Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: isJvnFGMk5IrTSNzsp4RZv2EzydAXihVGuFcT514wv0=
Subject key identifier: F4:9B:43:D4:38:DA:E9:02:BA:77:22:0E:6D:E4:78:36:D0:0D:E0:23
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 0198D54DD7571307BE4DA85F38A5D073354D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 06B0
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: 6uZGRtwpJo/FiGVu7aXFhVmDKSM/lileTwMQ5QwQx0Y=)
3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d7:57:13:07:be:4d:a8:5f:38:a5:d0:73:35:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=f49b43d438dae902ba77220e6de47836d00de023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:89:62:72:54:49:7d:9a:1f:21:07:81:cc:
7b:74:d4:6b:6b:e6:e7:25:96:a5:da:4c:a1:31:63:
a9:c5:41:0b:cc:a9:0a:a6:0b:6e:ed:b4:b3:4f:17:
48:f1:0e:0f:8e:90:d5:8e:a4:d2:e3:a8:86:b4:b1:
5b:df:4f:02:fd:4c:78:94:85:5f:0b:91:67:50:d1:
8c:a7:19:60:17:ec:ad:cb:05:e1:a6:eb:82:8f:32:
a0:2b:26:74:4d:19:3c:4b:d5:1d:dd:b8:1d:cc:2a:
4f:ed:72:26:9a:2d:88:b7:ef:73:a4:54:9d:d4:d7:
91:ca:46:35:ac:36:8d:46:af:a5:d8:99:e8:69:58:
1a:58:16:0f:41:06:87:19:ad:2d:78:25:a4:93:63:
bf:35:22:d1:9f:55:95:d8:da:f1:45:e7:5e:b9:31:
4c:4c:c3:83:5b:61:66:18:dc:79:13:52:0d:ac:cd:
fe:28:ed:bb:30:ee:d2:63:fa:37:3e:4c:44:20:1c:
e8:f6:dc:85:e4:b4:30:54:a5:9c:70:c4:ba:fd:71:
18:a8:e1:03:68:ed:9b:41:8a:94:94:f9:86:1b:a3:
ce:a8:6e:f8:9b:76:80:54:d5:eb:70:5c:90:f0:58:
7d:22:54:3a:d3:d9:4e:a1:c4:7e:b7:d1:68:9d:07:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:43:D4:38:DA:E9:02:BA:77:22:0E:6D:E4:78:36:D0:0D:E0:23
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:53:9a:cf:35:91:2d:25:58:7f:3d:df:e2:7d:16:cb:2d:96:
b7:ec:64:ef:03:ed:16:11:55:90:2c:48:7e:91:bf:58:62:27:
3a:34:0a:af:58:e6:a9:7c:4e:87:f0:99:b4:d6:78:6f:0d:15:
06:53:05:7a:36:09:13:ff:c1:9b:8c:25:36:44:97:af:ad:11:
f4:f6:b1:d2:4a:7e:4a:3c:7c:ab:34:9c:c7:cf:0a:aa:dd:d5:
5c:23:10:03:4f:11:69:fa:85:9d:0a:8d:51:b5:3a:cd:77:cc:
14:2a:e6:c6:5a:0c:f0:05:0a:79:a8:c8:37:4b:85:bf:38:fe:
c5:56:c1:25:32:5b:fc:bc:50:4f:f5:b9:94:c9:83:cb:a1:60:
bc:5f:05:72:d7:9b:2b:58:7c:36:b9:b9:b0:46:a5:64:b4:ef:
0c:70:d4:cc:4b:67:63:6a:8a:2f:83:91:a8:3c:a4:a2:b9:98:
a4:58:8e:73:1f:13:79:68:2d:50:78:7d:37:2f:be:ea:76:03:
e9:12:ff:3e:f0:77:84:73:e0:62:de:58:8f:69:85:1e:7c:76:
e7:db:3c:ad:3d:63:19:b8:46:07:d0:40:b7:82:64:8c:b2:03:
54:b8:c8:c9:83:77:ba:c0:33:78:d0:42:87:84:f4:1f:a9:37:
8a:96:38:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:58 2025 by rpki-client