Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: UR5o+No2DHj7XAA0aAvBv4mrPVC1JFFCcwF3VL3F4vE=
Subject key identifier: 53:FA:A4:EB:2A:3F:5E:B0:02:69:94:47:E0:21:6C:F6:0B:9F:BD:3A
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 0198D660194369FBD51D2FDB8673AB6D5957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:01:18 +0000
Manifest this update: Sat 23 Aug 2025 10:01:18 +0000
Manifest next update: Sun 24 Aug 2025 10:01:18 +0000
Files and hashes: 1: 526G98YrX5YRgU8kSVFlOR-68SU.roa (hash: EfmIyH+1frBE08mLPE+N4lUdJCEbw7QSSljLZgrUP1M=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: E6x60P1LaYBVxq4YnQEySyCggtpycq9tOwUsQtiU5GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:19:43:69:fb:d5:1d:2f:db:86:73:ab:6d:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Aug 23 10:01:18 2025 GMT
Not After : Aug 24 10:01:18 2025 GMT
Subject: CN=53faa4eb2a3f5eb002699447e0216cf60b9fbd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:05:ed:9e:27:ba:aa:d8:88:9e:15:17:5e:
64:c9:a5:8c:c9:df:79:4f:24:f7:c7:27:75:79:c8:
19:12:11:5b:40:ae:0a:0f:d2:f9:90:05:1c:d0:56:
86:3d:4b:63:42:dd:0d:be:5f:ed:87:46:63:da:4b:
16:cf:2d:69:73:c8:ad:52:ae:d2:5f:34:1d:46:91:
22:45:c4:ee:3b:60:7c:0c:01:c1:da:eb:bb:24:79:
22:89:3a:16:7b:cc:7b:be:96:6d:45:e0:28:f9:0e:
9c:ff:bb:36:9b:6b:83:3a:30:66:46:31:81:0e:13:
e3:27:38:16:a9:de:66:4a:2e:cb:ef:73:2a:fb:01:
f8:f4:dd:a0:b5:eb:ad:95:f6:80:0c:80:b1:37:b7:
ac:4d:2b:09:66:f5:68:64:a3:09:78:01:60:7d:42:
37:fd:aa:bd:b3:e9:07:e1:39:41:a9:40:2f:8a:a1:
9a:ed:0b:28:2f:e9:1c:22:a9:a7:72:67:e6:51:38:
9e:68:c4:81:1b:29:ff:b2:49:6e:57:ad:62:c8:a8:
92:c6:b1:d3:c6:0f:8c:e8:dd:68:50:b9:e2:96:b8:
c2:fe:f4:f1:39:48:52:22:1d:55:67:c4:18:ab:83:
11:e3:91:e5:03:fb:0b:c1:03:06:27:09:0c:b8:34:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FA:A4:EB:2A:3F:5E:B0:02:69:94:47:E0:21:6C:F6:0B:9F:BD:3A
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:37:62:be:9b:3b:ee:d7:27:8c:04:43:1e:dd:ea:17:9c:53:
7b:80:94:8f:91:a6:51:b3:9f:93:14:14:9f:5e:db:9c:4c:83:
4a:0b:1d:ab:0a:0b:ae:45:98:95:f5:b2:b1:91:58:a6:79:36:
5c:8f:92:ce:a6:5d:db:52:e9:e1:de:72:cc:e7:b3:49:f6:ea:
06:fc:80:9e:8a:ac:bd:57:67:23:a8:70:53:05:f6:25:7b:b3:
2e:46:36:2f:3a:3e:77:16:45:77:ef:f2:03:c1:b4:b3:66:18:
c7:97:4c:b6:92:3c:c8:7b:23:45:b8:4c:d6:2d:18:98:d4:4a:
1b:f6:7e:3f:65:5c:2f:1d:de:fb:ae:6d:57:22:63:8d:b6:a3:
0d:98:e1:d9:49:73:5e:be:25:ca:7c:5b:4c:d0:93:56:9d:e1:
d8:3c:6d:06:bf:c0:c8:63:09:8d:37:e8:a9:db:d1:76:12:c6:
37:87:3b:08:16:d6:5c:c2:b3:e1:ec:c4:05:59:70:23:3f:4e:
68:de:e1:9d:c6:7f:67:eb:fe:1e:9e:3a:5b:7d:0b:d3:63:e4:
a0:0c:8f:2d:97:f4:f0:7a:ff:c6:2e:03:9e:82:eb:4b:e2:65:
9c:5a:7e:8c:43:d5:0e:15:89:63:38:35:fe:42:2f:7d:87:2a:
60:f8:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:12:29 2025 by rpki-client