Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: npVHglYVNHDUUj20pfqc2BHSkodUywh2u0yRaGsYXa8=
Subject key identifier: B5:12:64:BB:D1:64:DC:5B:6F:94:9C:92:3A:DD:97:10:F8:A3:1F:2D
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 0198D6CDF82B8AE3EAEA985D6D92B5FD0524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 121D
Signing time: Sat 23 Aug 2025 12:01:19 +0000
Manifest this update: Sat 23 Aug 2025 12:01:19 +0000
Manifest next update: Sun 24 Aug 2025 12:01:19 +0000
Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: U5AeiO1aujN2TSEw78wWnxCkBjUxQ+ZojkGsjpggqqg=)
5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:f8:2b:8a:e3:ea:ea:98:5d:6d:92:b5:fd:05:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Aug 23 12:01:19 2025 GMT
Not After : Aug 24 12:01:19 2025 GMT
Subject: CN=b51264bbd164dc5b6f949c923add9710f8a31f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:d8:96:b2:73:3b:0d:a3:39:a0:b0:59:18:
3a:9a:e8:1c:70:f8:75:98:1f:fa:11:21:e6:6e:b0:
18:ab:5c:3d:4a:2e:66:af:d7:f6:e5:a8:99:fc:2b:
aa:0f:3e:8d:11:d5:b8:3c:fe:85:2a:53:15:68:2f:
db:08:ae:43:2e:84:5d:4d:45:9b:a7:28:0e:57:50:
5f:7b:09:7e:0d:55:3e:a7:e6:27:81:be:a9:eb:55:
f3:d2:d5:42:3b:c7:e6:08:55:d2:df:17:7d:f8:49:
45:04:5e:5f:0e:e0:7e:91:7d:c9:d9:96:32:b8:7e:
41:44:88:1c:20:e2:7b:ad:d1:55:7e:99:e1:9b:08:
07:e6:ae:7d:88:8a:1a:59:3b:e0:0b:4b:0c:05:fc:
97:6b:12:22:46:4f:09:8c:be:9e:90:66:76:ce:18:
9f:f8:56:2f:1f:96:4c:9a:d2:81:43:db:14:ee:2e:
42:15:67:6c:85:28:dc:96:c5:0b:0f:34:8e:25:09:
7d:d3:48:2f:02:ba:82:d8:07:ff:0c:27:98:c8:2d:
1d:0f:33:47:49:b4:cf:fa:0e:ae:c8:66:db:c0:cf:
a5:62:fa:93:c9:e7:8b:e4:09:94:91:52:b0:6c:fe:
27:a6:7d:5c:08:6a:58:43:99:02:b4:30:c8:d4:e2:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:12:64:BB:D1:64:DC:5B:6F:94:9C:92:3A:DD:97:10:F8:A3:1F:2D
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:32:93:19:a8:56:2c:75:f8:e5:6c:40:1d:33:db:ef:b4:c2:
5e:62:ab:37:e4:27:4e:6c:07:d3:2f:b7:19:79:34:8b:5d:4f:
1e:2b:a9:bc:93:83:89:0c:5e:5c:7c:23:a1:29:7a:58:5d:8b:
15:3d:f2:e2:00:38:5a:f8:03:1a:c7:0d:7b:eb:f4:84:cb:c5:
aa:2a:8c:72:ab:d5:bb:ca:58:22:be:c7:2b:47:5c:a8:db:89:
f4:70:64:09:3e:40:fa:a9:b6:ab:8f:a7:7f:a6:d4:c9:73:80:
bb:1f:8e:ef:f7:53:21:ff:76:3d:9a:e4:4d:4a:ea:31:33:3f:
33:00:53:24:23:b5:96:e5:21:2e:f1:c4:53:1e:ed:b6:c8:d6:
a7:36:11:ea:e7:94:33:71:4c:58:a0:a9:85:c7:3d:4b:77:ce:
b8:e9:51:7a:db:72:3b:54:88:ae:92:56:8f:f2:ce:2f:d6:60:
d2:71:6e:f0:cb:bf:3a:ee:2e:45:af:88:6f:9e:70:3b:6e:5b:
fb:0f:20:ae:d4:22:b3:22:71:68:36:c3:32:c1:4f:8e:5f:c7:
02:7f:5c:54:c6:69:53:40:10:af:57:fb:f0:81:d4:b4:6f:bd:
c1:cb:76:08:8e:5c:ce:e6:7e:2c:73:fc:72:68:f4:42:e7:27:
bb:4d:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:14 2025 by rpki-client