Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: 7ejES7aazXv3WAm5OMCc7r0R0e2m4JXATUvumx+kLZg=
Subject key identifier: 20:8A:62:1B:1E:CB:CA:A4:2E:93:09:55:3F:E7:3E:72:68:96:91:5E
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 0198D661286880755EEEDB0E47F2D627AE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0AD5
Signing time: Sat 23 Aug 2025 10:02:28 +0000
Manifest this update: Sat 23 Aug 2025 10:02:28 +0000
Manifest next update: Sun 24 Aug 2025 10:02:28 +0000
Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: KaGTrN6VQHdA7W/LVwOvNSycmK9b9cKftu1ya7jpO38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:28:68:80:75:5e:ee:db:0e:47:f2:d6:27:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Aug 23 10:02:28 2025 GMT
Not After : Aug 24 10:02:28 2025 GMT
Subject: CN=208a621b1ecbcaa42e9309553fe73e726896915e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b4:6a:9a:ce:94:1c:a6:50:78:7f:13:0d:67:
a0:c7:3b:a3:9b:03:e3:93:b0:c0:d6:4a:2f:b6:19:
cd:76:1d:17:7d:3e:c4:cf:35:e2:5b:17:0d:41:ef:
8f:5c:e3:29:bf:19:31:fd:81:16:5b:52:18:6d:85:
98:26:75:d4:7f:64:0a:ed:cc:48:6d:f7:e4:1c:f6:
ae:c0:6a:8c:69:7f:48:77:44:3b:43:f5:ff:cc:a5:
7c:8e:db:34:80:0c:b1:d9:0a:37:f7:f5:97:a4:8e:
51:91:64:6c:c3:65:11:1f:53:a2:33:3c:20:f6:12:
8b:57:e7:10:35:c0:8f:3b:04:b9:dd:43:79:f5:b2:
0e:74:22:8c:ba:bb:9f:e6:a7:42:ae:bc:4c:26:e6:
6d:a0:e5:4f:00:5b:d9:21:15:68:dd:dd:4b:f5:c4:
f3:06:33:5d:79:dc:94:09:f5:1d:98:85:a0:1a:4b:
b7:52:15:89:f7:1b:21:f4:76:25:1f:67:6c:d5:00:
95:3a:14:aa:8f:53:fc:3b:88:1f:7a:8d:07:5d:b5:
a9:e6:7a:af:69:69:14:d4:41:09:03:f5:a1:16:d2:
e4:eb:19:59:4a:6e:88:7b:a5:d1:de:68:e2:84:8b:
3a:77:da:21:70:9c:25:c1:6c:38:97:72:d1:30:be:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8A:62:1B:1E:CB:CA:A4:2E:93:09:55:3F:E7:3E:72:68:96:91:5E
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:c8:10:fe:0d:6e:80:86:cc:09:af:53:5b:54:3f:bf:f6:
c5:9d:63:11:19:db:01:2c:05:bf:66:b0:dc:4c:8f:31:bf:cd:
61:52:9c:f1:d1:e0:78:13:85:fa:1b:d9:22:8f:01:47:c1:89:
21:2a:07:ff:e3:d5:1a:0e:d0:66:62:68:79:44:81:9f:3e:4f:
3e:34:87:69:2b:9a:f5:43:c8:39:71:5f:d6:71:c8:a8:4f:7b:
de:97:15:ea:b0:55:b2:e8:ac:64:61:85:8e:92:cc:ae:e5:28:
82:21:18:cf:48:d0:8e:7e:43:8b:07:4b:42:8f:4e:f6:ea:0f:
8a:48:1e:96:08:d3:d5:f1:3c:22:2c:86:9e:48:18:9b:df:ae:
d4:ce:bd:f2:a2:07:6d:d4:1f:86:02:bc:6c:85:14:ab:f6:4d:
b3:2f:f3:59:36:7c:67:fa:04:84:40:46:ef:f5:f6:b0:e4:82:
a1:d1:2f:dd:b5:86:e1:a7:a9:5c:ce:9b:10:c5:33:56:3d:21:
00:4d:4e:4d:6e:7c:a1:71:45:c3:88:ce:da:50:ff:a3:09:18:
1b:20:6d:94:e7:49:36:c9:30:c6:2b:2d:12:a4:95:b9:c1:a9:
89:f5:9f:06:01:01:37:bb:51:d2:2c:07:7a:22:51:45:8e:20:
4b:92:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:15 2025 by rpki-client