Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: lhwFrMnrbmArf8UszLITllofSPXJVEMiObm+XN0g6Xs=
Subject key identifier: 9B:2D:5A:D9:50:46:0F:CB:1B:95:ED:0D:EC:37:82:67:36:69:BB:94
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 0198D5838608D78338BEAC34A8951D7D59FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0B31
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: lotBuqFWRRQHTFBIAcK8b2pXrrXDPSZajFbekWi5hRw=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:86:08:d7:83:38:be:ac:34:a8:95:1d:7d:59:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=9b2d5ad950460fcb1b95ed0dec3782673669bb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:d5:4e:cb:f6:fa:90:c5:b8:f0:1a:f2:d8:
53:5a:8e:b7:bf:35:2c:b0:3e:3b:3b:f6:ab:f7:3f:
81:08:7d:d2:a1:e7:5e:96:fb:16:16:5a:13:18:36:
d7:71:99:5c:a4:50:10:3d:cd:59:dc:c2:4a:28:0d:
e0:cc:0a:9b:57:7b:35:58:cc:a1:d5:06:fd:6a:6e:
c9:23:89:c5:32:04:50:86:4e:b6:3b:c0:97:39:22:
ce:10:d2:8f:33:d9:b4:7e:ee:d6:ec:41:66:19:cb:
86:a4:f9:7f:86:4d:34:6a:70:0e:b4:1c:8f:e4:96:
b4:05:6a:44:16:9f:ea:99:ba:2a:3a:89:cb:82:1e:
a4:57:2f:61:9a:25:bf:cf:49:12:13:41:b9:a5:14:
60:f4:88:1a:28:15:b0:8c:12:8e:92:a5:dd:9b:a3:
4f:a4:8b:7b:a7:48:6b:a5:79:8a:b8:02:0f:b5:70:
c4:70:8d:6b:92:c4:4b:39:52:70:4f:e6:31:3c:3b:
f2:9a:5c:d0:f8:ab:ba:0a:e9:1f:2a:86:c9:12:57:
2f:8f:06:93:23:13:7c:d8:9a:17:b0:a1:86:ca:40:
2f:36:44:cc:ff:73:48:ef:03:2d:92:c3:30:83:41:
01:26:36:2d:33:a3:97:19:c8:26:e0:63:fd:06:2e:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2D:5A:D9:50:46:0F:CB:1B:95:ED:0D:EC:37:82:67:36:69:BB:94
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:db:c0:88:39:a3:78:ca:3e:4a:f7:d9:bd:cc:d3:48:b8:49:
2c:b5:83:88:33:fa:2d:08:b7:03:a7:b5:82:80:35:2c:7d:5d:
15:52:62:8d:53:ba:7a:7a:f0:cd:2b:dc:fc:00:fa:3b:19:eb:
7a:42:8b:a6:40:d9:4d:de:31:ad:cb:27:49:56:c2:a9:fa:14:
dd:88:73:c8:ce:2b:36:86:1f:b2:fa:07:ed:8c:b5:78:1e:50:
cc:1e:74:b1:dc:95:51:e5:24:87:95:49:db:78:f8:08:f4:98:
c5:02:77:69:fa:c0:ac:d6:b6:95:71:9d:19:c1:a7:3c:59:c8:
8b:9a:7a:d3:d1:da:db:be:ce:41:a2:c8:d4:dd:26:63:9a:fc:
4e:a0:1f:e1:1b:6a:1a:28:8e:5a:86:46:37:7a:01:77:14:05:
ae:10:51:31:24:f6:89:06:e1:1f:a0:f5:3d:09:a2:80:e6:9d:
cb:f4:f6:85:16:7d:ca:3e:64:72:8b:cb:c4:21:19:e4:84:bd:
78:f3:6d:48:0b:08:98:e2:c6:e6:fe:e6:a4:a4:68:a4:ce:d8:
6d:85:56:8f:a2:c3:76:7f:68:c9:46:ca:a8:da:36:31:56:ac:
ce:ee:82:9d:39:98:10:c7:4c:62:64:f8:11:cc:da:bd:67:ce:
4d:ca:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:00 2025 by rpki-client