Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: d2P94KeGI+N05LlNC6OlDK0BhEvpqFfzhBUv3kQlnkI=
Subject key identifier: 2D:FE:A2:7E:E7:B9:D9:DE:CD:BE:D3:C4:04:63:A0:A8:1C:E1:2D:26
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 0198D54EBD3DEAF6D5AF5A3612C2DDC21F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 0596
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: Lr4RpZkpLhDPvgOVWwNTnRv7-RQ.roa (hash: naREFgV4DFvngojbRTMd+xpA/XYzbvIGMFtbMUsVjzQ=)
2: S0bRpdJWK72QH0WUGiObKU-szZo.roa (hash: nahgUHhIrdKyE1HO3U29HHKRqVvxXNA6pcRe9FHTMjw=)
3: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: J4De/4RStve2UZed+qLDs/7PSOme6Q3YjW4OGR5mWwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bd:3d:ea:f6:d5:af:5a:36:12:c2:dd:c2:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=2dfea27ee7b9d9decdbed3c40463a0a81ce12d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:b2:5a:6b:ab:4f:18:a9:f8:6d:ca:41:a5:
95:38:24:88:11:3d:7d:60:ef:6b:41:49:d0:e4:71:
5a:52:22:85:0f:9c:21:f3:1b:16:4e:f9:a7:d9:b9:
66:18:ca:e3:f5:b0:f0:92:80:6f:8c:df:d7:28:1b:
23:7f:53:d0:24:93:37:1e:34:27:2a:e4:51:23:d5:
52:10:d1:fa:13:5e:d9:1c:d9:cb:ec:9a:ff:8e:b3:
7a:5f:29:e5:24:48:3e:4f:6e:b2:df:2d:6f:9e:49:
91:bd:f2:53:54:11:0b:d5:97:20:2b:ea:b4:d9:9b:
36:d3:84:24:e4:41:3e:9d:d7:97:da:9d:2d:61:29:
83:24:f4:c8:f0:fd:da:82:da:2c:af:7d:fe:16:f6:
12:49:cb:45:21:83:15:e2:45:ae:40:08:16:9b:ae:
97:fc:e4:ab:7f:0f:a0:07:50:a8:22:8e:c0:38:4f:
9f:de:8f:63:6f:e6:41:62:32:b6:18:1c:7a:bb:a9:
59:2d:b7:70:5a:19:ed:be:07:77:1f:d8:0e:47:9d:
51:77:fa:82:18:b1:d0:5d:01:3b:d6:ca:be:90:a0:
fe:e5:d4:5c:02:23:b9:d6:92:3e:14:51:90:1b:7d:
b6:9c:d0:1b:03:05:6e:e8:2c:58:99:70:8c:39:1c:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FE:A2:7E:E7:B9:D9:DE:CD:BE:D3:C4:04:63:A0:A8:1C:E1:2D:26
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:50:44:39:0a:a8:79:13:c7:78:6c:4b:06:29:d6:0b:19:e0:
94:db:6c:1e:f1:31:65:16:77:1e:37:30:81:2a:fa:59:17:e2:
c8:3a:68:90:53:a6:34:e0:54:ab:21:8c:e2:4e:51:4a:c1:f6:
b0:23:bc:bd:88:bf:03:41:8d:c6:86:7b:32:a9:0c:4a:58:00:
8a:b9:38:91:03:47:ae:51:ed:0d:c2:42:7c:e1:a6:d4:f3:f5:
5f:bd:af:34:5b:b6:49:3b:e6:54:c1:ed:72:a7:b3:da:9b:41:
94:85:64:f3:96:91:5f:59:96:51:34:b2:6f:cd:53:fb:7c:ce:
1f:2a:12:e1:9f:0b:c4:d6:50:34:47:13:0d:2a:a3:e8:8c:fc:
9a:b1:79:57:31:86:3d:f7:c4:af:1c:5e:0d:a9:28:48:eb:3b:
a7:ee:fc:bf:54:66:3a:3f:d7:7f:5d:55:b4:ab:91:2b:f4:e7:
93:dc:47:87:5a:9b:e1:bc:42:80:46:7c:e9:32:ad:0a:b2:95:
35:d3:00:05:0b:a3:c2:b1:b9:eb:11:0d:ce:47:d0:ca:b8:c8:
fe:f4:61:78:dc:06:26:97:b7:15:de:3e:d4:57:68:39:b2:ef:
55:78:eb:64:92:fc:f3:e4:aa:5c:8d:66:e1:24:6a:e8:f7:64:
cd:8e:0e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:23 2025 by rpki-client