Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: E4cMncNXTfj0Xzqo1Xu9MB2WJ5JjhJPnZkTGCTwdDcg=
Subject key identifier: 6E:C2:96:CE:E5:D3:09:4C:F4:5C:A6:27:43:42:42:C9:6A:FE:9C:3F
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 01987D1C96B18E952E8C9704CD590E428DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0B21
Signing time: Wed 06 Aug 2025 02:01:22 +0000
Manifest this update: Wed 06 Aug 2025 02:01:22 +0000
Manifest next update: Thu 07 Aug 2025 02:01:22 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: zP+fyjIZrJn1X6e5HWGSPO3hkWKyu9DxdkbHKmRHAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:96:b1:8e:95:2e:8c:97:04:cd:59:0e:42:8d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Aug 6 02:01:22 2025 GMT
Not After : Aug 7 02:01:22 2025 GMT
Subject: CN=6ec296cee5d3094cf45ca627434242c96afe9c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:3e:27:be:3a:5b:5c:f2:21:61:8a:85:4e:
c1:2a:2e:d9:ad:9f:3e:3b:7c:c7:c4:61:24:69:28:
0c:9c:1e:5f:86:1a:4f:9d:c4:8b:a4:d1:95:27:43:
f5:ad:9b:8e:13:e2:4e:fc:8c:de:df:e3:1e:6b:45:
54:5f:4c:0a:bc:55:0b:f2:22:89:b8:d2:43:9e:cc:
33:64:b3:20:33:27:60:d5:3f:d8:1a:0c:41:6a:64:
cf:7d:fd:08:81:90:c8:f1:2a:42:8b:17:9d:36:bf:
cf:a9:bc:af:6c:bf:3f:5c:f8:45:ac:a2:fc:4d:ea:
41:f0:6f:90:79:a7:98:ab:3d:27:1b:d1:21:24:56:
cd:3f:4d:b4:c9:c5:e8:72:86:ae:14:e3:b5:07:04:
b6:5f:ef:05:b0:60:6d:c9:0a:d8:dc:8f:7e:73:0d:
c4:4a:6e:86:1b:63:43:45:72:ee:2a:ef:56:c6:2f:
6a:3a:14:40:23:86:09:62:2c:c3:d7:9a:de:48:93:
9b:54:43:2c:ff:96:34:84:9b:43:5a:5b:77:53:75:
8c:01:50:a5:51:bf:b8:1d:b8:16:c0:7d:84:6d:3b:
17:72:5d:ba:0e:b7:cb:10:41:79:79:ab:88:40:85:
09:0d:dc:08:3e:b9:ab:fd:42:d9:35:7e:57:2f:43:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:96:CE:E5:D3:09:4C:F4:5C:A6:27:43:42:42:C9:6A:FE:9C:3F
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:93:2a:a1:8e:45:78:2a:bd:dd:d0:41:06:54:91:7e:ca:b8:
c6:8b:04:0a:e0:3c:2b:48:42:69:37:5e:bb:b4:2b:a4:41:06:
de:70:b1:01:c3:40:cf:b0:fb:33:66:6f:7f:ed:31:6a:cd:e3:
56:d1:07:28:e2:7d:e0:d9:c8:88:d2:40:83:2e:2b:39:f6:96:
8f:54:b3:69:8f:6b:8a:6c:f6:00:13:2f:14:de:11:bc:d5:ae:
1b:5f:6a:d2:3b:ec:69:fe:ce:1a:be:1f:65:ba:9b:ae:f1:93:
42:87:1f:bd:98:40:ba:ab:3e:0f:9f:06:8d:3c:db:08:b6:7e:
93:03:63:0b:87:86:3e:dc:47:f2:b6:6a:7c:75:c9:90:31:fa:
57:65:96:ae:e6:17:e3:5f:44:e0:3e:81:2d:6a:fd:80:24:56:
9e:47:ec:c9:3d:44:12:81:d7:2e:39:09:fe:1e:74:e9:17:23:
21:0f:d9:35:69:6b:42:1c:8d:16:95:77:05:cf:7a:9e:57:a7:
06:0a:48:4f:93:86:b6:bc:1d:21:d0:51:4b:25:e9:c2:fb:78:
7b:6b:a8:50:fa:51:d7:ae:86:8f:84:91:d6:15:7e:8b:03:1d:
07:54:71:1e:47:c5:7a:0b:43:06:3d:16:e5:74:3e:23:36:6b:
53:4f:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:18 2025 by rpki-client