Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: dBCSS4NnKqgUG4Fqzu6OYoFY4aGgBrgrRxORb7U8EQo=
Subject key identifier: 9B:F5:8D:0B:DA:B8:47:5A:B1:8B:E6:50:84:32:8E:61:CB:10:BB:BD
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 0198D51614E539463B9AC2C94656208590BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0D1F
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: 9c99e7OOCoSsqv05bamuZvrBRAg.roa (hash: gcQqAYS/2mIfyTda9lezITlbdeVA2P8mDvlHBkdo3p0=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: TSoWI50B4pPOo+NBx8GHCYmAbO50EdKhEfwJByA10mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:14:e5:39:46:3b:9a:c2:c9:46:56:20:85:90:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=9bf58d0bdab8475ab18be65084328e61cb10bbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:ea:44:9a:46:e4:8c:ab:39:19:40:36:cf:
61:65:32:b9:49:9d:80:81:a3:53:b2:4e:25:e2:49:
8a:78:6d:83:37:ff:bf:25:a5:ef:d1:5d:38:70:9d:
14:3c:77:3e:02:93:40:53:ec:ff:4e:45:fd:8e:ed:
bf:d7:91:6b:6e:ed:16:1e:56:af:b2:1d:11:58:40:
63:58:ca:ec:9e:c4:1f:99:d6:3e:8a:3f:76:21:64:
5a:fd:9f:79:c1:da:96:c1:02:60:66:63:0e:e8:12:
ab:f6:1d:c3:be:2f:12:76:b6:f8:2c:2f:d7:0a:a7:
08:fe:b0:f5:97:3e:39:6a:d7:89:99:fb:ca:ba:1a:
25:51:19:67:01:a6:60:1f:59:c2:27:31:02:29:49:
4e:83:66:5b:d8:75:83:e7:e6:71:9f:fc:b0:39:48:
df:e7:41:55:6a:92:9e:ad:3d:0c:2d:fc:cd:02:9f:
e9:07:7e:ed:d8:e9:60:8d:90:b3:fa:1a:e4:43:bd:
6e:34:28:86:83:99:3d:74:f5:09:1a:6f:27:ed:25:
af:7a:67:a7:7c:ac:13:60:73:66:c8:33:bd:a8:06:
7c:9c:a6:4b:a8:ef:45:92:72:09:43:c4:e1:e2:2a:
9d:9d:30:92:38:31:fa:6f:19:b6:1d:8c:89:d5:db:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F5:8D:0B:DA:B8:47:5A:B1:8B:E6:50:84:32:8E:61:CB:10:BB:BD
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:b4:8f:d1:80:02:69:36:8b:34:36:f2:6b:24:2c:2d:6e:7f:
5d:88:c9:a1:9f:0c:97:29:7a:19:b5:1e:79:51:69:00:cc:9e:
14:85:24:4e:a7:31:81:0a:06:ab:0a:80:4e:96:95:04:93:96:
82:40:30:ea:e8:30:ca:09:93:d6:63:22:56:b3:8a:e9:76:6d:
6a:bc:15:09:a8:89:97:4f:84:a0:7e:e7:a8:f5:ad:99:8b:98:
7c:b5:1a:50:d2:1a:2f:70:70:e9:71:50:49:cd:92:90:32:63:
27:63:c1:63:9d:85:f3:a5:e5:7b:96:da:3c:96:32:d4:66:c2:
eb:6f:0f:93:10:4e:aa:0e:d5:4b:03:eb:80:fc:89:a9:00:38:
e0:4f:17:3d:5c:b3:e3:50:31:a6:57:b1:0e:17:7c:5c:dd:ad:
70:0f:7c:41:d4:25:1b:3c:8e:c8:35:6d:6f:dd:5b:66:39:60:
f7:ac:e9:be:a8:73:e8:54:0f:23:37:cf:e2:0c:d3:bd:12:52:
79:1c:bd:2c:e7:73:e1:3c:a8:53:9e:bf:c2:0a:49:6c:03:47:
dc:8d:8e:84:d2:c0:2f:71:fd:5e:d2:32:31:1e:9d:58:79:02:
2b:4f:a3:6d:af:f4:3d:01:e1:bd:39:ee:32:53:e9:a6:05:9a:
ac:99:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:10 2025 by rpki-client