Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: XVQzNavoQk7Mj3WxhyDuq25zzTJ/5Bpv5MMgZBwUSzU=
Subject key identifier: 6F:FF:61:59:2C:67:01:5A:2E:2C:F0:7E:69:00:C9:77:15:E1:5E:A3
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 0198917E966C2BDA72B589692C0277EA60AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 15D1
Signing time: Sun 10 Aug 2025 01:00:48 +0000
Manifest this update: Sun 10 Aug 2025 01:00:48 +0000
Manifest next update: Mon 11 Aug 2025 01:00:48 +0000
Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: M8uMAnYmsiqOp7qjQJb1MDzxMoIJW5gNqdYFssNFU3c=)
2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:96:6c:2b:da:72:b5:89:69:2c:02:77:ea:60:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Aug 10 01:00:48 2025 GMT
Not After : Aug 11 01:00:48 2025 GMT
Subject: CN=6fff61592c67015a2e2cf07e6900c97715e15ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:08:51:ed:32:72:52:72:f0:7e:b1:7b:07:
e0:bc:47:99:4a:fe:80:d8:a8:bb:cb:e1:1d:03:61:
4f:dd:b2:42:7e:43:f1:47:df:53:ee:36:0e:55:f4:
2d:dd:13:87:0d:bb:87:be:58:91:34:dd:75:fb:7d:
79:77:ac:15:3d:3c:ae:ee:a4:1f:64:c7:77:ee:af:
7e:bb:8a:ba:b2:89:b2:2a:e0:b7:34:e9:71:44:98:
7d:0e:7a:f1:90:fe:36:7e:e8:c7:88:3e:5c:58:08:
8e:82:76:2c:ef:2e:81:bd:d0:5b:ba:69:51:09:ad:
bc:9a:64:18:21:75:f0:ea:7b:dc:5f:05:e8:e0:00:
aa:4b:51:d9:aa:9a:07:9c:47:68:15:83:b2:00:6f:
1f:30:9d:65:4e:24:72:07:59:31:18:bb:1f:ec:3b:
4b:1f:dd:d4:24:5a:21:4f:0f:35:57:a5:05:37:85:
b9:ac:48:80:5b:5f:c2:e3:0f:e8:c1:24:79:7f:4d:
6a:52:1e:8f:ff:12:fc:44:9f:9f:62:ff:7c:55:22:
c7:0b:18:5b:11:1f:dd:a0:44:82:d9:7a:d8:9e:a3:
a4:ba:a0:89:43:57:c9:44:85:9f:a5:f7:a6:15:02:
79:a6:cf:86:45:96:21:4a:ff:14:a3:21:ff:82:f5:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:61:59:2C:67:01:5A:2E:2C:F0:7E:69:00:C9:77:15:E1:5E:A3
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5f:e5:c7:0a:46:90:ca:d4:01:f9:5a:54:e0:e3:2a:8f:d4:
a0:18:90:82:34:35:38:4b:a0:a1:f8:aa:3f:6d:3b:0e:b9:2c:
3d:c3:d0:4a:9c:f3:cf:de:8f:93:c1:01:36:f8:2e:a0:28:7e:
f7:dd:5a:b6:ea:73:df:12:fc:d4:44:0e:3c:13:b1:8e:92:8d:
0d:0f:4e:dc:e1:69:d7:56:96:64:83:72:be:1c:c1:72:4d:d5:
89:0a:fa:61:83:39:8f:bf:fd:8f:a8:7d:ec:8e:84:1b:97:73:
b5:10:4d:25:1f:fb:83:0f:4e:a6:5d:29:7b:c6:36:9b:d5:dd:
cb:52:54:35:22:f0:6c:f5:52:1d:c1:e9:0c:24:47:cf:8c:5e:
b1:a8:61:f5:2c:a9:99:08:b0:46:90:28:3a:82:09:ea:90:e1:
9e:cb:a9:ed:a3:ce:e0:5b:fd:fd:97:52:10:db:75:d0:54:0c:
62:64:a6:59:96:06:e7:ab:dc:20:db:e7:76:6f:06:f7:e5:95:
f2:65:6c:d2:87:7d:b5:48:eb:76:bf:ac:f4:f5:fc:8c:bf:cc:
81:99:91:d8:a3:fa:2e:c5:26:83:55:63:de:3e:02:a1:ae:8f:
9e:83:2f:14:35:34:55:85:89:83:a9:e9:20:f5:dd:76:ea:87:
ab:28:fc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:45:01 2025 by rpki-client