Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: K7Apt8pL3WitXlGaofAjTiKDz1qZl9uJGqW9EPuaOXc=
Subject key identifier: 0C:01:18:AA:51:4D:83:5A:F0:46:EF:05:FB:2E:22:F5:8A:6C:A3:AA
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 0198D65F7DEB64C32B7B3C3BB638E9141FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 021C
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: KW/J1qVQo0oD+nsAbWOQc89hqlesenLfw4WIphkhUs4=)
2: wK5U0OA4so9Bb6LaTOAhvYcrZbw.roa (hash: i3F3Ec/aHEk6lLvyEsCOnZPx8LpXq7mO54DzXI/2qs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:7d:eb:64:c3:2b:7b:3c:3b:b6:38:e9:14:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=0c0118aa514d835af046ef05fb2e22f58a6ca3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:9f:c1:d5:46:3e:69:44:b7:4b:d1:6b:48:
ec:03:a9:64:da:08:65:c3:97:7f:1c:f5:30:69:ef:
ae:cc:1f:96:ba:57:53:fe:60:a3:59:51:4b:aa:29:
6a:ee:36:05:f1:35:86:a8:e0:4d:a3:22:6b:52:d3:
00:2f:15:5d:65:f4:b3:f9:c9:b0:9d:26:c7:5f:c4:
88:d7:58:34:c2:b5:ee:f6:f1:76:76:aa:8c:c4:9e:
2c:e7:ff:5e:43:9d:4a:69:a3:72:e7:8c:6e:3d:ba:
70:ae:8c:69:4c:32:0d:8c:ff:86:3d:08:28:d1:68:
0b:90:27:55:f7:30:64:f6:82:ee:d9:ea:2a:29:5c:
2f:48:28:c3:fc:94:53:ab:12:c0:a3:00:a9:fa:85:
bb:5d:cc:9e:aa:fc:05:59:a9:64:ae:50:a6:b0:b9:
42:a9:f4:d1:39:27:c5:6e:49:26:45:2a:df:aa:55:
a0:60:d5:fa:02:e6:0f:4a:92:ad:d6:da:b2:3a:04:
8d:6a:e5:55:9d:65:4f:f5:c8:4b:d4:ee:17:8e:b9:
da:2d:9d:f3:15:78:bb:68:51:f8:8b:21:db:25:47:
36:1c:08:57:9e:47:05:df:41:f3:04:9c:11:bc:63:
d5:82:58:63:f1:7a:12:0a:81:b5:eb:91:d8:f1:f9:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:01:18:AA:51:4D:83:5A:F0:46:EF:05:FB:2E:22:F5:8A:6C:A3:AA
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c2:27:0c:72:11:69:6d:bd:38:72:02:47:35:16:ff:94:14:
ec:92:3d:c0:a8:51:39:7f:b5:7c:b9:6c:99:a7:3c:08:3c:08:
12:15:ac:ed:47:e9:95:c0:f3:5f:9b:5e:e5:d8:ae:a6:eb:68:
d9:fb:8b:e1:96:35:93:7a:64:83:26:79:d8:5a:54:42:d6:df:
c8:3e:5e:7d:6a:28:82:d4:1b:e3:6b:05:15:fe:a2:81:e6:32:
fd:05:40:4b:68:2b:b4:38:a4:9b:16:90:da:6a:40:6f:0d:89:
1b:6a:7b:8c:61:a6:23:45:0a:e2:ce:29:96:a2:c5:82:cc:38:
5f:27:2b:bc:69:e2:e6:75:86:4b:0c:4e:e3:a4:72:d3:e6:ee:
98:e9:6e:28:ed:4d:e2:f2:4e:e9:a0:b4:ea:01:44:fd:ab:20:
fb:62:3a:5a:fb:1f:e4:e8:0b:63:b9:27:21:5e:b5:80:cd:88:
bd:5d:d1:d1:74:75:4d:72:52:22:64:00:1f:30:d8:5b:15:73:
5f:64:7b:95:f1:1e:4d:9b:f6:9d:91:20:4b:d6:9f:7f:52:7a:
a4:97:cd:32:28:35:1a:67:de:b1:a9:fe:90:81:ef:86:6c:11:
86:cc:3b:5c:d9:98:71:1d:55:71:ad:77:23:6d:22:7e:c3:12:
99:cf:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:36 2025 by rpki-client