Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: VU77Qg+fArTVF6X5/I8QSGwmE+jrQtqT1J88l9RG8NU=
Subject key identifier: 38:48:71:AF:1E:28:65:EE:8A:EB:77:C3:3E:3F:77:A4:91:B7:E0:AB
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 01989712A2546D50DC6021479412CE88CA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 08CF
Signing time: Mon 11 Aug 2025 03:00:37 +0000
Manifest this update: Mon 11 Aug 2025 03:00:37 +0000
Manifest next update: Tue 12 Aug 2025 03:00:37 +0000
Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=)
2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: xjSocCAyYExVqtc8f1S7u3jQD5wKauVehIfG4w8ZMJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:a2:54:6d:50:dc:60:21:47:94:12:ce:88:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: Aug 11 03:00:37 2025 GMT
Not After : Aug 12 03:00:37 2025 GMT
Subject: CN=384871af1e2865ee8aeb77c33e3f77a491b7e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:cd:95:30:19:a9:db:a8:aa:9d:9d:e0:67:
7b:c9:11:ae:85:14:fb:0e:2f:5f:fb:b4:d3:1b:57:
49:82:ed:f0:d7:37:dc:fe:69:7e:11:46:2c:a5:8f:
cd:dc:ec:77:90:4c:9c:ab:87:b3:e0:26:d8:35:25:
b9:d9:37:3c:2d:1f:9b:56:8a:60:4b:5d:49:59:4c:
e6:6e:1c:ca:b9:8b:10:fc:2c:c3:21:f3:8b:2e:75:
34:ac:54:cc:74:af:7f:7e:c2:53:8c:c3:f5:11:5b:
14:4c:dd:38:fc:2e:e0:85:2e:2a:97:e3:99:a2:7c:
c6:50:8f:59:e9:c4:7b:1e:6f:c0:6a:97:5f:d5:ab:
ef:e2:3e:ad:04:2b:5c:2a:d5:f2:c2:46:d3:b4:bd:
83:86:a1:0e:89:dc:29:ab:eb:19:6b:bc:48:f5:08:
a5:9e:13:e1:49:2d:5c:ca:57:1d:ba:2e:b0:10:b3:
c9:5b:96:a0:a3:a5:75:85:5f:5e:96:82:42:fd:a0:
72:28:57:7c:62:24:3e:52:34:c2:43:ec:46:7e:f3:
82:6d:70:2b:3a:55:17:8e:2d:9e:a8:d3:62:74:55:
a0:7a:ff:b8:20:ae:85:2a:fe:94:d6:e0:6d:46:b9:
ec:94:ea:12:89:99:de:be:d7:f0:19:f6:8b:02:38:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:71:AF:1E:28:65:EE:8A:EB:77:C3:3E:3F:77:A4:91:B7:E0:AB
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a0:a6:ab:45:0e:04:d5:9b:39:19:de:e7:e2:a0:a7:3a:95:
47:6c:f0:2c:9e:b7:9c:ab:b7:db:f9:36:8a:27:9d:38:03:b3:
5c:f2:43:dd:a2:36:ce:8d:a8:71:18:89:21:93:9d:79:7d:8c:
c2:a1:fc:42:08:9b:84:da:79:6d:eb:cd:c8:a9:fd:42:4b:17:
eb:68:41:39:49:7b:2b:a2:36:79:b7:7c:1c:d5:74:c6:a2:55:
67:6d:f5:8c:b7:5b:a2:7c:50:99:97:74:5a:c5:fa:1c:68:89:
16:e3:c8:62:33:70:b7:4f:fd:61:ab:ca:b9:3c:83:ca:e4:82:
59:e9:2b:ec:2a:da:b7:19:9e:0c:91:80:a7:c7:9c:4f:78:d6:
ce:96:fc:9e:98:7d:eb:04:2b:ef:55:13:60:74:1c:b5:d5:93:
27:11:6a:48:26:1d:74:87:32:06:2f:25:59:d8:93:e2:82:99:
30:dd:a1:50:9f:6e:29:13:0c:65:83:cb:64:db:b4:55:1d:d5:
f3:ba:f9:fb:54:d1:37:92:e3:92:a6:5c:b8:3c:2e:82:27:a7:
a0:60:52:fb:96:ca:77:25:47:a9:12:fc:be:1e:5d:1e:e8:f0:
0f:61:80:7b:4b:3b:a1:5d:7f:db:2f:48:ee:2f:e7:fd:3a:42:
0f:fa:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:14 2025 by rpki-client