Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier: T8uwHIewbdLdO84/9uB4LqBwmQ51k2R/QluHg7wfsOw=
Subject key identifier: 12:B9:52:19:76:FC:85:F1:00:D8:68:50:53:2B:7E:39:C3:59:D7:D4
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer: /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial: 0198906C01C1971A0297676DD6301558DF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 20:00:53 +0000
Manifest this update: Sat 09 Aug 2025 20:00:53 +0000
Manifest next update: Sun 10 Aug 2025 20:00:53 +0000
Files and hashes: 1: BoZqZz072WMffBg633aOURbd2Lg.roa (hash: b9zcHNJaQ+Hj+ANj7i08VVN5oo2tzosCmEXhBWweaRk=)
2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: n6997hfMf8g4asmUry5fHQXx7rpT82k8AW0NqUW+4ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:01:c1:97:1a:02:97:67:6d:d6:30:15:58:df:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Validity
Not Before: Aug 9 20:00:53 2025 GMT
Not After : Aug 10 20:00:53 2025 GMT
Subject: CN=12b9521976fc85f100d86850532b7e39c359d7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:40:5c:eb:cd:13:7b:37:02:c7:f6:e6:56:
d9:f7:4c:02:50:ae:ba:4e:ae:2b:11:e7:8d:db:0e:
ab:43:ca:da:a5:ad:cc:4d:13:c5:53:5b:1e:11:aa:
01:5d:81:7a:99:0b:e2:bc:ae:56:bd:82:78:84:5f:
68:be:18:a8:bd:e8:d6:cf:3c:2e:b7:da:8f:ef:e2:
f8:83:b5:49:43:85:42:25:35:6f:9f:67:9f:a8:0f:
d2:3c:ee:36:12:47:bb:45:48:43:08:61:3c:de:0b:
8f:8d:3a:69:5f:22:a4:0c:6e:9b:40:ec:ea:6d:2e:
b8:14:40:0e:1d:65:58:c1:8b:19:66:f3:fd:b8:e1:
38:ea:44:12:db:43:31:46:4a:0e:19:1d:59:11:58:
b0:33:e6:b8:10:8e:56:39:5e:05:49:a2:e5:89:fb:
55:92:5a:56:46:bb:7d:fd:91:13:a2:78:b2:59:c9:
75:c8:d5:39:78:09:b1:db:d8:2a:e8:57:2c:a4:1c:
15:6d:8a:69:ed:ea:5b:c5:3e:43:58:52:71:21:9f:
88:a3:76:61:cb:c5:70:05:0d:8c:32:68:23:e4:57:
97:1c:7e:a3:2b:4c:ff:3e:e5:40:c5:cc:bc:57:75:
b2:79:fa:c7:37:2e:f2:60:e9:dc:c0:1d:c2:f4:69:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:52:19:76:FC:85:F1:00:D8:68:50:53:2B:7E:39:C3:59:D7:D4
X509v3 Authority Key Identifier:
keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2d:85:54:c6:0c:04:08:af:46:bc:5e:7f:93:6c:79:eb:2d:
43:02:a0:a1:a6:9d:3f:50:37:5e:e5:7e:a8:34:fe:31:67:7d:
5d:b3:6b:e5:ca:1a:66:18:e2:8f:13:06:e7:77:69:73:63:54:
21:a0:4b:27:88:1e:10:d7:ca:bd:bd:cc:58:05:18:d3:53:be:
a7:26:2c:9f:87:49:f2:ef:2e:3c:57:06:4a:15:ed:1a:cb:7c:
16:3d:fe:da:15:71:f0:46:5e:f9:70:ed:38:a3:38:1d:9d:5a:
05:47:52:d8:42:1d:ba:79:75:d3:aa:28:d3:d4:eb:63:42:df:
82:97:0b:86:20:0c:5d:4e:54:ed:fb:a1:2e:f7:22:c6:ec:22:
8c:f2:bf:73:79:ad:f5:be:dc:9a:46:3d:45:54:34:72:d7:1e:
7b:c8:87:3c:c0:da:1f:a5:78:34:e4:5c:f8:d4:b8:f8:c3:ef:
21:f0:33:d9:f1:71:5b:25:e9:c0:f9:1b:bb:fd:e7:5e:91:fd:
e7:27:2b:32:1d:93:d7:6d:12:3c:c3:bb:e1:80:c1:8b:f9:17:
fc:a9:73:80:86:5f:71:d4:76:ab:25:b0:c9:4b:70:9b:a0:7e:
1e:b5:ae:59:10:d5:b7:7d:29:41:f9:15:6e:13:af:a3:4e:8c:
19:4d:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:26 2025 by rpki-client