Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: kWPqs7TFHHQlQgvowiF8ghDAWUEcv8lrrGlGCl1+Pbg=
Subject key identifier: 22:83:59:6D:29:78:BE:8C:A3:1F:49:09:90:52:82:6D:37:98:2A:F6
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 0198D5F155B9D4E7877587120AEEBAB94B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0AF3
Signing time: Sat 23 Aug 2025 08:00:19 +0000
Manifest this update: Sat 23 Aug 2025 08:00:19 +0000
Manifest next update: Sun 24 Aug 2025 08:00:19 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: RVzDEiUjIPY6brBuo5U5qdClvgyTwX2CO41ajQgHLRg=)
2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:55:b9:d4:e7:87:75:87:12:0a:ee:ba:b9:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Aug 23 08:00:19 2025 GMT
Not After : Aug 24 08:00:19 2025 GMT
Subject: CN=2283596d2978be8ca31f49099052826d37982af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:c3:04:5e:99:0c:3c:5b:d6:ee:4f:9d:a0:
e4:bf:2f:f8:2b:68:9e:44:35:16:c3:95:73:19:04:
c7:e3:e3:1d:f9:07:d9:2d:b8:68:51:57:35:5a:dd:
3c:e4:df:7f:6c:1d:db:59:4b:3d:e9:0b:ee:5b:a6:
92:fd:d9:5c:1a:cf:06:ef:66:85:c5:49:88:10:bb:
a8:d7:3d:dc:0d:af:61:2f:f7:e0:61:4f:bb:32:f3:
fc:06:b6:56:a6:8c:e5:a7:d4:d2:f5:d8:01:a4:c7:
f7:62:22:f2:dd:29:68:9e:06:f0:6a:7d:a2:c5:1e:
38:e0:c2:c2:d9:c4:f0:23:f9:bb:c9:17:8d:9c:29:
2e:5a:d1:30:05:f7:52:e9:96:cd:9d:bf:ee:f8:9b:
aa:24:45:e5:d7:bb:2e:cd:00:52:d2:64:7a:db:03:
fe:2c:b6:c1:f7:6b:1f:77:b8:bd:f9:db:67:ea:1e:
d4:37:f5:59:74:f0:bf:3a:8e:29:32:7b:bf:c5:fc:
6a:2e:58:65:b4:fb:ed:8b:cc:92:8a:a2:77:ea:83:
c3:68:ee:95:17:e0:50:a0:07:d9:ff:0c:67:ee:8a:
45:2a:3b:62:d5:81:c2:65:82:4a:7b:c1:ed:ba:a0:
7d:4c:cc:e2:bb:b1:c5:dc:fa:a8:87:cb:63:01:6c:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:83:59:6D:29:78:BE:8C:A3:1F:49:09:90:52:82:6D:37:98:2A:F6
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b1:43:46:4c:4a:77:30:b6:23:3a:89:7f:f6:d6:6e:52:13:
05:3e:2e:3b:b1:1e:bb:87:d2:dc:cb:e9:a5:e4:a1:21:8e:5e:
9b:48:bc:9a:14:e7:c2:e0:9d:87:70:57:59:30:a0:de:a6:2e:
c0:28:55:5f:4d:20:3a:d0:bc:bd:7f:2a:0b:4d:7c:19:65:19:
bb:d5:53:6c:ee:e3:91:93:56:73:25:86:bb:2f:88:f7:73:00:
a7:43:6b:52:c1:c2:1f:8c:9e:01:ce:d6:bf:a1:9c:7e:99:78:
89:5c:67:7d:1d:44:78:8e:ff:0d:18:32:25:0a:b8:39:3a:e7:
12:b0:18:2a:a4:55:aa:3b:a3:9f:7d:ce:21:a1:53:76:f8:cc:
10:97:be:09:52:ad:09:3f:b5:53:cd:e5:88:c0:67:05:66:12:
5e:2e:b5:46:12:86:aa:0d:8a:77:d4:eb:0f:55:4e:e0:ab:ec:
95:b5:a7:c1:25:de:0f:7b:ab:79:b5:fc:53:b6:41:b1:ad:4a:
ab:1a:45:91:a7:e6:9a:79:c5:8e:bf:c8:0b:d2:57:4c:59:52:
84:a2:f7:e7:84:4f:07:76:20:06:77:0f:95:26:51:91:ae:25:
30:b0:b8:ea:cf:94:02:31:40:d9:3c:07:ec:78:7f:d4:c1:b5:
50:b0:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:58 2025 by rpki-client