Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: GM/M471bniGqtu17lZX7mfigv3obRGqZYxM0NKR6WM0=
Subject key identifier: 38:0F:60:41:9B:74:C4:63:69:E9:1C:95:92:09:BA:5F:2B:E2:20:18
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 0198D5BC3103E8E0680DA8C4626425512F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0EFA
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: YUcZcg92Ju0TiOVkTzFqo4XG1M4N3IfR/q3arnf2WQ8=)
2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:31:03:e8:e0:68:0d:a8:c4:62:64:25:51:2f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=380f60419b74c46369e91c959209ba5f2be22018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:a2:c5:af:54:dc:0b:7a:2c:df:ec:69:6a:
39:e7:1d:e6:bf:63:ad:82:54:87:92:af:a6:4e:77:
3a:4c:37:4e:59:ea:9d:ef:fa:f3:9e:9a:6b:22:7b:
05:58:d8:b0:23:c4:0c:70:2f:f3:18:c4:24:3e:f2:
ad:ed:1a:e9:06:b6:8e:9c:f3:a9:22:a0:c5:c5:c3:
34:f5:a1:56:9f:f1:ed:9a:bc:6e:74:fd:36:b2:73:
85:f3:18:fb:29:9a:4d:13:9e:b6:35:ad:e2:9f:91:
01:29:65:ef:6d:7f:e5:29:02:21:35:58:d7:ed:43:
5c:ad:2e:5d:59:20:ab:cd:95:1b:e1:95:12:5a:f5:
00:25:d5:c0:b3:7d:d1:6f:01:8a:2c:55:b9:b2:55:
4a:7f:6c:11:25:f6:67:a6:44:3d:0b:4a:c7:b1:54:
bf:0a:ba:e6:b2:af:1a:5f:a1:fa:7a:57:83:0b:70:
d0:cf:88:de:18:a0:67:94:60:e8:c7:b3:80:fa:5e:
06:cc:67:41:62:eb:9e:24:77:35:29:ec:c2:51:2a:
0f:34:9f:6c:64:b1:b4:15:10:a9:af:fb:1c:38:a4:
32:3b:4b:9d:1b:f7:99:ba:ba:fc:56:15:54:70:c0:
f5:30:f3:de:a3:27:2a:8d:4f:39:1e:bb:38:e2:ba:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:60:41:9B:74:C4:63:69:E9:1C:95:92:09:BA:5F:2B:E2:20:18
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:36:6c:23:01:38:2a:77:b5:f6:bb:41:5c:5b:80:00:0d:92:
43:21:74:5a:ec:de:c2:1d:24:a8:86:fa:d6:06:15:de:9e:f0:
54:e2:cc:24:bb:fc:ed:47:60:20:f8:b2:c7:f2:98:fb:c9:56:
de:49:ff:2c:fd:7f:b3:e3:2a:2d:9c:8c:29:dd:c1:e4:52:df:
c1:97:d8:81:4f:41:c5:7c:30:36:d5:b1:46:ec:6d:42:a5:de:
59:84:39:da:9c:6a:ba:f2:72:c7:60:49:cb:2b:80:42:18:a3:
34:7d:92:b7:74:ac:a9:ac:9c:25:ee:00:2c:1d:b9:b7:09:cb:
57:f7:32:5a:2e:91:8b:a5:48:ba:bc:6e:fd:dd:7d:47:e1:24:
81:ba:c8:e0:fd:04:dd:a9:a7:ed:9d:da:1f:6c:b4:bd:88:4f:
3a:81:dd:5d:08:50:5b:48:64:a3:03:68:ba:09:f2:6f:57:9d:
a8:45:0e:64:eb:d8:3e:1b:d4:a6:75:59:ed:39:04:db:0e:89:
33:44:c2:56:c8:e0:2c:a9:57:ac:c2:a5:e2:62:59:71:45:78:
61:2b:f2:a5:89:bf:50:72:0b:ef:75:3c:f0:b5:7c:71:3b:eb:
56:6f:bf:d7:b9:8b:23:25:ed:9c:4f:87:9b:a2:7c:54:58:97:
76:c6:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:40 2025 by rpki-client