Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: Ca2Prlecy07tSc7siSGdqC2C4CzAR7ENZJ81psMuXhE=
Subject key identifier: 28:FD:35:77:AB:EC:F2:48:BA:5D:D3:2F:D1:FC:52:C8:2E:BD:DB:B5
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 0198808AF6BFBA5A02740B555F19BE1D763D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 18:00:47 +0000
Manifest this update: Wed 06 Aug 2025 18:00:47 +0000
Manifest next update: Thu 07 Aug 2025 18:00:47 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: 7uM6/T/FvRChZCuIgFJ0xKNgfz5tLD7rcXgCM0iDljQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:f6:bf:ba:5a:02:74:0b:55:5f:19:be:1d:76:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Aug 6 18:00:47 2025 GMT
Not After : Aug 7 18:00:47 2025 GMT
Subject: CN=28fd3577abecf248ba5dd32fd1fc52c82ebddbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:53:32:72:a4:e5:15:79:ae:b5:66:6b:0e:
c6:01:d8:d8:5b:17:e6:25:f3:a9:4f:3f:21:0f:86:
9c:a4:b2:a5:8d:b0:5a:6f:d3:06:2d:dd:1c:dc:e7:
7d:60:26:8c:4e:09:2e:2e:04:88:a5:43:94:98:28:
4a:5d:84:fa:86:2e:fe:49:dc:83:c6:c2:7e:c3:d3:
14:cd:71:2a:2d:11:83:0d:bc:cd:fe:86:5d:1b:1f:
4e:18:67:69:3b:7e:5d:c3:4c:a6:f8:93:08:35:a2:
4a:bb:14:29:fe:63:47:7a:9c:65:26:6d:4d:74:84:
d6:eb:f9:ae:76:b4:8d:c0:57:74:0d:51:0d:51:1f:
4b:1a:48:f2:bf:bb:db:ae:da:5d:d0:c1:2d:7d:51:
a8:c2:97:df:ec:a8:93:ac:80:61:02:35:6c:57:59:
f2:69:cd:c5:10:7b:4e:5a:8b:b9:d3:12:af:34:33:
1e:18:2d:fe:f8:20:b0:65:11:ad:3b:25:39:8d:f8:
0e:25:94:5e:e6:ba:15:b7:a3:54:84:4b:6b:b7:90:
22:1b:4f:55:21:39:f6:a8:31:5f:75:3a:6e:aa:6f:
54:d9:82:bd:1e:0e:49:74:7c:8e:2f:f8:7c:77:71:
12:3a:15:57:17:15:ae:3f:c3:aa:bc:35:3c:a7:bd:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:35:77:AB:EC:F2:48:BA:5D:D3:2F:D1:FC:52:C8:2E:BD:DB:B5
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:30:d0:1e:eb:9a:02:bf:80:ed:da:25:68:32:72:5a:82:58:
18:2b:2b:79:1a:2d:fd:87:c7:9e:aa:a7:3d:76:3a:bc:8b:b5:
70:d2:0f:cb:9f:69:47:e4:1b:11:2d:f0:7a:ac:d9:38:51:9d:
74:96:a8:cb:94:69:6d:3a:9f:d2:64:98:9c:04:23:18:e1:a3:
ad:33:fb:1a:e5:aa:95:01:0f:01:8f:7c:db:06:43:3a:d1:3e:
71:0b:54:70:89:8e:37:3e:a6:67:a8:70:e4:9d:4d:18:99:1c:
01:97:ef:ac:4f:00:37:8c:2b:01:1a:f3:03:9f:01:4d:b6:fc:
69:11:56:9c:01:6f:cf:bb:66:7e:d0:3e:80:8d:58:6f:09:01:
ba:bb:12:e4:ca:bb:7e:46:e5:40:da:ea:48:31:1f:17:be:a0:
42:4d:7e:8d:04:65:9b:f5:60:e0:62:8d:e2:dd:8d:95:34:c5:
90:2c:aa:c7:6a:9b:1d:57:9c:9b:63:c4:8f:43:c2:10:31:fd:
58:0c:f6:e5:78:a1:78:d1:74:65:ec:12:1a:ac:8e:2c:1c:d7:
73:80:e8:03:d9:e9:58:3c:de:28:0d:e0:c4:c7:7f:da:22:5f:
f5:2d:81:88:38:f0:9f:9e:ab:07:0d:84:10:58:06:72:47:0f:
ee:f1:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:44 2025 by rpki-client