Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: kuA/sRp4U0YldqMB1lNeqvOsfYV/dbVMEy2NwskUOpE=
Subject key identifier: 90:AC:52:F3:7B:AE:4E:4E:66:B8:90:F9:3F:2F:98:CC:7E:4B:7C:EB
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 0198D4E06C4D1807209BBF4CA980D51AD5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: SuBf8ZSf+aAEES0S1KeezMjZV2r3b5RZ9gBQtOsKtEQ=)
3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6c:4d:18:07:20:9b:bf:4c:a9:80:d5:1a:d5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=90ac52f37bae4e4e66b890f93f2f98cc7e4b7ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:56:37:21:b9:5d:9b:b3:c1:ec:c9:dc:20:
82:37:08:60:1a:57:e1:09:36:c8:88:d7:69:48:04:
e8:36:5d:e7:4d:31:31:ac:db:65:c3:ed:2b:fb:8b:
99:87:55:f9:e5:6c:1d:c1:5d:2c:f5:d8:2a:98:a0:
86:e6:a1:5e:e4:17:13:40:84:6e:b7:16:5d:27:25:
b0:f1:a9:6f:df:35:f9:b2:be:c9:d1:64:38:dd:d6:
e3:2c:fc:13:cf:44:1b:47:9a:07:e4:65:a8:b0:05:
37:72:84:ce:8d:8d:6b:d1:e8:88:fb:66:45:30:a2:
29:dc:54:fe:e2:66:7e:64:f2:a3:2c:09:86:5c:7f:
98:c7:ac:ad:55:56:9b:fd:eb:a3:c8:85:20:19:20:
63:18:3b:6b:02:e2:8a:bf:c1:d3:d5:fe:98:29:3e:
01:eb:ed:54:e9:47:72:59:f4:ee:c3:2e:fd:5c:b4:
71:b8:d7:0d:40:00:98:b2:c4:3d:5d:a6:9c:0e:b4:
fe:a6:7f:eb:8a:ee:e2:27:ba:7a:2a:25:2d:ac:ed:
7d:1a:b7:63:63:1b:9f:b9:9a:9e:07:95:cb:a3:fb:
d9:37:b2:eb:86:4e:dd:0c:c7:f0:63:43:90:c5:4a:
90:50:58:95:02:7c:19:1c:85:0f:8d:bb:97:f9:22:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:52:F3:7B:AE:4E:4E:66:B8:90:F9:3F:2F:98:CC:7E:4B:7C:EB
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:57:34:c6:ba:75:35:c7:48:f8:6b:28:25:fd:3a:25:96:
9a:63:56:92:59:47:94:7a:f1:92:d0:64:4a:07:30:c5:c1:92:
1a:07:3e:eb:d0:9d:e3:e5:de:ba:38:09:d5:84:ac:d1:6a:7a:
8b:cd:04:20:50:f4:58:dc:0c:04:6e:ac:1d:1a:48:fc:e9:48:
65:8e:87:9e:c9:7f:2a:5c:4c:c4:2d:9d:3d:c2:54:72:c0:da:
13:a7:15:ac:48:72:b8:1f:ed:5f:d7:6c:c8:98:3d:97:36:b3:
4a:03:2a:f8:48:ea:cb:d7:53:cd:0d:71:83:a5:83:4e:f5:89:
ee:e5:b6:87:5a:cc:f2:23:80:9b:8f:40:4c:ae:f4:65:a1:5a:
e3:92:45:1a:c0:08:e7:82:70:67:45:63:1e:8c:f3:50:79:9c:
4c:3c:62:35:25:ce:b6:f4:50:5d:ee:8c:e5:59:7e:75:8f:d6:
e7:e4:20:39:46:05:3b:0b:9a:10:2b:74:a3:7d:e3:8f:ec:a8:
a2:ba:53:77:bc:dd:97:79:ef:ee:97:55:1f:c9:f3:aa:87:ac:
ef:b0:ae:68:37:12:f2:6b:70:e8:39:3f:c7:2a:2f:7d:8e:f3:
cb:08:04:cc:e6:b4:a6:49:47:a8:45:c2:14:a8:a4:5f:9f:b6:
9e:1e:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:21 2025 by rpki-client