Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: c8+uAoUS4advRU42HtDJEViiz7j8mLjBJ8g3rSoPO84=
Subject key identifier: B9:FF:4B:B2:AB:B0:29:8A:6F:54:6D:8C:1F:5E:07:D5:51:99:5E:F2
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 0198960048D95878BAE4D21E4EAE7A1D5648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 22:00:57 +0000
Manifest this update: Sun 10 Aug 2025 22:00:57 +0000
Manifest next update: Mon 11 Aug 2025 22:00:57 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: 4UMxdD0p4KB9lw6zGxebMsTBRXlsM6Q3ioutgtd5Ld4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:48:d9:58:78:ba:e4:d2:1e:4e:ae:7a:1d:56:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Aug 10 22:00:57 2025 GMT
Not After : Aug 11 22:00:57 2025 GMT
Subject: CN=b9ff4bb2abb0298a6f546d8c1f5e07d551995ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:8f:61:9d:db:1a:d4:d6:02:fa:36:69:f6:
38:22:63:80:6c:04:15:4e:f6:fb:e5:8d:87:7c:21:
c6:26:ea:8b:a1:02:ee:5b:ef:2b:da:26:ce:19:e6:
ac:a0:bb:cf:bf:07:6b:b1:ae:ff:ba:6c:7e:f5:71:
87:b8:3a:82:b5:b3:54:26:10:84:df:bd:73:69:fb:
29:1f:d3:b1:ea:00:b3:6f:0c:1b:33:c7:19:a2:91:
f3:c7:d6:d0:64:66:56:8c:b6:1b:a6:5a:ea:c2:dd:
5b:4a:f6:67:f0:6c:91:c9:15:b6:69:c0:cd:4f:27:
da:40:30:44:eb:cf:3c:48:73:ca:e0:0f:a8:80:c7:
e1:60:9f:20:e0:86:e2:0c:73:5c:05:72:7c:18:81:
7b:ed:5c:ec:66:5d:62:f0:f1:60:97:65:c0:75:ba:
43:52:c4:b3:5c:f9:6f:6f:5d:c2:26:f9:13:30:36:
29:dc:84:d2:e5:2e:40:bd:0a:cd:d2:ba:fe:e4:e2:
e2:af:ba:33:38:e2:c6:94:9e:45:61:91:f8:9e:32:
56:0d:dc:59:43:14:40:7d:e6:4a:b7:85:5b:e2:3f:
15:ef:7a:fe:f3:f8:c9:c5:91:d9:36:e3:88:66:92:
e2:00:c7:00:56:68:e3:c1:a8:54:5a:21:b8:7b:5a:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:4B:B2:AB:B0:29:8A:6F:54:6D:8C:1F:5E:07:D5:51:99:5E:F2
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2f:63:cc:70:da:0b:a5:a9:07:47:fd:54:0c:b0:f4:e0:0c:
c5:64:68:96:b8:4a:65:2d:7d:1b:f2:53:98:41:f2:b2:2d:e1:
21:16:74:d6:af:9e:04:54:d3:97:f0:8e:58:53:76:fb:54:8e:
57:d2:bb:19:0e:29:e2:8f:a0:63:1c:1b:80:74:23:5c:be:87:
8a:52:cf:e3:26:2b:00:61:69:78:1e:97:b8:0f:39:70:d2:37:
29:f9:07:6b:ce:12:9e:ec:26:76:1c:b4:bb:98:f5:81:9b:65:
48:01:44:ad:91:c4:be:90:df:53:22:6e:8c:a3:4c:cf:9e:f3:
ab:9f:ce:8d:d3:bb:e3:80:ce:95:75:0e:58:c1:7a:35:2c:f3:
ad:33:82:97:e9:9e:85:a8:c1:be:6a:3c:5b:8d:5a:47:81:ab:
17:ee:21:f3:0e:ac:dd:5f:9e:1b:b3:4a:8d:71:7a:b5:25:4c:
29:77:5e:66:98:ac:86:6d:03:22:11:a1:d2:1c:ab:bb:42:d0:
3a:78:61:99:fc:b3:65:79:ae:6d:c8:b9:9e:d7:86:33:fa:1e:
ae:b2:72:52:25:fa:e6:f0:40:62:60:87:3d:23:0c:ea:d7:b5:
db:5a:3e:9e:8d:40:90:0a:03:a5:b4:62:6f:f8:02:80:c0:4a:
7b:5d:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:20 2025 by rpki-client