Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
File: YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft (raw, json)
Hash identifier: ftAxbdpUuGnyYNJx0JBoTFRbH+yxETYbEqSLghI2g1U=
Subject key identifier: 91:2A:A0:99:66:EC:49:0F:C4:CC:B0:A3:03:E0:05:4F:B1:D8:66:2D
Authority key identifier: 60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
Certificate issuer: /CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Certificate serial: 01987E9C581A360504E01836D06146CC7275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
Manifest number: 0279
Signing time: Wed 06 Aug 2025 09:00:32 +0000
Manifest this update: Wed 06 Aug 2025 09:00:32 +0000
Manifest next update: Thu 07 Aug 2025 09:00:32 +0000
Files and hashes: 1: YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl (hash: gCbkb+1F+YBO9u5MdrGHD/bUS3eFGeo0cfuxHHXeQWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:58:1a:36:05:04:e0:18:36:d0:61:46:cc:72:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Validity
Not Before: Aug 6 09:00:32 2025 GMT
Not After : Aug 7 09:00:32 2025 GMT
Subject: CN=912aa09966ec490fc4ccb0a303e0054fb1d8662d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:e0:f7:00:8e:9e:33:a0:3b:f3:50:58:57:
5e:65:4b:86:1c:ee:7a:df:3b:40:98:ae:1d:47:ae:
da:64:45:63:c2:cc:e0:54:e5:19:57:b8:6b:74:9f:
89:0e:a0:a6:50:2a:c6:96:96:a8:bc:a2:58:55:97:
5e:38:9c:04:1b:1c:54:c7:89:b3:f0:69:1a:22:45:
de:79:50:11:5d:ce:fd:87:18:9b:ce:43:aa:31:02:
00:dc:b5:20:86:d5:bf:79:5c:c4:d7:f3:e9:1c:6e:
65:61:08:23:e9:de:28:7b:5f:f2:a1:16:d5:54:66:
5e:ae:32:66:a5:77:98:18:0e:9d:e8:11:25:a6:d1:
8c:d6:50:46:6c:b6:74:a9:60:86:b3:c0:84:dd:c4:
e3:7a:88:b4:0c:f6:93:02:33:26:fa:ed:cb:e8:8d:
c3:42:28:89:37:4a:d5:7f:6c:2a:77:23:bb:dc:40:
8b:02:e5:1b:2f:c9:9a:f1:5a:24:dc:51:e6:d5:d9:
cb:6d:37:f6:91:b6:27:5c:66:f3:86:4f:42:fc:8d:
91:bf:3f:22:92:d4:7e:c4:35:c5:b7:d9:97:ce:3a:
a8:c1:55:91:b4:9d:58:05:e0:68:54:75:5f:59:87:
a1:40:bb:b6:e3:f7:d0:7a:d3:80:c2:65:3d:82:02:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:A0:99:66:EC:49:0F:C4:CC:B0:A3:03:E0:05:4F:B1:D8:66:2D
X509v3 Authority Key Identifier:
keyid:60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:39:8a:f3:56:94:7d:b3:1c:db:97:2d:89:7f:62:35:28:
bb:b1:b9:8b:71:39:86:a0:f8:ae:2c:b8:f1:cb:30:71:29:bc:
6a:f1:ea:e0:df:ed:63:ff:7b:0d:22:d0:b0:f0:59:42:85:54:
49:45:23:e5:ff:44:c5:f0:d0:50:9e:b7:78:cf:84:fb:66:b4:
41:35:eb:c3:6f:0d:ab:dc:44:de:1a:48:39:82:b7:66:3d:61:
17:49:3f:bf:50:01:7f:81:05:f6:01:0f:f1:69:f2:de:81:0e:
11:10:7b:aa:ac:59:6e:16:cc:6f:4c:90:d7:3b:c3:a5:91:ca:
db:7f:18:eb:b8:96:8b:26:c7:fe:56:72:a8:cd:dc:89:ee:8d:
d2:00:29:84:e3:dc:62:1b:64:a2:fc:50:10:66:e0:a2:05:f7:
1f:25:e6:4b:54:d7:d5:25:17:80:b3:c1:3b:f0:2d:5d:28:96:
f3:54:fc:f9:51:1c:d0:17:18:cb:09:4f:24:5b:70:01:fa:b9:
51:6a:8a:cc:13:cc:f9:7b:4f:ec:fc:fe:54:9c:ab:e5:7a:1d:
c5:ac:ff:ae:30:91:31:8a:fd:dc:05:84:d7:7d:27:b4:91:1e:
77:c5:3e:52:81:56:ae:b4:97:49:b8:60:df:1f:cb:78:28:95:
a5:f4:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:35 2025 by rpki-client