Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: tn+MZY5PzyQI3IqKfdmNyOOcy7Um4N6zLpKdwh9jU/o=
Subject key identifier: A9:CC:B4:29:0C:7B:4F:6A:0E:86:CA:3E:52:F5:97:3B:19:D4:73:1B
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 01987298A59A706B25EFE90298A122F49EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0CEC
Signing time: Mon 04 Aug 2025 01:01:02 +0000
Manifest this update: Mon 04 Aug 2025 01:01:02 +0000
Manifest next update: Tue 05 Aug 2025 01:01:02 +0000
Files and hashes: 1: 9c99e7OOCoSsqv05bamuZvrBRAg.roa (hash: gcQqAYS/2mIfyTda9lezITlbdeVA2P8mDvlHBkdo3p0=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: 8NJf4oJwgAPpgUa4F8r8EPmqR3FEt9grqUrjgbM5GO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a5:9a:70:6b:25:ef:e9:02:98:a1:22:f4:9e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Aug 4 01:01:02 2025 GMT
Not After : Aug 5 01:01:02 2025 GMT
Subject: CN=a9ccb4290c7b4f6a0e86ca3e52f5973b19d4731b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:a5:02:39:66:1c:59:9a:17:6a:90:86:6e:
c0:63:63:b4:13:24:90:06:73:70:eb:07:dc:bf:e9:
5c:a5:fd:dd:f6:d8:7d:81:12:73:29:20:32:6c:58:
7a:c4:4f:1a:5e:1b:e0:7a:78:58:f6:28:fa:3d:9a:
3b:9d:ea:20:78:b6:7c:c0:f6:82:29:46:37:87:1f:
55:58:d7:3d:93:ef:91:f5:6a:d3:c5:c0:d5:85:8a:
5a:52:d9:ed:00:7b:9a:cc:d9:db:fe:23:50:5c:12:
db:ef:00:8b:b7:37:59:78:82:a8:64:f4:36:9f:35:
6e:a1:6b:e6:eb:a0:eb:e2:ce:4c:73:b0:d7:e9:a2:
0a:bd:65:ba:3e:e5:14:44:dc:10:41:ba:a9:90:bc:
c1:94:64:cd:e8:12:f8:e0:c5:fd:24:5c:51:ee:a4:
70:e0:f8:ed:78:02:2a:82:5f:6c:f8:4f:23:1a:9f:
ab:ab:eb:cd:9a:8e:95:8c:d2:a2:5d:57:36:df:97:
84:24:f1:b3:7c:81:c0:65:bf:97:3f:ca:56:5e:f1:
91:92:00:6d:3e:70:80:12:51:3c:11:33:d7:c0:7b:
9b:31:7c:49:43:78:33:5d:57:9f:16:79:eb:b4:6b:
fe:45:fe:e7:da:93:ec:bf:8d:fe:42:00:4e:5e:af:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CC:B4:29:0C:7B:4F:6A:0E:86:CA:3E:52:F5:97:3B:19:D4:73:1B
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:43:03:21:48:d9:8c:fe:f5:ec:ea:d5:32:d6:2c:f5:88:71:
91:b9:c1:81:08:86:ad:5b:d8:4c:6f:b4:2d:12:44:13:d4:f8:
53:1e:2c:ce:68:3d:01:43:40:f6:00:53:81:3c:19:4b:2d:06:
e6:f6:13:f5:3d:d9:60:ca:b3:ea:41:28:2d:23:c6:97:72:9c:
59:65:ff:bc:4d:e3:7b:79:6f:ac:83:60:73:50:70:15:df:b3:
63:a4:1e:8a:85:01:89:d0:b0:46:6c:67:f2:38:61:bd:c9:61:
01:95:5e:31:cf:0f:4b:b7:c9:8e:23:09:38:49:48:6e:90:32:
79:aa:fb:2e:76:17:50:6b:dc:7f:47:5a:c5:85:1f:b1:b9:bb:
70:9b:75:bf:9e:f5:e1:92:4b:64:b6:f9:b4:9b:b1:2c:64:58:
fa:ca:fe:08:34:20:16:31:17:33:56:80:a0:3a:98:28:c9:15:
81:bc:15:21:79:c0:be:3d:72:65:10:78:70:14:6e:13:6c:16:
f5:9d:66:d2:7d:d9:12:31:7e:53:fa:ec:db:4d:44:82:48:76:
ac:5e:4d:44:dd:ac:f7:a4:e0:3e:1b:97:d9:9e:24:7a:ff:3f:
87:a2:74:df:77:0b:06:ba:f7:8f:d6:43:40:22:8d:a5:e9:d1:
f4:71:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:56 2025 by rpki-client