Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: rdkOMId8n5Yrkm+PKA6dgrT93mVb11tLF2oQJjiLAj4=
Subject key identifier: 49:23:B5:74:C5:19:29:2A:46:90:85:2F:10:92:BE:5E:6E:2B:DB:C1
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 01989034BA3D5AE5F9052575BB2E95B63322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 1363
Signing time: Sat 09 Aug 2025 19:00:31 +0000
Manifest this update: Sat 09 Aug 2025 19:00:31 +0000
Manifest next update: Sun 10 Aug 2025 19:00:31 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: YjMa3KtB1cOF+tydTjsmNAYOquko3oPemdd7jFqRmwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:ba:3d:5a:e5:f9:05:25:75:bb:2e:95:b6:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Aug 9 19:00:31 2025 GMT
Not After : Aug 10 19:00:31 2025 GMT
Subject: CN=4923b574c519292a4690852f1092be5e6e2bdbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:ae:e9:88:47:36:2f:c9:f8:ad:49:0c:c3:
9a:69:35:b4:55:cd:16:c7:8e:7b:83:e4:2c:ea:a5:
56:5c:0b:0d:96:a9:7c:e5:f4:f1:20:8f:7e:a6:30:
43:b8:89:7c:73:8f:f7:12:83:5e:70:a6:70:b8:b9:
94:85:a1:89:e5:1b:14:e0:d5:b9:54:c8:85:d1:94:
5f:64:22:56:92:6b:fd:b3:aa:89:56:f6:c4:f4:5f:
8e:74:ea:3b:0b:74:7f:a7:2f:d7:b8:c8:a5:8d:b2:
8c:f2:b9:34:05:de:d5:19:b6:37:5d:1d:5a:04:4f:
89:57:13:92:38:13:ae:24:cc:a1:f0:2c:b4:d1:5e:
88:b2:2c:78:72:da:62:b0:6f:7b:00:8c:08:d3:5f:
ff:38:1f:43:67:3f:5e:16:62:a7:7c:e8:39:4b:fc:
06:a2:60:ad:aa:06:b0:70:7a:e8:87:16:0c:8c:91:
81:9b:cc:43:ff:f4:7b:a8:46:d7:57:2d:da:8f:ab:
bf:dc:a8:ec:08:19:d4:0b:2e:01:87:dd:a0:b9:0f:
86:7f:20:e8:e9:d6:ec:7d:3e:f8:6f:ec:0a:4a:55:
80:e7:98:b3:35:c3:28:8e:46:2c:3e:49:25:6d:8f:
52:c8:8c:75:13:a3:a5:f4:04:37:71:e9:85:05:27:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:B5:74:C5:19:29:2A:46:90:85:2F:10:92:BE:5E:6E:2B:DB:C1
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b5:c3:47:6b:f3:2b:7d:39:bf:0a:ed:af:fa:39:9e:7a:4e:
d1:6c:d7:85:3b:2d:9a:c9:d5:f6:1b:55:32:fb:f2:32:b0:d6:
be:42:3a:de:20:22:e4:5a:2b:82:c0:a2:9e:58:b6:19:0f:24:
59:c7:24:35:e9:85:ce:2a:89:26:d3:2e:0e:3c:a9:47:37:55:
3a:47:ed:c9:71:13:15:88:cc:61:88:2c:af:35:8a:63:2c:2f:
03:c2:f7:19:34:1e:90:f5:2b:b6:f8:95:1c:1b:e7:cb:7c:6f:
4f:2f:25:51:b5:4b:24:c4:a8:fb:10:90:c4:03:f8:f1:18:31:
b3:92:59:09:3d:21:7e:67:33:44:d0:c4:9c:9c:c7:fc:08:1c:
9c:fe:e7:11:52:0a:17:ef:c0:d3:66:b3:8a:50:50:51:5c:cd:
d0:55:6c:e3:a3:ac:78:6f:11:7e:17:2c:25:c5:62:d9:b9:2c:
aa:f5:7c:20:d5:7d:5c:a9:87:91:c4:74:77:a2:d1:ff:3e:a5:
b8:c1:7e:92:c3:05:07:da:c9:5f:5f:07:e5:d6:1a:d7:2d:9c:
2b:04:c3:21:06:05:0d:1c:ad:6d:43:98:b8:38:74:19:59:c3:
c0:b8:aa:af:08:98:32:a4:f0:64:d9:90:ce:cd:f5:f5:e3:da:
30:5e:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:00 2025 by rpki-client