Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: kSQvtjuXrPC7pOhR674DQGza5qV9hrDV/qdl5hyZvfk=
Subject key identifier: EF:FB:BB:6E:01:4A:8C:C4:BC:D9:21:C5:A5:DE:C4:BB:78:6E:3D:1B
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 0198D54E5A12EFB61999583C168148DC0A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 03EC
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: hHb4WD7dO2z3ox2qHBF4j+FXkDgv0zPkiAKlpAW0exI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5a:12:ef:b6:19:99:58:3c:16:81:48:dc:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=effbbb6e014a8cc4bcd921c5a5dec4bb786e3d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:fe:b7:b7:c2:81:10:6a:15:d0:1e:d8:fa:
05:a7:6e:36:8d:09:41:a9:92:80:ab:8c:3b:37:94:
16:35:58:c6:52:15:84:cb:be:0d:b5:c3:df:ca:1a:
d6:d2:5b:f0:9a:18:d7:64:d3:c6:d6:1d:02:78:f1:
dd:49:46:b9:92:7b:e6:9e:23:51:de:7a:70:23:82:
3f:be:37:ec:4f:e0:6a:c4:fb:cb:f2:13:57:51:46:
88:98:92:cb:c3:78:cf:10:50:b2:db:2a:73:e0:8f:
07:17:2a:2b:82:66:27:c3:c8:de:d7:26:ae:d9:3d:
ad:d5:bb:90:1b:fe:c7:38:87:d6:78:1e:61:8d:14:
ba:45:11:15:0e:e8:9a:5c:76:06:ae:40:ae:45:70:
0d:73:cd:fa:77:9b:f9:33:96:59:f4:8c:5e:c2:d3:
66:aa:84:26:71:e2:85:b1:3b:01:02:69:9a:d0:b6:
16:c6:a0:ab:6e:40:5d:0c:94:0b:60:10:cc:0a:0c:
62:5f:08:aa:25:57:fd:d4:61:34:2b:6e:7a:5f:d9:
75:fb:4a:c5:d6:af:d3:68:4d:06:79:4d:b2:18:f5:
5d:30:e3:54:2b:6e:84:c0:2a:5c:9e:1a:a0:f2:59:
b4:1f:63:ba:2c:9f:ea:37:6f:d0:33:c8:75:2c:7c:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:BB:6E:01:4A:8C:C4:BC:D9:21:C5:A5:DE:C4:BB:78:6E:3D:1B
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:93:a8:ba:2b:ef:63:5e:3f:ed:e2:e3:52:91:63:32:97:
3a:f9:fd:9b:ed:88:d8:70:be:33:06:93:e4:75:63:d6:c6:a1:
40:75:dd:89:6f:9f:8e:31:c2:82:57:d7:67:1c:7f:6d:2a:d2:
6e:7e:c2:a2:43:ec:5c:22:b2:1a:1a:20:24:4e:68:d4:82:3c:
8c:39:6b:7a:26:c5:95:7b:26:27:db:2c:b0:5c:28:0b:3f:be:
2b:03:55:25:c4:21:39:e2:84:39:a9:b4:9d:d0:46:2b:99:38:
db:a9:05:fc:31:88:88:1e:7b:df:80:8a:c2:cd:63:b5:5d:f7:
45:96:8b:41:ec:4c:37:29:66:52:c2:fc:51:f5:81:34:05:e6:
da:4b:c3:0a:a6:74:56:13:3e:6e:94:04:05:88:c9:12:23:50:
42:80:d5:4f:47:1b:f9:23:a5:38:b8:aa:67:d1:ab:a0:fb:1b:
0f:ff:55:18:39:11:65:8d:a1:d8:00:eb:b7:84:15:6b:cf:6d:
04:10:84:43:bc:a7:e0:3f:b3:72:ba:bf:b3:ab:6a:69:5a:3a:
b7:95:55:b3:a9:04:99:fa:ab:70:61:c3:1b:54:18:4b:a7:4e:
9d:47:63:e1:51:84:4c:ee:2c:15:05:d1:61:94:e0:45:0c:4a:
b1:93:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:44 2025 by rpki-client