Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: p9wyqvVd2WX1PFMLq59xezSA8qsrObMJxq0FHMCtBM0=
Subject key identifier: A2:5C:84:D5:4A:F0:D3:0B:56:CF:B7:F4:27:00:77:D3:12:08:1F:84
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 0198D54E8DD8893C5E878C6ED9FADA009DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 0AAB
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: FEizwo2wdLPSYmS39cdfaI8NMHRGx2x4Okd3iMgGDCk=)
2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8d:d8:89:3c:5e:87:8c:6e:d9:fa:da:00:9d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=a25c84d54af0d30b56cfb7f4270077d312081f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:fd:b8:47:26:a9:f6:96:ba:ae:9e:0c:00:
a2:2c:9d:3a:f3:1d:90:8c:1b:7d:38:8f:5d:19:5e:
47:be:c1:2f:34:98:ab:55:a3:41:4c:1d:83:16:75:
72:8a:0d:e6:cf:85:c5:34:a6:25:2b:4e:f2:02:fc:
4e:b2:4f:d7:d7:55:fc:5c:fe:3c:a6:c8:85:8f:08:
dd:9c:7d:a6:1b:9c:3a:d8:5e:4a:b1:d0:f0:e2:46:
fd:47:3f:ea:6b:73:42:a7:19:74:78:1f:1d:f3:79:
33:c2:a7:38:6a:3d:9e:5a:9b:ab:d6:7b:f4:e7:2d:
29:29:3c:f2:81:4e:c0:a1:21:21:ee:ae:28:e8:73:
e3:dc:e9:bc:63:95:f0:c7:18:58:db:1c:40:e1:bc:
98:c5:a6:4c:34:0e:cc:16:f5:eb:42:9c:5f:1a:c0:
5d:83:e5:57:b8:09:cb:c9:de:30:3f:a6:3d:b5:6e:
3f:01:87:ef:af:b3:f8:1b:52:c0:5d:7a:9b:5b:c5:
1b:b7:e3:a4:47:22:54:0a:6f:9f:91:01:d4:2a:fb:
cc:d7:fa:4a:19:be:8f:0c:3a:48:ce:29:2f:02:e0:
bd:1b:c4:65:78:52:3e:13:f7:24:8c:db:33:4b:f1:
96:e8:93:ca:13:54:2a:4a:66:5c:94:6b:a6:11:97:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5C:84:D5:4A:F0:D3:0B:56:CF:B7:F4:27:00:77:D3:12:08:1F:84
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:7c:f1:fe:15:60:78:9d:69:89:f3:7a:32:74:cb:00:18:
5e:0e:76:ad:c1:82:61:a1:a4:8e:f3:d1:b6:d6:3e:f3:35:cf:
8b:49:eb:27:bd:a0:02:f0:fa:cb:74:0d:9c:11:0e:2a:cb:0e:
1f:67:f0:aa:01:57:85:8e:00:3b:5b:29:52:de:41:36:91:6c:
39:d6:ae:4e:49:ea:60:c5:b9:36:b7:58:c2:77:10:19:59:9d:
06:f8:b2:69:ac:89:7b:09:04:6b:b6:44:a8:80:ef:78:98:a0:
37:ef:52:4a:1e:5b:09:7b:c8:09:28:a5:95:97:37:63:54:d0:
a6:ca:a7:61:5c:66:53:31:b3:87:65:93:73:59:56:58:8a:30:
39:13:a5:dc:69:dc:f9:55:b1:61:df:b8:7a:5e:91:6a:2f:bf:
cb:b0:5f:e4:2c:8b:37:bd:bd:61:9a:bc:b3:0e:c3:e5:29:89:
c4:1f:f0:9e:f1:b6:d7:9b:c7:48:df:ff:ba:45:d9:7d:56:b0:
b8:41:0a:fa:79:8d:84:07:08:b3:28:77:73:15:e4:70:3f:4e:
81:f8:8a:9a:41:d7:e1:df:96:d1:da:1c:04:ef:90:0d:96:ca:
aa:f0:03:87:13:00:92:45:ed:4a:c2:ae:22:36:48:c2:42:9f:
67:9e:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:44 2025 by rpki-client