Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
File: YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json)
Hash identifier: GNjTSqwa4CvW7x0gHk67ZjjxF8l5i6+nJIDQQxwQX5k=
Subject key identifier: E3:76:5D:68:36:1E:AA:15:C1:D6:42:E0:B8:C1:B5:8B:72:3B:54:52
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial: 0198744F9E4CB00CB0BED32159C7C960C800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:00:31 +0000
Manifest this update: Mon 04 Aug 2025 09:00:31 +0000
Manifest next update: Tue 05 Aug 2025 09:00:31 +0000
Files and hashes: 1: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: L1FVxCFI2P/gDqNlhvX0cbway/VuWC0zi/sMzG3KDZ0=)
2: ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa (hash: pDodgoORM1hTtwe+JSl0g3mWRdcfDqaXlT1wiKFyqck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9e:4c:b0:0c:b0:be:d3:21:59:c7:c9:60:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Validity
Not Before: Aug 4 09:00:31 2025 GMT
Not After : Aug 5 09:00:31 2025 GMT
Subject: CN=e3765d68361eaa15c1d642e0b8c1b58b723b5452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:21:54:d5:e5:ee:2b:ce:c6:0c:40:58:e0:
8e:f3:ce:e1:70:7b:9a:e6:3f:b0:9f:09:0f:83:c6:
61:5f:97:df:dd:1d:ca:9f:1a:9f:da:2c:70:a5:e7:
5e:9a:21:5a:0f:56:23:da:48:02:36:30:d4:07:c4:
dc:35:99:5f:e8:82:d4:f9:d5:90:98:ba:79:e5:ac:
10:cd:a2:29:fb:f5:b7:b0:c4:4f:2f:4a:14:95:8e:
54:35:0f:89:b7:5e:98:3d:b8:ea:e6:9c:f0:6a:cf:
bd:53:46:f4:7f:e5:1f:7e:ed:ab:43:ae:9f:ac:65:
c7:bc:56:21:b2:42:cb:25:55:4d:41:6f:f5:bc:4a:
af:d6:44:61:73:77:8e:9e:2f:00:d6:48:d6:1b:6e:
a9:9f:75:da:44:75:07:e4:5a:ef:86:25:4f:24:5e:
0b:69:6c:ef:09:29:c8:65:06:d6:c8:8c:bf:53:0a:
bc:da:d8:18:5d:b3:80:b8:8a:5b:5b:0e:8c:c9:51:
08:9b:9c:74:9e:0a:b7:1f:0e:9a:1b:60:57:df:3d:
a3:67:d8:e7:68:1a:4b:9b:57:df:aa:ac:4e:a2:72:
61:6b:d0:25:35:e3:f8:92:c4:b2:16:d2:69:83:34:
d0:7c:0a:f3:b1:1a:83:08:63:7a:44:6c:54:8c:ba:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:76:5D:68:36:1E:AA:15:C1:D6:42:E0:B8:C1:B5:8B:72:3B:54:52
X509v3 Authority Key Identifier:
keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a5:4e:28:7b:26:5e:db:81:49:be:83:b8:bc:6b:76:fd:0e:
28:c3:83:4b:71:53:d3:cc:04:be:0b:86:cb:57:c5:09:a6:cb:
1b:2f:bc:12:3f:6d:e6:c6:a8:8e:aa:08:1c:68:2d:51:59:39:
62:21:fd:3c:a9:6f:ef:37:bd:45:f8:01:6d:44:6d:e7:fb:86:
74:5b:8f:64:54:1e:66:65:cb:34:74:be:e8:0a:8d:16:66:92:
08:69:3a:12:e7:5e:bd:9b:08:9d:12:4e:8e:13:ba:c1:f7:54:
b5:31:94:09:2e:0e:a9:8a:52:06:e3:bb:66:14:ea:66:be:46:
3d:c8:ce:92:71:e7:31:6d:2c:df:c9:2a:a7:5e:40:1e:5b:18:
31:07:0b:f6:6f:bb:db:53:35:db:3c:89:e6:e4:d4:ef:7c:e5:
2c:49:64:0a:db:5a:c4:ab:f5:e3:d9:17:55:c4:3a:f8:8e:97:
7b:49:87:08:66:d7:66:b6:3e:e8:06:7f:0a:5d:e7:08:f2:08:
4d:0d:f8:10:41:07:19:65:5b:05:17:1e:74:fc:87:e9:07:c9:
d8:ac:7d:49:5a:b2:b0:f8:d1:9b:c3:9c:4d:9f:eb:26:ab:c4:
17:2a:12:92:86:22:bf:20:bf:a9:f1:fd:7e:cb:dd:b7:4d:df:
b3:b2:78:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:22 2025 by rpki-client