Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
File: YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json)
Hash identifier: TEnFKTUEJu84MWWws8lkvqkoUklLhvmq5A6NyppKsmw=
Subject key identifier: 55:2C:14:B0:D0:8C:8A:AA:2C:BA:67:5E:24:42:36:71:B0:8D:06:8F
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial: 0198917E7B7DF0FF926DA7F653A36F019EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
Manifest number: 0AA8
Signing time: Sun 10 Aug 2025 01:00:42 +0000
Manifest this update: Sun 10 Aug 2025 01:00:42 +0000
Manifest next update: Mon 11 Aug 2025 01:00:42 +0000
Files and hashes: 1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: SZ0KQtpMgtRLzhaHaDr2UU9ucIkghyaEs3EJMqsDuQo=)
2: oNp64lcp-PwrYsQaBw1j30tzyNw.roa (hash: FzeHCqPb/tC2Vmdnn3r7gfGFiDclam5dSTVPZrLAWO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:7b:7d:f0:ff:92:6d:a7:f6:53:a3:6f:01:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Validity
Not Before: Aug 10 01:00:42 2025 GMT
Not After : Aug 11 01:00:42 2025 GMT
Subject: CN=552c14b0d08c8aaa2cba675e24423671b08d068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d6:55:2f:e8:02:6b:e4:74:9e:f3:20:27:35:
5b:55:a7:e9:0d:60:9e:31:64:8f:31:6d:e5:73:2f:
18:d5:a8:7c:5f:5b:ad:92:cc:ce:41:8d:68:e8:18:
3f:3b:ee:34:4c:94:d4:5e:ac:a6:40:cd:e2:2f:02:
7a:40:dd:b0:54:f5:41:13:db:fb:63:fb:b2:e4:41:
e9:30:c8:97:f2:b3:68:d2:d9:fd:bd:ce:2d:69:31:
0a:38:a3:e6:5e:95:70:9c:9d:e7:6a:a2:08:56:df:
06:63:d0:91:2b:f7:32:0c:54:3e:87:a0:2b:c1:d4:
ea:7e:f3:e7:d4:9a:6b:8f:45:ad:e0:35:13:20:72:
d1:be:dd:fc:44:7d:0b:d9:f9:18:0f:88:57:1c:8a:
df:38:71:4f:f7:84:bb:f4:3b:e3:e0:43:18:f3:d5:
a8:ae:1d:ef:98:64:6d:49:e4:7f:d8:e2:69:81:02:
ef:2d:51:c0:d1:ae:96:6d:60:95:e3:96:72:1e:68:
3d:2d:5f:f5:31:a2:8b:d1:35:7c:e9:3c:c9:21:78:
f9:22:c6:7e:1d:74:f0:53:e8:1c:d5:f1:bd:3e:41:
a8:59:58:91:55:05:b0:4f:f2:06:11:57:ea:33:1e:
5d:90:06:cb:fa:3b:a9:d7:bd:8e:0b:3a:18:93:4a:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2C:14:B0:D0:8C:8A:AA:2C:BA:67:5E:24:42:36:71:B0:8D:06:8F
X509v3 Authority Key Identifier:
keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:81:c5:69:18:f1:1e:9a:c2:19:1d:80:9f:f9:ee:92:93:57:
a8:e4:16:a2:b2:d7:52:f4:0d:d3:57:97:34:5c:5b:c9:15:d1:
97:0a:81:d3:35:f1:29:3e:0a:5e:2f:5a:92:ad:42:b8:01:20:
9b:27:b0:90:39:48:c4:1c:cf:5f:75:8c:16:d3:f7:93:ec:69:
1f:d1:35:70:df:51:06:4d:0d:c1:b2:92:86:df:bb:f3:86:ab:
2c:f9:0b:9a:7f:f0:9b:12:05:b2:99:0c:19:e0:38:ea:a2:72:
b0:51:4d:36:4e:ce:8e:b2:53:8a:23:a6:8e:df:d3:4d:53:32:
7a:52:b0:1c:0c:21:1c:0b:6f:9d:4e:e5:26:0d:1f:aa:55:7a:
92:2e:c6:30:91:d0:03:2d:5d:5b:ea:d3:79:12:6f:30:35:0d:
da:b4:f1:21:0b:1e:27:a2:4e:94:ad:ee:82:23:fb:2d:8a:6f:
fd:52:38:b0:31:f3:5b:b6:98:4e:1a:cb:31:10:a0:c9:95:12:
8f:8c:fe:40:8f:81:0d:38:fa:3a:22:f6:d0:98:fd:d9:b0:42:
fb:6f:02:ac:32:36:48:64:ab:ab:dd:61:4b:cd:a7:26:0c:63:
42:49:58:c5:ed:b6:32:4b:0d:ce:0e:cf:7c:04:c2:78:94:a4:
6c:86:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:03 2025 by rpki-client