Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: SZ7abif69koXx19WkEYI1/5t+XVjJuzCnqXgfJuC97c=
Subject key identifier: BE:2C:06:C9:BE:86:29:82:B0:B8:72:80:13:02:77:A7:3C:5C:54:BB
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 0198D4A82F351CC07D8F7889F15803BC0173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=)
2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: ZY0qaeKPgiIF9UMJdXpQpkTQ6/dp6DVOJFA4VdEyD7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2f:35:1c:c0:7d:8f:78:89:f1:58:03:bc:01:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=be2c06c9be862982b0b87280130277a73c5c54bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:e3:63:ae:6b:ef:10:1e:7e:35:d2:d8:35:
fb:69:ba:c1:25:f9:ab:37:a9:68:fc:b0:4f:f4:aa:
27:8f:f6:0d:b8:82:16:66:dc:b9:ae:2d:6b:a6:e3:
2b:0e:7d:87:e9:90:25:11:1b:95:15:66:d8:0d:6f:
31:4e:46:0f:8f:21:de:f3:4a:ba:a1:11:3f:6e:fd:
75:d2:11:d4:e3:bf:a8:84:12:f1:42:c7:09:b6:88:
9c:cc:f4:82:13:88:c6:72:b4:8f:a4:de:d1:aa:1f:
b4:db:fc:cd:2b:bd:33:6d:41:98:a2:67:44:fb:f3:
54:6d:20:9e:a3:c4:ec:85:ab:09:91:a8:65:44:14:
c0:b6:89:ef:62:e6:5d:2f:3a:ac:8f:9a:db:88:84:
62:88:d7:a2:73:e9:fb:0e:c3:42:4e:1d:af:ce:f4:
fe:30:ba:df:51:bd:f2:91:38:06:c5:39:7a:2f:96:
18:14:0b:46:f7:2e:c2:f7:a5:4b:9b:95:94:ce:36:
63:13:c4:a7:de:6c:d8:a1:aa:d6:d7:53:e1:de:0b:
02:d7:db:ff:40:3f:86:73:b1:c5:bc:da:ff:23:e0:
be:cf:94:68:7e:e6:45:cf:6d:9c:fa:89:c6:67:3c:
26:88:88:1e:d4:15:2f:53:b4:e3:a5:9a:7a:09:91:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2C:06:C9:BE:86:29:82:B0:B8:72:80:13:02:77:A7:3C:5C:54:BB
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:08:53:60:a5:7a:cd:87:ee:e5:3e:79:dc:8c:78:9a:ec:
28:6b:45:ca:9f:ee:6f:cc:64:ad:cd:da:ba:51:60:d9:66:e2:
59:20:26:bb:bd:0a:d0:5e:a1:d2:e4:fa:34:60:5c:f5:24:04:
11:c3:58:03:7e:b3:e5:14:16:af:f9:30:1a:bf:64:25:d7:d2:
cd:48:7d:6e:19:53:72:c2:0a:e7:73:14:70:54:67:dc:eb:ab:
84:35:b8:58:2b:58:75:39:29:31:23:09:de:3e:c5:b1:72:bb:
09:54:ad:ce:34:b8:f5:f1:ef:65:41:e7:33:96:97:3e:74:47:
0a:d1:fa:0a:8a:38:b8:cc:95:cd:25:aa:5d:cc:3d:3a:5c:12:
e6:32:25:50:85:f8:ba:24:5a:01:88:57:bb:87:28:c0:ca:db:
94:f9:08:35:a2:aa:09:f8:ee:7e:d4:76:b9:92:f7:da:bd:7b:
c3:75:15:fe:7d:e2:c7:f7:ce:df:e5:c0:69:d9:ac:d1:79:9d:
81:8f:e7:e9:a8:bc:c4:78:7c:48:39:36:8e:56:3a:44:0c:55:
fe:d7:fc:61:e9:68:57:31:a2:77:43:ba:79:5d:c4:b7:75:ad:
69:78:20:06:f5:26:5c:c9:4a:13:a1:eb:67:34:22:77:46:b0:
24:e7:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:25 2025 by rpki-client