Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: iRHdK/FQx7S6uvGXGkdgCjSyBRpqLo3jT5lwwgvHyLw=
Subject key identifier: 2F:D5:38:DA:7B:01:CC:47:5D:73:F7:83:63:8E:C1:5D:F9:1E:44:38
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 0198D4DFD39679825A2410519DCF6113F887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0E40
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: o0yIyYf/nKpT6IefZXjXrVgnlMwd8zQKR3JwzTXWbcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d3:96:79:82:5a:24:10:51:9d:cf:61:13:f8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=2fd538da7b01cc475d73f783638ec15df91e4438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:c8:5f:8e:78:fd:22:2a:f0:52:68:6b:b6:
e7:3e:b7:28:96:d0:a7:f3:4a:e1:de:0b:a2:8e:30:
8f:46:2e:b0:58:11:7f:2e:dc:15:24:67:ca:70:b3:
dc:0f:9c:08:ec:a4:5f:9a:c1:99:9d:88:91:90:df:
df:58:3a:41:b8:a8:81:45:34:a8:64:2f:f7:ce:eb:
52:3f:0c:b4:05:fd:d9:e9:4e:74:e2:70:9a:b5:85:
58:e0:d7:81:6a:bc:25:0e:ae:ba:9a:b0:41:b7:06:
85:cf:71:3d:f5:91:20:ca:65:c4:c0:a0:f1:d9:11:
1d:d9:0b:5b:28:fe:92:cc:05:b7:5d:9c:f4:c0:d9:
a3:8f:2b:06:5e:af:d3:37:8d:52:0b:e1:63:22:cc:
d3:37:7d:f0:fc:83:27:e4:b8:1d:24:0a:ce:60:14:
08:db:1d:aa:ee:84:f7:70:09:ce:d5:93:4b:2b:aa:
9b:99:58:d2:9d:a3:63:36:e5:98:89:9d:24:a5:74:
3c:4b:ea:43:28:c5:71:ad:7c:3d:fa:47:6e:17:a3:
17:20:91:ce:86:8d:78:de:8c:59:0d:0f:3c:cc:b3:
b5:b4:a1:25:2c:60:42:17:ac:a9:9c:3a:89:d9:de:
57:df:41:4b:0a:92:81:fc:3b:91:20:cc:7e:9d:42:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D5:38:DA:7B:01:CC:47:5D:73:F7:83:63:8E:C1:5D:F9:1E:44:38
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b0:b1:61:a4:6d:82:09:21:7b:5f:5f:49:3e:69:ba:56:ca:
c4:6f:97:f5:83:85:02:13:dd:cf:77:c0:6c:22:4f:46:59:c7:
a6:83:45:a8:6e:99:fc:bd:a8:23:b3:a7:df:b3:10:96:10:a7:
4b:05:3c:49:b3:77:68:7d:f6:16:5c:97:79:18:43:6b:1f:7c:
2c:04:0f:6d:7a:60:0f:6d:96:1b:87:9b:53:0b:ae:3b:b6:86:
38:eb:c1:6c:8e:07:50:37:00:f5:40:de:11:14:63:e5:f0:3b:
96:6b:1e:56:fa:30:84:0a:24:6b:66:13:f1:d1:89:a0:1e:10:
fa:cd:12:f0:8d:a0:c2:68:8a:66:5e:a6:b4:8b:fc:6f:39:43:
aa:11:1c:16:ca:46:3e:e0:51:37:59:ce:87:0a:19:12:f1:42:
ff:84:7d:d5:73:de:5a:50:69:bc:18:98:f9:b7:71:1a:86:68:
66:5e:d7:9e:6b:f7:17:38:0f:59:cc:94:64:5a:1a:73:76:19:
11:bd:8b:fc:34:ad:f5:a8:d7:50:0f:53:fe:ea:ff:73:72:4d:
62:23:f0:a1:4f:29:e2:64:02:e7:35:f0:3f:1d:5e:08:74:4f:
ec:6c:8c:ca:4c:68:b8:09:84:99:18:10:bc:1f:b0:37:60:11:
10:cd:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:04 2025 by rpki-client