
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
File: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json)
Hash identifier: XQoshM806eu4TIpX4TzVH3B5ZuvoTERSym1MYwtjGcg=
Subject key identifier: 49:E9:E6:11:86:82:F5:39:30:7E:0D:A5:15:E8:0D:36:F9:FC:36:A1
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial: 0198D5BB89FF41A320302AAD7952A21D8524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
Manifest number: 0D6F
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: WaTlOjOZvZ35/yiC1tCLy6h2Flw6NLL0p2sRO5txfH4=)
2: cmQy3O27JTVMgc0scAWzRQz1k34.roa (hash: JrHBwEb+drqrBDZnlCxDUthDJ1gAVyMOlFCkBCL2cqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:89:ff:41:a3:20:30:2a:ad:79:52:a2:1d:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=49e9e6118682f539307e0da515e80d36f9fc36a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:8c:7d:5c:74:aa:ad:22:45:95:5e:9f:00:
82:bc:a8:5e:60:a9:ab:c9:8a:8b:78:ff:c2:03:c9:
ee:ea:48:e5:eb:0b:6c:10:16:88:e6:fa:c4:45:8c:
22:ec:7a:b4:f3:d0:a3:90:fc:00:62:54:39:84:fa:
3a:fd:6c:e2:fd:7c:7d:22:d7:11:02:19:1f:10:29:
e8:0a:35:fd:95:c8:68:1e:5f:1a:2a:21:d6:cc:22:
02:09:c0:de:fc:ba:08:dc:d9:a4:ec:ce:62:c3:1f:
47:c5:1b:8c:73:05:a9:ee:be:da:6f:3d:44:7e:a3:
63:d6:c6:71:8f:d0:3c:04:7b:ef:35:9e:ae:84:30:
78:ee:36:94:1c:87:2a:b5:4c:bc:4f:19:b6:71:90:
fa:ab:7d:6d:46:34:cd:c2:61:96:a3:60:fc:32:4f:
7e:c5:56:09:b6:4d:6e:ec:40:54:e3:ba:d3:8d:ba:
09:64:23:5f:97:e9:59:47:4a:a2:37:c3:6b:ab:b2:
6f:40:f4:48:4a:46:ef:69:dc:53:39:0f:e8:1d:ab:
20:9d:01:7d:cf:49:d9:d3:d4:ef:03:5b:27:aa:c5:
80:88:7c:57:f2:04:c9:46:e5:9b:3c:aa:56:a3:08:
1a:0f:c6:6f:37:1d:b8:44:e5:6e:9e:70:53:bf:0c:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E9:E6:11:86:82:F5:39:30:7E:0D:A5:15:E8:0D:36:F9:FC:36:A1
X509v3 Authority Key Identifier:
keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8b:db:40:f6:36:d8:f8:df:35:f4:9f:1c:04:03:b3:f9:d4:
9e:d4:62:0d:50:20:b0:df:1a:03:cd:e8:6e:8a:13:ef:36:7c:
d5:48:96:72:f0:d4:53:75:c5:f7:d5:7a:83:65:b4:d4:7c:d3:
56:50:70:0a:b1:f0:6b:d1:2e:67:59:3e:42:fc:57:a2:64:95:
be:e8:35:ea:c6:e4:43:4b:08:f0:74:2e:b8:eb:79:ea:ad:6e:
99:a9:ba:38:cf:a9:da:cc:e9:ae:8e:8d:16:92:85:68:a6:16:
8c:1a:c2:41:1a:e5:84:aa:ae:e6:92:95:c3:ff:4e:90:b9:5d:
2f:f4:6a:49:91:ec:75:9e:0f:74:a4:09:15:e1:ff:64:93:35:
0b:85:34:38:3d:f8:0d:60:25:a9:28:d1:56:6a:bd:33:4e:38:
e3:8e:e9:69:1f:f3:03:82:ce:9c:0d:12:14:0d:7d:2f:6e:30:
4e:58:df:c6:f2:ff:e2:9c:95:3c:cb:fb:4a:f3:7f:a8:ba:66:
6e:ae:22:b8:f3:bf:bf:82:c0:6e:7a:ef:df:30:86:79:2e:fa:
c8:aa:fc:6d:22:3d:fe:d3:67:f9:55:ac:b1:96:c9:6e:7d:1c:
03:28:b2:07:47:09:1c:cb:3f:ad:3a:f1:a8:91:3a:27:64:fd:
6b:96:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:07 2025 by rpki-client