Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: +F/OX08dibLyQ1zPPUwC9+hqdANKtJ3pBypZZgLpGxs=
Subject key identifier: 95:DE:9F:1E:83:09:66:82:71:9A:F6:53:88:07:42:32:0F:C5:A5:C6
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 0198D6985032CA06857EE1444F3B56A67CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 032B
Signing time: Sat 23 Aug 2025 11:02:42 +0000
Manifest this update: Sat 23 Aug 2025 11:02:42 +0000
Manifest next update: Sun 24 Aug 2025 11:02:42 +0000
Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: yafvnptUq5C0Y+DK56SBA9xK90YeXeGcuXfe+x0m9Ps=)
2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:50:32:ca:06:85:7e:e1:44:4f:3b:56:a6:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Aug 23 11:02:42 2025 GMT
Not After : Aug 24 11:02:42 2025 GMT
Subject: CN=95de9f1e83096682719af653880742320fc5a5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:15:82:96:ba:fd:07:12:3b:0d:5c:24:06:
4f:43:c7:7b:59:52:ca:b6:cb:6f:6e:58:9a:14:16:
be:bb:9b:74:4f:36:5e:73:33:1e:ae:43:1e:ee:b6:
57:38:d4:b8:77:19:d6:e5:56:c8:c4:b5:93:9c:8b:
07:31:4a:41:2b:5b:fe:9c:65:a2:8c:7f:46:8e:73:
38:d5:ff:fb:12:83:d3:89:44:9d:df:3f:c6:de:2f:
0f:9e:63:44:bc:37:1d:97:38:ba:32:9b:cb:7b:28:
23:01:d0:23:ce:76:1e:c9:ae:20:a6:8e:80:b1:a0:
4f:26:b8:a1:76:3c:f9:bc:c6:81:b2:5a:0a:8f:c2:
85:19:ee:87:67:8f:88:b0:4d:d7:60:3d:45:b3:58:
e9:b7:7c:ed:fc:90:8b:3a:4c:af:51:22:11:66:e1:
46:54:73:fc:a0:20:6b:74:6f:84:eb:da:f7:24:db:
4a:2d:5b:2e:f0:54:38:a5:e7:c6:88:e6:30:84:45:
98:47:d5:fb:3e:90:5c:ac:37:c2:1c:59:46:8f:88:
d9:1c:7a:a4:c3:2d:e0:2c:ad:f4:49:db:f9:23:3d:
f1:56:94:6f:e1:76:56:c3:b5:0a:ce:ef:8b:ff:9a:
86:c1:fb:f3:b0:bf:17:d3:33:00:31:79:e7:de:ca:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:9F:1E:83:09:66:82:71:9A:F6:53:88:07:42:32:0F:C5:A5:C6
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e0:2d:2b:96:55:43:b2:a9:6b:c5:3d:ed:87:6d:12:b6:95:
bc:ea:73:88:eb:a1:1b:21:fc:c6:d5:bd:3c:4b:ed:b6:41:fe:
75:b0:be:0a:97:df:84:8a:90:e2:aa:f8:5f:cf:0d:6d:5e:b4:
8d:35:a3:45:44:08:2b:25:d1:df:95:01:f2:53:8d:95:26:d6:
a5:56:f9:28:7f:bd:11:7b:99:d6:19:0d:25:97:82:e2:4b:1e:
2f:98:e3:67:eb:e9:29:0e:ba:d9:a5:3b:22:d3:82:5b:0b:e6:
08:93:65:8c:a3:c6:4c:50:88:61:a0:4b:c0:f4:8c:a1:eb:ca:
f1:39:4a:e6:85:2e:48:f3:be:92:4c:a1:ce:51:ce:ff:50:d7:
25:74:65:c7:31:da:68:48:0d:04:67:94:57:a8:9d:12:cd:bd:
43:e8:54:3c:6e:c6:f2:d7:dc:c0:a7:72:37:94:e1:d9:78:78:
9e:6d:9e:1a:c4:51:b5:98:59:2b:69:06:b8:ae:07:c4:d8:75:
a1:c5:31:30:d2:3e:d7:01:8a:05:a7:82:a7:b3:9e:fe:1f:3a:
96:36:03:90:ff:be:5e:85:48:d3:f9:5b:c7:60:70:19:7f:77:
20:97:28:40:8b:55:69:c7:3e:5a:e5:b7:f7:78:77:d1:cc:b9:
0b:15:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:07 2025 by rpki-client