Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: D/D8gHzexYD9jaQwVcsHVvCTyzxl/IhSOQpl5hqTr74=
Subject key identifier: 95:D4:53:30:FB:3E:28:88:2D:B6:C5:66:F9:FE:24:03:FF:9F:00:77
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 0198D66108A3F6B94318A6CCD4ADAEF4D508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 0F6C
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: ejX+Jl5x3yZ8SxUFxXVJLyLq/UG7Tpe1bn5vdDyNL3k=)
2: gqHU5wrARNT7BxKe3BSk4XNORdM.roa (hash: uD22dYfbtURUQN6zPqLnmvBkI8fmrnMLZJG7fTTS2Qs=)
3: mbshd36a3kUn_PLw1tny6fqn1rE.roa (hash: EUl3crN01+w1AJ7v5fomFccxy0ihSXuD2n+1bS2wa+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:08:a3:f6:b9:43:18:a6:cc:d4:ad:ae:f4:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=95d45330fb3e28882db6c566f9fe2403ff9f0077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:23:0f:2c:95:90:ce:f7:95:07:4b:28:22:
a4:d2:18:ba:4e:6f:68:ca:52:15:f8:b2:9e:98:11:
03:f6:cb:42:38:f5:d9:67:4b:c4:cd:97:01:9e:37:
c3:78:f3:84:0d:37:6f:78:3e:4d:dc:3b:3b:cd:e4:
ff:45:a6:ef:25:73:13:6c:70:0d:3f:cd:dc:f4:5d:
d9:45:c0:91:1c:43:dc:9f:6f:65:b3:74:7e:3c:b2:
cd:71:22:af:15:09:09:96:82:1b:f4:08:28:a2:f2:
e3:b1:32:8c:6b:a5:e0:6b:e0:e6:d5:64:ae:2c:62:
fd:b9:ca:f8:80:34:f6:98:b7:2b:f4:73:61:dc:28:
69:56:2d:87:ab:d1:e9:df:1c:ef:58:8f:c0:ae:fb:
2f:3d:b1:de:ff:2a:af:55:b6:05:c9:ee:09:b4:5f:
eb:f4:02:0e:fc:3f:81:a9:64:ed:56:fb:01:ea:17:
8b:98:52:19:7b:3f:a7:d6:59:7b:58:07:d4:d0:97:
1c:73:3e:33:6f:c3:11:dc:95:3c:45:74:7e:c2:65:
b2:ed:28:55:ac:43:fe:31:2c:c6:a0:2a:76:aa:63:
38:8b:4d:64:c0:89:ef:7d:8a:f7:da:d3:e2:e6:23:
55:03:c0:f9:f7:ae:2c:8d:e7:67:34:fe:ac:26:4a:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:53:30:FB:3E:28:88:2D:B6:C5:66:F9:FE:24:03:FF:9F:00:77
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0d:2c:5a:df:8e:61:0a:99:23:cd:3e:7b:16:9f:cd:cb:cc:
64:55:f2:37:db:aa:6c:5a:37:0d:ad:fd:5a:80:b2:5d:7f:e8:
2f:94:d9:bd:9a:83:7b:60:98:3c:24:07:6e:1c:d8:74:c5:4d:
c5:9c:a6:aa:57:01:8a:37:a5:6a:53:65:ab:2b:54:51:bd:95:
26:78:53:0f:7e:52:58:55:33:f1:06:a0:02:fb:7c:35:e5:2a:
fa:cf:13:1b:8f:90:a5:be:60:6f:84:4a:f9:3a:0d:0d:62:8f:
1b:b3:fc:6b:5d:25:cf:f3:27:68:53:9b:f0:54:8c:5a:53:4f:
5a:72:45:2f:78:cd:83:fa:77:11:5a:a7:17:16:57:9f:e4:5e:
33:33:36:13:3c:e6:a2:40:b3:6d:31:e7:28:28:47:29:4c:46:
9e:8b:8c:9f:23:7c:89:47:e3:66:6c:95:d3:63:ee:c7:3b:78:
6a:66:36:5e:f0:f7:5a:32:65:a9:29:ef:69:04:56:18:f9:b4:
86:c7:62:ef:c4:73:9c:a7:0c:dd:8e:68:4a:db:b3:68:33:4a:
bf:52:c3:08:d9:d7:2e:0b:55:44:54:cd:60:d3:93:3b:03:9e:
78:3b:07:f6:43:3e:97:2c:a3:1f:ce:b3:7b:3d:57:52:6a:87:
b1:77:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:53 2025 by rpki-client