Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier: r60b6eoDab0/8JBTfyk2++js+jqy+iwbDr6HEWTSZjQ=
Subject key identifier: 65:C2:BE:C7:B7:E1:FD:22:B3:56:AE:A3:0D:65:A8:D5:36:D9:BC:B6
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 01989335E52CB65C4ED57068CEAE89B5C25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number: 0CEC
Signing time: Sun 10 Aug 2025 09:00:39 +0000
Manifest this update: Sun 10 Aug 2025 09:00:39 +0000
Manifest next update: Mon 11 Aug 2025 09:00:39 +0000
Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: Nqzu5OKzOXrIpeFt4hkuKNXEYR0ST+vDpW/JyIQTuSI=)
2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:e5:2c:b6:5c:4e:d5:70:68:ce:ae:89:b5:c2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Aug 10 09:00:39 2025 GMT
Not After : Aug 11 09:00:39 2025 GMT
Subject: CN=65c2bec7b7e1fd22b356aea30d65a8d536d9bcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:93:6e:06:67:73:34:29:b3:a2:0a:0d:28:
9e:57:8a:bd:5b:d1:8b:69:25:32:c9:ac:cc:84:77:
33:2c:58:a0:23:46:b2:c0:72:c5:ab:d7:e8:72:3b:
a7:48:45:eb:02:7a:5f:88:49:e5:90:9f:a4:5e:64:
c2:2b:25:c2:31:cf:25:7c:bd:bc:b2:e2:4f:9c:e9:
dd:9e:a1:a0:30:1f:64:02:05:f4:08:fb:42:89:cf:
3e:36:df:f8:3d:92:0a:c3:d1:18:1f:80:ee:5c:de:
bd:24:de:6c:79:6b:4f:6b:c0:c8:89:44:56:18:2f:
5a:86:eb:6b:cc:62:82:2d:a4:d4:ad:2d:3b:dc:8d:
74:1e:04:09:fb:c2:ef:4f:1b:44:db:a6:ef:56:29:
9b:2e:24:62:41:8f:2b:77:2b:d3:c8:e0:10:08:21:
93:71:f5:2e:2c:fc:1e:73:97:51:86:8e:21:79:74:
fd:eb:c3:2f:8a:39:19:aa:9c:d3:08:c1:4f:dc:51:
f2:1a:ef:61:11:50:30:6a:9c:4f:64:76:5b:1c:d4:
f0:8b:37:96:bf:6e:54:43:35:58:3a:99:cf:0d:27:
52:bf:1e:c1:e3:bf:df:c2:2e:bc:f7:d1:b9:6b:b8:
b6:85:19:b2:db:0b:a5:4d:ac:90:3c:fb:64:ae:dd:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:BE:C7:B7:E1:FD:22:B3:56:AE:A3:0D:65:A8:D5:36:D9:BC:B6
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:24:9f:97:b7:00:48:ac:c1:0e:cc:c0:55:f2:7f:4f:ac:e9:
2d:48:c2:1a:42:86:ff:a8:a7:ac:03:c3:97:be:1f:bf:cf:f1:
f1:de:ad:21:e6:e1:6b:28:9f:2c:cc:15:06:9d:28:dd:e7:89:
bc:8e:51:31:ad:c9:1a:5b:c8:ee:09:50:e3:be:31:b9:19:61:
4c:ca:c7:94:d8:e2:2e:ad:ae:6b:1a:9c:6d:9c:58:20:a0:a2:
e1:cc:a6:05:58:e1:8c:70:64:bd:a5:b0:c1:3f:e6:bf:18:81:
29:89:11:1b:30:9c:93:4b:c3:b4:8b:32:99:f0:34:32:71:54:
58:19:e7:e4:ef:b0:64:13:9e:a6:cc:72:ef:89:98:f6:93:80:
e4:dc:64:99:b7:81:07:24:9b:06:b0:a9:f2:b3:61:d2:b1:6b:
35:78:fa:c0:88:51:e4:72:1e:3f:b6:29:5f:3d:ad:c4:b7:d0:
8a:57:51:99:55:85:7d:45:5d:c2:a8:ed:02:6b:a8:78:33:6c:
aa:e8:25:e1:b5:ba:43:6a:08:2c:60:31:f7:3f:8d:b1:24:00:
6e:52:e7:0e:45:e6:bf:bf:30:18:27:e5:71:48:d5:ea:32:b9:
3c:00:c4:64:0d:6b:d7:ac:0e:19:0e:a1:2d:73:91:89:8d:34:
df:3c:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:09 2025 by rpki-client