Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: 4iy/8NfL9ncgDqH/fac0toaHqd+oZyqEz9Eaxqh+ClE=
Subject key identifier: 21:FC:5F:2C:9F:45:71:D2:1E:25:0E:10:F1:7C:EA:7A:D2:03:D2:66
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 0198D54E4B362F9A74270C2D66F6F6987DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 0D5C
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=)
2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: vM+NfY491B4HNqw0k4G9FULHU2TFSyv3p+KzcuHIdzY=)
4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4b:36:2f:9a:74:27:0c:2d:66:f6:f6:98:7d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=21fc5f2c9f4571d21e250e10f17cea7ad203d266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:3f:f3:d8:fc:cf:e2:24:70:cc:c8:57:7f:
27:15:37:a1:31:05:e6:de:71:49:9c:88:57:c2:4e:
ef:72:92:e3:8b:6c:8e:b8:cc:de:b3:44:b8:9a:e6:
57:67:12:34:40:1b:04:fd:5d:b0:6b:16:9c:2c:c4:
ec:39:4a:25:ab:20:37:57:3d:64:28:40:1e:c5:b6:
6e:74:51:bd:05:60:50:93:fa:6e:bb:cd:ae:4b:0f:
00:43:ba:7c:71:11:a8:cd:27:77:0e:2d:f6:86:62:
eb:00:e9:92:e0:d8:6d:5d:be:c6:58:a1:03:b0:22:
78:92:7a:c3:50:9a:d1:43:7c:a5:09:be:ed:17:d3:
22:f1:7f:93:7f:fe:4f:84:83:55:ce:f6:84:90:5a:
48:1d:ef:ca:dd:c1:89:71:99:94:81:1b:51:bf:0e:
51:4c:66:1f:d5:1b:7f:f0:d2:98:1f:32:dd:91:8f:
0f:8b:b9:06:7a:f0:9c:16:8c:21:14:97:e1:b9:c5:
68:43:fa:2f:a2:d2:52:9a:3d:87:2c:ed:56:4f:c9:
ec:37:c4:20:31:13:03:39:b6:98:90:93:67:b6:d1:
88:22:ed:ce:f9:55:3f:49:15:53:d5:77:f7:ec:53:
2d:f7:e4:81:b5:fa:9c:ef:de:74:53:32:8f:f4:aa:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:5F:2C:9F:45:71:D2:1E:25:0E:10:F1:7C:EA:7A:D2:03:D2:66
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:1a:7d:be:fb:9b:53:36:c6:0f:ef:fb:aa:db:b3:45:9a:
b3:26:86:fe:f2:ed:21:6f:bf:84:bb:bb:69:1f:6d:f7:c7:32:
70:e2:bc:85:03:a9:d9:9c:3c:f2:1d:c4:ce:ca:fc:6d:73:d9:
d7:ec:1d:98:3a:6a:47:20:5a:8b:0a:4b:69:47:ca:35:58:cb:
1e:5b:fc:81:49:4e:ad:51:5f:e7:02:0e:d6:7e:c1:44:c2:cc:
3d:10:80:29:23:9e:a3:10:67:55:51:16:5d:81:8b:b3:a5:51:
7f:78:53:cf:75:4b:93:fd:55:f4:c2:56:89:c6:f6:23:6f:c9:
4a:91:0e:33:cc:7d:eb:3e:b1:29:2d:4f:1b:59:4c:17:c1:95:
e5:e1:91:b9:40:2e:a3:6e:ef:66:16:18:ce:9c:13:c1:15:de:
fd:8d:e4:89:6f:bd:47:81:4e:cd:53:57:3b:00:31:23:b5:37:
a3:82:02:64:63:b6:6e:e3:10:c3:c6:13:84:9a:0f:14:25:a4:
f4:48:26:d4:c5:c8:4d:06:6c:a1:e4:50:a7:82:5e:3f:07:38:
5b:ab:0a:7d:31:3b:29:af:7a:7a:17:92:1b:94:8b:41:a3:dc:
1e:42:53:55:c1:e8:b9:84:cc:3d:e5:6f:97:fc:46:fd:c5:bb:
07:2d:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:10 2025 by rpki-client