Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: KJKs31J9NsIgjvWc1KIX8CNC5iXLI3SCqs9hDdgwQIU=
Subject key identifier: CF:22:38:01:B3:78:9E:7C:05:3B:EA:20:70:00:17:BB:4E:5D:C7:AC
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 0198D65FD854574E264884825533E9363043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0D2C
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: uts6iDgkpay0HltV8lOyBROy5aTDvsIJCSjXl7QNvRc=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d8:54:57:4e:26:48:84:82:55:33:e9:36:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=cf223801b3789e7c053bea20700017bb4e5dc7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:6e:26:a0:24:ff:95:4f:aa:fe:99:39:97:
a7:a0:8e:59:8a:8a:bf:53:f2:eb:13:ee:91:9b:4d:
43:7d:49:2e:ad:f6:f7:ef:34:94:5f:f6:83:8b:81:
f7:74:c2:ea:7f:91:e6:01:bc:e1:b8:b5:50:d2:4f:
a2:96:e6:e5:a4:be:7b:55:83:31:f1:02:47:e4:0c:
ad:92:07:b1:1d:e8:86:6e:35:e8:44:06:8f:aa:b9:
cc:c1:22:54:ec:3e:f7:ed:2f:7e:bb:6c:fc:fd:99:
1a:c5:a4:e4:09:78:ad:87:f8:98:e4:b9:91:4c:7d:
3b:71:6f:ea:5b:67:14:71:f8:e7:d5:5f:dc:c3:ff:
16:21:45:3a:1e:a3:c4:c5:aa:24:51:9e:38:4d:eb:
dd:c4:2b:7a:59:04:98:66:74:b5:cf:9b:ab:81:ea:
d6:77:36:35:18:5d:d9:dc:7d:71:f9:88:78:cd:e5:
44:f0:ac:a2:f7:28:09:de:79:69:60:db:2d:e9:7d:
5c:43:14:22:4b:5c:64:b6:3b:3e:cf:e2:d9:ed:74:
5e:5b:02:dd:fb:e7:d9:ca:3b:7c:6f:89:5e:e2:79:
38:b1:85:79:64:d9:93:3a:c8:40:3e:b5:e5:5b:be:
57:61:33:b1:ac:11:8b:be:f6:a4:15:e9:ef:eb:a6:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:38:01:B3:78:9E:7C:05:3B:EA:20:70:00:17:BB:4E:5D:C7:AC
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:27:24:19:d2:d0:b7:d5:5f:99:42:15:c6:16:f0:35:af:
cd:10:75:a7:40:fd:cf:59:11:3d:c2:12:a6:bf:76:71:84:23:
88:04:3b:c6:d3:e0:da:fa:73:19:a0:2e:12:f1:69:59:c1:99:
ba:48:e1:4d:99:a9:b7:57:2e:4e:63:20:23:3a:09:18:71:f1:
6c:ae:0f:f2:2b:5f:1c:7b:dd:e6:5e:e3:ee:e9:9d:05:12:cf:
ec:38:01:ea:fb:b0:26:0d:39:ae:35:71:1d:20:1d:f6:c3:b8:
22:e7:d2:e0:b5:84:45:83:ba:86:51:22:9c:31:14:e8:68:41:
ab:5b:1f:95:d9:77:da:fd:b0:cc:01:49:a7:68:a0:4b:3a:5b:
87:58:ff:bc:23:af:64:cd:7c:3f:dd:09:6b:52:85:a3:c2:e7:
07:58:9a:fd:d6:aa:83:3f:88:24:cd:cd:df:88:e2:09:22:b7:
2f:87:71:6c:22:51:81:f0:f4:f0:31:13:c7:33:98:0c:64:de:
14:a0:54:fd:50:f0:75:74:a4:36:3f:fb:c1:f5:c9:e1:1b:d6:
f2:1c:99:f1:98:07:e1:eb:c0:11:3b:b9:04:46:8e:41:bb:c8:
ea:43:bd:9f:26:37:6f:8b:a9:47:2c:3a:9a:dc:4b:95:b6:51:
ee:0a:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:18 2025 by rpki-client