Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: kQUuRdp4Xba+DKvJFFO3Uq8TcFOVnbhvk/lr2fJ8ju0=
Subject key identifier: 45:14:5C:8E:41:41:F8:89:95:4C:99:4B:63:C1:08:39:59:C5:40:73
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 01987D8AE1E9D8AE0E4653598CE56DD58DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 0304
Signing time: Wed 06 Aug 2025 04:01:50 +0000
Manifest this update: Wed 06 Aug 2025 04:01:50 +0000
Manifest next update: Thu 07 Aug 2025 04:01:50 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: kNRgzUokBheMQbY4JqfOUYkkprwzma6qCsljNd2LJFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:e1:e9:d8:ae:0e:46:53:59:8c:e5:6d:d5:8d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Aug 6 04:01:50 2025 GMT
Not After : Aug 7 04:01:50 2025 GMT
Subject: CN=45145c8e4141f889954c994b63c1083959c54073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:bf:a2:7f:c1:58:6c:35:f6:51:51:57:dc:
9a:71:08:df:60:fb:6a:4a:d2:09:2e:38:99:27:01:
ea:2b:6d:88:98:47:a9:08:c1:80:67:ef:0a:35:c9:
fb:da:32:d7:f9:08:78:b9:ff:96:5e:90:62:10:6f:
4b:db:90:54:94:7c:9b:32:7e:ca:2f:03:37:dd:be:
4e:7b:97:ec:b3:64:8f:e1:dc:07:83:2d:7a:ab:de:
1c:9f:6f:45:a6:14:3c:50:34:1e:5b:59:0b:69:fa:
e9:43:ad:7c:4e:57:c9:87:ed:4d:30:bb:8b:7f:4d:
93:c0:9c:6d:41:f2:9b:19:ec:d7:c4:a1:49:6d:25:
5c:e0:6f:f0:54:9d:f2:f9:cf:32:b2:9f:8d:ae:f8:
d6:a8:54:a9:d9:1f:e4:f5:9d:94:6e:ff:ab:68:b9:
ee:68:ab:3b:78:97:ee:b8:35:ae:e0:7f:35:9d:1d:
cb:55:dc:1b:bd:e0:db:8e:84:49:ed:6e:bb:e0:71:
0c:a4:75:e0:60:e5:7e:c0:26:0e:ec:7f:27:cf:a5:
94:cc:41:a9:0e:9e:7c:05:9f:88:65:19:9d:91:f4:
e0:7c:02:8b:5c:af:39:57:89:40:85:a6:c6:d7:9a:
88:91:93:fb:68:f9:fd:f1:da:7c:a8:23:50:8d:b2:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:5C:8E:41:41:F8:89:95:4C:99:4B:63:C1:08:39:59:C5:40:73
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:34:c2:b6:6d:80:98:e1:d1:cb:fa:47:2c:8d:86:96:75:59:
3b:e6:6d:29:6b:c3:7d:6e:1b:1e:27:6f:a8:4e:02:ff:9f:d5:
a8:a1:83:d6:4e:93:11:0d:6b:49:a8:2d:e7:a4:bd:5a:49:d6:
fe:3a:e5:db:1f:4c:54:6c:37:1b:09:53:9b:e1:f4:8e:b5:62:
f4:3f:23:af:20:fc:0c:c0:31:c4:9a:de:58:6a:31:58:32:e0:
2c:dc:11:7d:38:73:f0:fa:b2:57:90:4b:4d:ce:5f:4e:d3:01:
f6:d5:75:a2:24:97:9e:3e:d5:25:62:51:ab:d5:f4:44:b2:ba:
62:c3:78:97:c6:f4:f6:7d:83:56:99:5e:3c:c8:3f:3e:f7:fb:
d7:ec:fe:d8:ea:0f:27:9f:73:b0:82:7a:0f:38:dd:92:f3:c5:
4c:04:cb:a2:c8:fb:e3:53:e0:46:f4:5e:1c:43:02:2b:5f:75:
b5:f0:11:b9:1a:0e:66:9e:58:4f:51:4f:7f:ad:f0:45:78:95:
d9:ef:61:e1:06:ea:1f:25:57:47:09:ca:cc:b0:89:96:6e:f4:
c5:98:df:f2:2d:ec:af:39:72:c0:62:42:56:ab:f0:28:36:1e:
c2:77:3e:0b:46:ed:fc:9e:a5:68:2f:66:91:ca:ac:7a:52:52:
45:d5:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:39 2025 by rpki-client