Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: aGbiE0SJedwQlGPiqSlkEvDeOnl9IkigGbWuzTuxyEs=
Subject key identifier: 18:9E:76:0B:62:61:63:02:98:7F:92:B5:0C:CB:AC:BF:F1:E5:5A:86
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 0198745020DDB485CE77B4147F4408C2C21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 13F3
Signing time: Mon 04 Aug 2025 09:01:04 +0000
Manifest this update: Mon 04 Aug 2025 09:01:04 +0000
Manifest next update: Tue 05 Aug 2025 09:01:04 +0000
Files and hashes: 1: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: 3yYmpCeQa4YheTTPEcokT2AMo+mduFWtA0bQAyhag6E=)
2: xj0Zl5jyKNtmExsm8HUfZTBh1W4.roa (hash: qJ7mmoo0SJOyk9TkckQkyKsoiQJfN7oKl35vQICMSm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:20:dd:b4:85:ce:77:b4:14:7f:44:08:c2:c2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: Aug 4 09:01:04 2025 GMT
Not After : Aug 5 09:01:04 2025 GMT
Subject: CN=189e760b62616302987f92b50ccbacbff1e55a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:a3:ae:80:e7:8a:35:91:94:ce:2e:04:4d:
81:9d:2e:80:a7:3f:46:19:89:b9:19:b4:6e:6b:84:
6e:20:db:4a:d0:b4:c3:71:f9:6f:03:4a:d6:c8:92:
e9:ab:d0:5c:09:e0:4b:a9:bb:09:1a:00:c6:4f:8c:
d1:bf:6a:8a:f1:c7:3b:4c:b4:c0:21:84:e9:cf:c1:
f9:9f:57:f9:fe:7f:12:0a:6b:2d:7b:d9:a6:a1:3e:
4e:b5:82:aa:bf:99:38:40:30:e0:a5:a0:85:ef:e8:
4b:33:bc:b2:c6:47:ea:cd:65:fd:6d:24:57:fb:70:
5d:6d:a3:30:01:ff:e5:a0:d9:3b:d6:4f:dd:97:e0:
02:ab:7e:e9:8b:10:0a:0f:97:cb:74:2d:b0:33:ed:
6e:9a:46:ab:f1:cd:c3:9b:90:55:4e:ac:e0:d1:7d:
fb:16:53:b1:8f:3b:81:5a:0f:68:89:26:e1:07:57:
c9:2a:fe:55:28:32:9a:7b:08:4e:a4:2c:28:12:64:
d2:6a:b4:10:da:12:33:47:b6:55:e7:8e:87:5c:48:
68:7c:a8:dc:b6:97:f6:fa:64:8f:e6:c8:07:fb:1a:
b0:17:b4:b4:8c:11:8b:46:31:b3:79:d2:68:b8:88:
ef:30:a0:1c:3d:55:20:de:43:02:7c:62:c9:6c:28:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:76:0B:62:61:63:02:98:7F:92:B5:0C:CB:AC:BF:F1:E5:5A:86
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3e:9e:1f:fc:a1:e6:14:11:ae:32:ae:77:f2:b8:f9:3f:9d:
b2:72:54:8f:7f:20:25:cd:59:c9:c3:a4:6d:3c:cf:16:6e:49:
32:46:70:f0:04:b0:b1:00:0d:ab:f9:84:f1:c8:dd:3a:cc:a0:
b7:ea:cb:a2:83:9a:41:8f:3b:7f:63:bb:f6:76:dc:7c:e5:e9:
92:63:f2:8d:aa:f6:38:1d:69:15:8b:76:f2:58:ee:90:50:fc:
0e:7a:44:04:1b:5b:a3:03:d2:6e:2a:af:86:1d:d6:d8:aa:80:
78:80:58:50:3a:97:a5:5f:43:e3:ae:b7:8e:2a:17:a4:99:e9:
85:2c:55:88:6a:c3:f4:ef:50:d5:84:92:02:6e:9d:04:4c:79:
47:73:ab:67:f6:be:4f:15:50:dd:7f:61:7a:b2:c8:6a:99:b2:
4a:b4:e2:08:09:48:e0:7e:31:2b:58:a8:eb:24:9d:2f:9d:18:
69:7a:53:2c:29:aa:14:00:74:b6:11:0a:b0:cb:ef:2a:98:91:
1f:a4:ed:5c:37:2f:d2:74:f2:1b:2c:37:1c:39:6c:58:0e:9a:
c7:60:e2:d2:b3:78:7f:bc:3f:55:3d:f2:19:d4:ce:fc:d7:e2:
90:3b:c4:80:92:63:3b:b7:01:e1:d0:49:a1:c1:42:65:1a:b5:
a4:70:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:46 2025 by rpki-client