Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: gAhneY19pIomkpruMKHhh7vdGoSQywRkQNPJpz7Uwi4=
Subject key identifier: 9E:E5:51:3E:18:D5:34:DF:97:CB:44:4B:74:57:35:7D:55:0B:CA:B8
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 019873E384B27E5994CE7DCDD6090FA1ACE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:27 +0000
Manifest this update: Mon 04 Aug 2025 07:02:27 +0000
Manifest next update: Tue 05 Aug 2025 07:02:27 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: Mmn4tEtPB6mJbm2npoaN5hW4SU69f4gJoLIvw8VZVD4=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:84:b2:7e:59:94:ce:7d:cd:d6:09:0f:a1:ac:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Aug 4 07:02:27 2025 GMT
Not After : Aug 5 07:02:27 2025 GMT
Subject: CN=9ee5513e18d534df97cb444b7457357d550bcab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:c9:5b:5e:eb:f4:29:2c:b8:d1:f8:fa:9d:
fc:41:be:1c:87:b8:74:83:00:94:3d:d2:6d:31:f2:
5e:e1:bd:4d:0f:96:20:23:47:a5:fd:68:63:25:89:
05:ce:ae:8a:de:2c:b3:dc:99:8a:d6:c8:b7:1e:3b:
50:15:1b:5e:82:b2:18:2d:b7:6d:a3:63:e5:69:e2:
90:08:0c:32:ca:fb:33:65:f5:f2:8d:4d:3e:a0:4a:
ab:91:98:dc:56:8e:38:78:eb:37:c3:d8:43:05:01:
67:bd:a6:29:78:31:b8:9e:22:95:bb:ba:31:35:76:
a8:d5:d0:33:34:32:42:d6:9d:ac:9b:88:9c:ca:f3:
b8:e1:37:51:c1:4d:d0:53:09:f4:75:c6:74:92:5c:
46:20:40:23:96:06:9c:fa:61:67:6b:16:68:ce:d4:
79:fc:37:06:35:b4:49:28:5b:81:be:19:70:22:24:
d5:02:c4:6c:ca:1b:62:c1:ea:e2:6a:bc:2e:1d:45:
60:ce:27:a8:10:26:35:e6:b0:94:f4:08:eb:e0:d6:
db:76:22:bf:e3:f5:1d:17:78:e0:45:43:21:9e:54:
ed:c9:32:69:fa:43:bd:4c:6d:ac:7a:ed:c8:e9:c2:
a7:4c:9f:40:7f:8f:7c:64:3e:4f:be:db:9c:0a:22:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E5:51:3E:18:D5:34:DF:97:CB:44:4B:74:57:35:7D:55:0B:CA:B8
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:50:75:f7:3b:ae:06:78:a9:f2:62:28:88:0f:a3:95:9c:33:
8b:51:3e:43:c3:a7:c8:3e:cb:3c:d6:0b:fd:96:55:41:8d:fb:
3b:e8:3f:c7:be:c7:0c:9b:72:a4:f1:1e:4f:80:f2:bd:7d:7d:
e9:36:e3:ae:48:35:87:b1:63:9a:cd:aa:49:5e:b3:9b:24:7f:
cd:2b:6f:75:75:91:ec:a0:b5:35:0c:d2:31:fa:03:3d:01:d5:
e3:56:39:88:eb:97:de:fa:a2:01:11:c5:1f:a2:cc:4b:ad:d8:
fa:8b:87:c2:d6:8e:91:7f:71:d0:ed:0d:42:14:74:21:c2:f7:
1f:a8:00:8f:09:98:8f:95:c9:68:fe:20:7b:b7:18:ab:05:a2:
18:c3:c6:ba:a6:9c:4f:32:5a:fc:e4:52:24:9f:36:78:c0:42:
bb:38:d0:ec:b6:c6:e6:fc:9a:06:96:7b:26:25:44:3c:bf:a3:
36:4c:8e:6b:58:bd:b7:49:6d:c6:4c:79:61:df:f3:28:ff:29:
eb:7f:19:88:41:b2:9c:f7:0b:56:48:9a:55:f2:4b:ad:c9:0c:
9a:41:f7:1d:24:59:1c:29:86:89:70:cf:38:67:00:90:9c:0d:
e8:62:43:b8:89:3c:10:1c:88:6d:cd:84:f0:6e:8d:23:16:b3:
6b:bf:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:57 2025 by rpki-client