Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: hm7C4tlTh5rZyaMYaq0mReEWAXvon2tljMauGTha7oo=
Subject key identifier: E3:5F:02:06:FF:B5:BA:6A:B5:C9:E6:F3:43:96:4C:3F:48:A4:C0:4A
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 01989B26BE054DCB156C025B7BA39D6B0A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 162D
Signing time: Mon 11 Aug 2025 22:01:04 +0000
Manifest this update: Mon 11 Aug 2025 22:01:04 +0000
Manifest next update: Tue 12 Aug 2025 22:01:04 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: jbb48pxqQaNVJmgopeNJ0M7Y3GQSrfof6TIKsxbdcE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9b:26:be:05:4d:cb:15:6c:02:5b:7b:a3:9d:6b:0a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Aug 11 22:01:04 2025 GMT
Not After : Aug 12 22:01:04 2025 GMT
Subject: CN=e35f0206ffb5ba6ab5c9e6f343964c3f48a4c04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:37:bf:8e:0f:39:2e:a9:7e:b2:5b:c7:30:
87:fb:fd:c2:d8:6c:d2:18:f5:bd:8b:45:17:a2:ef:
d9:8d:e2:c0:65:59:50:f1:e1:1b:bd:2e:f8:25:bd:
d1:e1:df:a0:a1:b2:b8:3d:15:4c:dc:a7:14:6c:24:
88:ea:97:36:40:82:b8:eb:e8:21:6e:04:24:06:1a:
de:df:c3:57:67:a9:e8:2e:8f:9e:24:8b:2c:d0:da:
c4:7d:5c:f3:16:20:a5:c2:eb:25:bc:da:e3:2b:14:
c3:ca:cf:6f:8d:a9:65:8b:1d:89:08:3e:55:bd:97:
b4:63:09:c7:90:2a:7d:c2:55:cd:be:48:e0:4f:30:
b2:bc:0b:d7:6d:41:eb:8c:45:90:95:c1:c0:01:66:
4b:c4:9b:e9:bf:28:e3:f2:4c:4a:29:50:65:2b:6c:
ca:e5:bb:05:5f:65:74:ff:90:01:73:cf:89:1e:f8:
86:0c:1b:ce:92:51:3a:57:e1:6d:67:74:91:b9:4e:
46:18:e4:c0:76:2f:c7:0f:be:37:7f:4d:e5:52:5d:
a3:92:fc:d0:f0:cb:db:b6:14:04:6e:04:c2:60:55:
5c:29:85:c4:de:bd:25:94:2f:e8:20:cf:25:39:de:
5e:43:58:4c:14:41:a1:d6:c3:dd:0e:bc:5b:97:ae:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5F:02:06:FF:B5:BA:6A:B5:C9:E6:F3:43:96:4C:3F:48:A4:C0:4A
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4f:ef:85:af:08:30:47:e4:b0:96:38:ab:1a:ce:63:94:0b:
0e:25:1f:20:a5:c5:43:3d:55:68:f9:b8:4a:b8:0a:c3:90:84:
29:13:5a:64:1e:c0:fb:ca:e7:2a:c5:63:f3:6e:64:cb:c0:24:
64:da:9e:4b:41:72:21:13:91:01:a6:31:9c:51:26:2a:9e:05:
66:5b:80:c5:29:ac:d5:b0:0b:b8:f1:0a:35:c8:86:27:88:bf:
3c:3c:fe:b6:9d:ef:d1:7e:bf:6f:f3:49:15:96:45:4c:41:ae:
d2:dd:8b:41:b6:5d:3f:65:45:51:2e:59:48:44:da:d7:5c:9a:
5b:61:39:ca:a2:da:c8:20:92:53:9d:7f:e5:e0:44:55:96:2b:
fa:be:85:bf:e0:e9:74:2b:3b:07:d0:e2:22:3d:c8:95:77:c1:
24:4f:66:82:a7:dd:9c:3a:25:92:f0:d3:76:50:e4:ef:72:d7:
cf:af:21:b8:72:2e:70:b9:9a:5a:d7:6a:96:38:45:3c:5d:0e:
5d:4e:e2:7d:1d:ae:cc:48:e4:e4:f3:0d:1b:a3:28:71:2f:1f:
47:ea:e4:51:6f:35:c5:01:7f:aa:13:53:53:5e:10:24:1e:7f:
d7:66:4f:06:66:31:63:e1:68:70:b9:77:94:86:b5:df:eb:67:
35:1e:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 06:34:00 2025 by rpki-client