Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: X+8Vyfd3RBJ/VshuTdelPmI+48SgqiT+WjXStfE9lt8=
Subject key identifier: 03:83:80:8D:1B:13:F4:7E:3D:11:39:3C:18:45:E5:A3:9B:AA:2E:A3
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 0198D51617445E2A9E58CD586056EE64229D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:51 +0000
Manifest this update: Sat 23 Aug 2025 04:00:51 +0000
Manifest next update: Sun 24 Aug 2025 04:00:51 +0000
Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=)
2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: qBhbDnGpBdc0QbVkJtqKqeJoyLcpOfg0xJtTWUVpaig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:17:44:5e:2a:9e:58:cd:58:60:56:ee:64:22:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Aug 23 04:00:51 2025 GMT
Not After : Aug 24 04:00:51 2025 GMT
Subject: CN=0383808d1b13f47e3d11393c1845e5a39baa2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:16:e4:23:af:23:01:2b:16:83:07:6a:2c:
d6:04:a3:48:6d:52:15:d2:65:d6:6d:f0:f3:7c:a0:
f2:c2:ff:5a:b5:bd:fd:66:92:35:41:a7:c6:71:79:
79:46:1a:7e:40:dd:7c:b0:18:72:0a:43:64:66:6b:
2b:25:e6:8d:25:dc:b7:26:0b:78:b6:17:47:89:13:
bc:ac:6c:66:26:df:e1:f2:b8:30:80:66:72:fb:6f:
0e:5e:4f:5e:f8:f8:de:ea:d9:bb:36:49:d1:d5:68:
05:fc:67:37:8b:79:a8:71:22:d9:ae:1f:4d:cf:1c:
f1:c2:d9:dd:91:d8:89:be:b7:67:62:32:b8:6e:93:
34:79:97:a5:ba:45:26:05:f9:dd:ca:1f:dd:68:b4:
d6:33:3e:f8:04:8c:ff:50:1c:de:33:94:e7:25:a5:
9e:9c:59:b7:41:d8:73:51:5c:5e:40:51:e3:57:bf:
f8:3f:99:6e:da:6e:b4:f7:51:42:95:f1:10:58:ca:
27:81:26:8f:d6:3d:33:d6:6a:b9:0b:99:b9:8a:9e:
bb:f8:7d:be:11:24:cf:d3:43:d8:ba:45:5c:c0:fa:
4d:96:eb:d5:7d:2b:fb:bd:6d:58:e1:31:05:69:cd:
b9:8d:19:d8:a0:dd:a8:9b:51:66:59:66:80:f7:62:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:83:80:8D:1B:13:F4:7E:3D:11:39:3C:18:45:E5:A3:9B:AA:2E:A3
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5f:dc:b8:17:33:05:c3:b7:1b:78:fd:74:ca:88:76:38:c6:
63:15:2c:91:77:64:bc:e5:63:a0:fb:79:97:06:6f:4a:df:fe:
a0:c1:0d:e9:bd:85:60:12:c3:3c:6e:87:c9:c1:46:16:92:d3:
26:2b:c2:7a:e7:2f:54:92:ea:b9:3f:53:09:73:e5:29:bd:40:
0f:53:78:82:25:72:c4:be:6f:ba:6c:e1:30:f3:5e:29:35:b2:
e1:a0:23:13:88:03:ec:46:69:35:8b:d6:66:fd:3a:4c:0e:d2:
f9:ed:49:1f:5f:7f:e6:3a:e3:a3:62:79:42:23:a1:6c:8b:c1:
38:da:6e:25:dc:82:70:a7:32:09:7b:f4:8d:16:f7:53:d1:8b:
41:84:1c:80:74:56:c0:6a:1a:c5:11:49:a2:a1:48:53:df:fc:
75:aa:0c:c9:84:69:3a:45:ce:48:9f:6d:da:ed:77:67:3d:b1:
1b:6a:17:24:54:ca:fb:63:d6:53:8e:3c:9e:f1:b1:a5:0f:df:
dc:04:43:c1:c2:b3:18:c1:c5:58:b9:19:d3:69:8b:6b:98:97:
08:9e:bb:86:b8:52:9c:3a:ed:98:3e:6f:71:3d:02:0d:ab:b2:
78:28:5e:55:7c:19:c9:be:1b:77:b7:ca:af:65:2d:8e:fd:fa:
7b:92:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:36 2025 by rpki-client