Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: uwQxU3wlejatxCWvLh10gVRkcORodstAnmrIN7GJ3Jw=
Subject key identifier: 01:2B:A1:05:DA:74:B0:66:EA:BB:61:F5:01:12:6A:77:69:80:A6:A5
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 019883561D131E92B66E37D98FB1881943E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 07:01:55 +0000
Manifest this update: Thu 07 Aug 2025 07:01:55 +0000
Manifest next update: Fri 08 Aug 2025 07:01:55 +0000
Files and hashes: 1: FcPpw1IibzSy4BenkulclpDum4U.roa (hash: HSUDUncC0CCpqaUKBhWSJTD0GmSsEAzCocsfF6H1tqA=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: flGGyZsPPy+6gpZ0tIfvY4KscauKOPHg+kvhcHsEksc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:1d:13:1e:92:b6:6e:37:d9:8f:b1:88:19:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Aug 7 07:01:55 2025 GMT
Not After : Aug 8 07:01:55 2025 GMT
Subject: CN=012ba105da74b066eabb61f501126a776980a6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:70:64:58:52:54:97:33:f2:09:d8:a8:48:
09:7b:70:82:70:f1:ae:9c:63:3c:96:bd:8e:36:2b:
ff:63:af:7b:31:75:07:b1:61:4d:ba:e9:dc:cc:6e:
52:77:ee:6d:9d:e2:0e:fd:08:dd:97:7d:3f:14:38:
10:ce:2a:dc:03:dd:25:42:97:61:e3:89:be:e3:d4:
a6:2a:28:89:30:64:35:9a:b0:65:33:63:21:4e:7f:
a6:d4:d1:59:c5:d8:b9:74:cd:d2:9c:5c:ea:ab:9e:
28:0c:c0:a5:94:ea:0c:b5:96:eb:6b:fa:75:8b:3d:
1a:98:ad:06:2c:7e:2e:7e:59:d4:06:eb:b9:ad:34:
ba:22:ba:23:3f:15:42:c1:c3:eb:ca:85:2c:2e:43:
34:78:cb:76:b9:0f:f0:e4:28:4a:e7:f3:a5:9d:a5:
9d:3f:3b:44:99:f1:0f:48:65:6a:2a:5b:6f:2f:2a:
1c:c0:a5:bd:04:77:85:b9:bb:6d:32:07:b9:c5:15:
d8:14:ec:d2:df:30:67:cb:b7:28:3b:2e:7a:54:e0:
92:ed:cd:4a:bd:0a:8a:e2:65:53:ad:7d:45:b3:38:
41:20:03:60:df:e2:85:6b:84:3e:e5:7f:d8:9f:8c:
00:ef:12:9d:27:95:f5:53:85:6a:a7:7d:c4:fe:3f:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:A1:05:DA:74:B0:66:EA:BB:61:F5:01:12:6A:77:69:80:A6:A5
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ea:6c:6a:50:8e:e2:9d:4d:09:7b:29:76:41:d9:2a:e8:b4:
81:49:b3:92:84:43:a1:03:36:50:51:68:bc:dc:c3:4d:50:6d:
cc:ed:7a:69:1d:58:5e:47:fd:7e:55:50:4a:4f:37:85:0a:7a:
30:24:1f:f4:75:ba:14:bd:8a:b4:66:c2:80:16:f7:c8:81:0d:
87:28:1f:6e:98:07:1d:d0:2d:5a:50:d9:d4:13:19:4c:38:45:
9d:e4:85:17:c6:34:b6:d3:ce:40:0e:6e:c5:ef:75:e4:b7:93:
a8:f8:5b:4d:df:f0:c7:b4:eb:b9:15:51:92:7f:be:00:41:c1:
90:67:17:52:94:5f:5e:c3:fa:3b:31:07:22:7b:a8:b4:61:89:
88:ad:cb:23:d3:e6:db:1f:4b:e3:4c:5a:c6:2a:54:ff:a5:b1:
af:d3:b3:ef:b0:f2:10:5f:ae:f9:84:c2:b9:52:ae:e2:60:8b:
e1:e5:84:7d:75:2e:0e:bb:fe:0c:e0:b8:31:dc:3a:7e:f7:88:
d0:a8:79:05:44:2d:54:5e:14:95:af:ae:ba:5c:18:37:52:43:
ae:53:ab:b0:9a:b5:b8:86:75:40:e7:1e:41:79:be:1c:77:15:
17:40:b1:07:60:6e:18:73:bf:4f:6a:58:95:b1:65:46:49:01:
da:58:7e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:11 2025 by rpki-client