50:02:8b:03:f3:b6:00:ca:99:b3:29:b7:30:d9:ba:24:c0:
7f:45:48:c2:e3:dd:61:6b:f3:b2:2f:23:2e:a4:48:55:61:e0:
c9:e5:57:a0:72:f3:82:d5:47:51:28:d2:45:da:0d:11:e7:18:
9d:4c:56:a6:5d:02:a0:07:d7:6a:ba:78:8c:f3:a5:1b:a6:a3:
ba:50:a9:f3:3e:3d:16:f7:51:78:81:b8:de:d4:fb:2c:ef:05:
92:b5:25:08:a2:20:3e:88:35:17:83:3c:75:45:33:64:a5:f9:
0a:b6:e5:ef:c0:c4:2c:c4:c5:4a:b4:29:e4:bd:71:de:08:6a:
1e:6d:e3:f6:f6:e7:23:74:9b:28:ad:65:a0:9d:a8:17:8a:41:
d6:d1:b3:1d:bd:eb:d4:1f:c8:36:e2:43:7d:59:ca:5b:f1:e7:
f5:60:ea:8a:e8:ab:65:60:d0:81:57:2c:ef:9e:81:b7:7e:23:
dc:49:75:73:a8:f4:43:93:98:48:30:db:c5:bc:6b:0e:7d:bd:
cc:ab:a9:7d:34:94:ff:f3:54:f4:06:0d:e9:5d:05:d0:77:03:
72:94:7a:e3:34:30:93:90:1c:0e:0b:f6:68:9c:c2:15:62:a2:
1d:e1:4c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:33 2025 by rpki-client