Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier: BhAcOCmc0BWR3V84xULY7C/BG8ye9fvyu9vZsxQjcd0=
Subject key identifier: 88:7F:5A:48:2C:B8:20:F6:09:C8:3A:29:3C:FB:C5:9A:DF:A6:7F:98
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial: 0198880D45FBB83509CAAADF417C02264A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 05:00:27 +0000
Manifest this update: Fri 08 Aug 2025 05:00:27 +0000
Manifest next update: Sat 09 Aug 2025 05:00:27 +0000
Files and hashes: 1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=)
2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: 4JWrnIMSelXi3SVkodYZtKidGAnbyrnOaaQEvzP7O/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:45:fb:b8:35:09:ca:aa:df:41:7c:02:26:4a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Validity
Not Before: Aug 8 05:00:27 2025 GMT
Not After : Aug 9 05:00:27 2025 GMT
Subject: CN=887f5a482cb820f609c83a293cfbc59adfa67f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:a5:a4:14:eb:ae:1a:18:fc:ba:21:16:f9:
a5:98:de:70:11:14:20:91:9c:e4:2b:be:a2:5d:13:
cf:9e:13:5e:ee:70:d5:6d:41:65:4d:b1:09:10:3d:
a8:c9:64:d4:f0:35:cb:a9:c7:5a:7d:df:ad:a7:17:
a2:bb:54:f5:1f:fc:91:03:74:e2:f5:5b:54:f9:cc:
37:d8:e9:a7:46:06:81:3c:74:f9:36:f7:ab:86:1e:
4f:92:66:e2:3b:4b:13:92:ad:5f:59:15:e3:2e:10:
a5:46:1d:97:19:2d:c5:5a:95:09:b3:31:1c:2a:ae:
e9:f4:d7:ca:a5:7a:70:53:3c:75:0b:7e:b6:bb:c9:
15:17:c1:c8:a4:5c:6c:eb:6c:4c:05:16:76:41:ed:
fc:08:2e:a5:c8:49:73:5e:82:56:95:09:dc:0c:3b:
4f:73:ff:7c:07:90:06:f5:89:2d:f8:37:25:d3:39:
bc:c2:c1:0f:91:55:6e:8b:1d:d9:85:25:fb:eb:71:
fa:85:cf:4b:03:f6:c2:26:08:78:83:33:e4:e9:ea:
a9:fb:54:21:4a:f5:bc:4b:92:c5:82:cf:17:df:af:
fa:20:fd:ad:80:d3:ec:7a:b6:67:c9:73:10:a4:48:
d5:a4:95:0b:51:ef:c6:38:71:2f:24:0c:34:a5:11:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:5A:48:2C:B8:20:F6:09:C8:3A:29:3C:FB:C5:9A:DF:A6:7F:98
X509v3 Authority Key Identifier:
keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:63:c8:9e:be:e3:23:ae:8c:7d:dd:e2:8f:40:a1:25:6e:e2:
b0:91:f2:4e:b9:d7:27:c1:b0:45:f8:c2:1b:0d:01:78:0d:1d:
bd:21:41:81:e8:c0:0c:d8:44:97:80:fb:be:f5:48:4e:a2:2d:
96:e2:36:2c:9a:a0:90:dd:f7:32:55:35:15:c6:98:72:51:c8:
08:c8:83:80:ba:97:d0:ad:ad:b8:c3:f4:45:81:89:6e:a0:49:
70:f1:02:52:f0:7b:26:f0:8e:86:79:0b:5a:09:bb:02:ad:20:
bc:79:c2:fa:d6:d0:5f:01:df:9a:1d:b6:51:87:c1:b3:b3:c1:
98:ef:8d:e5:9b:5a:91:df:f9:d0:ca:ef:4d:28:66:64:61:16:
d9:c7:bb:a4:96:41:8e:ec:1b:c7:e6:06:2e:c1:77:e8:a8:ac:
14:c1:01:14:93:7a:b2:0e:35:ac:0c:38:ae:3d:cd:44:32:04:
ea:9c:b0:b6:d7:11:09:34:36:b0:19:ec:7f:11:f8:3a:13:be:
e0:77:ec:c7:03:4b:c2:02:85:84:40:be:eb:22:dd:a5:f1:5e:
62:a9:24:25:16:15:bf:46:b0:32:0f:32:cb:8d:56:89:ef:b4:
13:c4:38:86:c2:dc:3b:3e:c7:7f:7d:9d:4b:92:23:b1:4d:c5:
a4:4b:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:22:26 2025 by rpki-client