Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: j5q8uNRnRQNl48EhCoZEDWOhGVSEXVOwfMf35FzSxA4=
Subject key identifier: 88:F9:3B:6B:B3:E6:86:23:DA:9C:34:5C:28:67:D8:04:7E:F5:18:77
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 0198D6986E0AA359EFCFFB30AD4940748647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0F32
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: 3yCZw1yIUo5toVm7DoUvkJj5wS0prMn/8U569fn2nEU=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6e:0a:a3:59:ef:cf:fb:30:ad:49:40:74:86:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=88f93b6bb3e68623da9c345c2867d8047ef51877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:f5:78:1e:eb:96:be:ac:73:d5:09:2b:a0:
dc:8b:00:19:8f:65:df:c4:51:15:ec:f4:b4:f0:39:
7b:11:6c:f4:f2:8f:2c:2c:da:19:56:3b:20:de:2f:
e1:88:0f:1e:09:e4:e7:cc:be:ec:c4:13:7b:53:70:
2e:f2:cd:8c:d0:5c:5c:11:8e:13:9e:61:4c:05:0d:
50:d2:47:6d:83:2f:92:be:12:87:a0:8c:69:ee:35:
cc:f4:ac:19:0b:8d:68:e4:46:dc:4f:c2:48:0a:5f:
8f:62:ba:7e:89:db:4d:f7:f1:3e:df:e0:48:a9:5d:
0c:ac:46:3a:a5:f6:15:67:f8:c2:48:2e:b9:25:ee:
c7:3e:28:4d:d9:cd:8b:63:cc:0c:8a:28:13:bf:cf:
f6:f9:d3:d1:6c:02:ac:92:de:5c:f8:d3:3e:b9:be:
87:97:5b:d4:82:8c:d5:ce:e5:d6:4d:7f:b5:a9:cb:
4b:4d:32:21:db:6b:57:3f:36:96:ae:11:47:5c:6a:
4d:53:99:d4:42:b6:f9:19:30:46:db:d7:ad:61:e8:
db:ea:32:48:da:2c:10:c0:5a:8c:f0:e0:ab:7e:92:
55:0a:22:f5:0b:56:bd:72:c7:0d:76:87:e4:82:79:
d4:c1:71:01:84:a8:72:84:b0:e1:7a:52:a7:ee:b4:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F9:3B:6B:B3:E6:86:23:DA:9C:34:5C:28:67:D8:04:7E:F5:18:77
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4f:7d:c0:61:0a:e2:a3:09:ae:a6:27:b4:f5:a5:ff:fb:71:
4f:28:a7:51:a8:f7:b7:74:b6:51:e8:c2:a1:40:3f:c4:eb:01:
96:bb:4f:ec:a1:0d:33:66:4c:60:cf:6f:6b:eb:32:f5:14:c7:
be:12:e3:4f:39:b0:ea:c8:87:90:4b:35:be:dc:14:58:cc:98:
5d:2f:e7:58:6b:c0:f0:2f:df:32:8a:75:5a:35:a9:18:b9:a0:
7b:c9:b4:1c:84:a6:8f:2e:6f:c7:87:06:dd:ff:75:07:a6:bb:
f5:e8:10:1e:df:33:02:5f:41:ae:fa:3c:51:99:8c:e4:b5:c1:
67:ec:aa:a4:24:77:03:cf:18:47:e2:83:71:ee:7a:29:c2:2e:
64:e3:79:73:2e:26:0e:4c:be:33:3f:0f:c5:c6:33:07:fd:33:
05:16:38:a0:69:30:b0:57:07:4e:66:b0:a2:a8:39:0d:f5:69:
2d:4a:f1:d7:e9:39:c4:3b:3b:99:e2:d0:03:ec:3a:74:42:a1:
39:db:cf:53:4d:e1:23:54:08:fb:12:c3:6a:cf:fc:06:03:63:
ab:e5:9d:26:d6:e2:18:41:5d:49:59:9c:67:83:7d:1d:9d:b4:
62:51:ec:5f:90:07:55:61:00:da:83:d0:e0:e0:21:9c:b2:22:
d7:e3:53:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:43 2025 by rpki-client