Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier: uNC8x+6P0AidQy/vgu29fhesGJLTS4F5ZxKJLOZK734=
Subject key identifier: D8:AF:BA:1F:5B:1E:DA:C3:9D:54:AC:26:77:71:3E:B6:D3:CC:94:77
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial: 01987419592E5BBF75344CC97FE05F8F0165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number: 0DA0
Signing time: Mon 04 Aug 2025 08:01:14 +0000
Manifest this update: Mon 04 Aug 2025 08:01:14 +0000
Manifest next update: Tue 05 Aug 2025 08:01:14 +0000
Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: Y+x5wBc7HqHZxu6GaipbehQVjhE7aCxTMWmppFQimjo=)
2: dC8gOmayB-chyoQvohvN-0T41MI.roa (hash: CEU2++abo0F1b85LSOtJ8mERuDAvIcX+n86rAzfnRdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:59:2e:5b:bf:75:34:4c:c9:7f:e0:5f:8f:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Validity
Not Before: Aug 4 08:01:14 2025 GMT
Not After : Aug 5 08:01:14 2025 GMT
Subject: CN=d8afba1f5b1edac39d54ac2677713eb6d3cc9477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:94:87:ab:66:13:d9:e0:15:f1:8d:6d:2e:
de:a9:53:d9:02:26:2a:f0:b4:70:31:25:73:48:db:
0d:94:4a:5d:5b:28:23:4a:ae:93:0f:88:79:14:ec:
e2:dc:2a:72:10:25:4c:85:ca:bb:f1:ac:09:e8:3a:
d5:06:00:1e:04:74:73:28:18:bb:74:c2:c0:7e:26:
a0:93:53:b4:cf:1b:ce:25:3a:48:26:44:10:f4:da:
fd:82:61:c9:1c:fb:d1:ad:ce:3e:3b:f4:4f:e6:3e:
0c:af:87:97:8b:ea:84:bc:1b:22:7f:61:3e:9f:d4:
bd:85:30:d5:f4:d1:bb:f2:45:95:5e:f1:0e:1e:d4:
84:49:9e:b8:b7:d8:ce:ba:74:7a:42:51:74:c1:07:
38:be:d4:b5:99:ca:2f:fa:3c:72:fd:4b:1f:f9:a2:
06:81:5f:c3:80:e8:d5:8c:6a:32:76:e2:9c:dc:9e:
bf:a5:e7:c8:9c:f8:6d:d4:a5:0a:6a:1f:1e:50:56:
66:b2:f5:15:60:b9:44:c8:3f:84:bf:71:10:ff:1e:
98:07:59:1f:ea:41:2c:f4:10:d1:c2:59:15:ec:64:
2c:f0:ee:d8:6f:d8:2e:71:e9:b1:cc:0e:f9:5a:64:
44:39:09:7b:ef:ad:b8:ba:de:f0:5e:26:a8:49:4a:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AF:BA:1F:5B:1E:DA:C3:9D:54:AC:26:77:71:3E:B6:D3:CC:94:77
X509v3 Authority Key Identifier:
keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7d:1b:e6:94:0c:06:78:70:43:1f:89:fc:f0:1e:b3:bc:cf:
c8:41:03:24:0f:3a:d2:3b:c8:ff:a9:55:4f:28:9f:15:ae:11:
ec:5c:4d:4c:a4:36:60:a4:b7:2e:ec:a2:55:93:11:c4:75:5a:
60:d2:51:27:5d:fc:a2:d7:43:96:e0:e8:08:ae:2c:89:f8:e0:
ef:21:b2:8b:d0:11:bd:50:29:5e:87:02:44:d7:92:c2:23:25:
87:10:c5:47:ea:94:0e:76:df:2f:b7:0b:db:50:ca:e5:8b:09:
03:5b:87:b7:9c:52:40:ea:b2:a0:1d:ac:71:28:54:ee:99:19:
85:47:fa:3b:01:be:98:55:88:44:25:ee:a5:e3:00:48:95:1b:
34:19:09:90:ca:f0:1b:5f:ef:c1:a9:d1:2e:ec:f4:72:4f:a7:
fe:29:87:c7:6d:58:d4:ca:1e:73:e3:57:27:70:f5:37:a6:5e:
23:11:c3:09:a4:6d:08:3a:2b:21:d0:da:16:74:bf:22:db:08:
ef:e8:8f:aa:c1:2a:d0:17:c2:0f:9e:7d:88:ad:a2:4e:be:5b:
00:38:68:42:3a:b6:8b:5d:45:11:09:ef:ba:44:a7:6e:87:64:
2d:86:4e:d2:f0:b2:4f:32:84:35:07:7c:f1:f5:67:38:39:b1:
bd:09:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:10 2025 by rpki-client