
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: yZwPpBNx6dbUG5uQvtXbUd6iBjOP3osGjU6bHuDyr2k=
Subject key identifier: 76:C4:9C:7A:92:A2:36:93:FA:FE:CA:6A:C7:7A:F7:16:6C:BA:4E:5D
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 01987306C03EE3DFF34A30A3BFBC93044A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 11D9
Signing time: Mon 04 Aug 2025 03:01:18 +0000
Manifest this update: Mon 04 Aug 2025 03:01:18 +0000
Manifest next update: Tue 05 Aug 2025 03:01:18 +0000
Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: sgXjsuY5Ls/VDN+4RD1kHqcbeFTWIPhqSBDeS7WWxi8=)
2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:c0:3e:e3:df:f3:4a:30:a3:bf:bc:93:04:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Aug 4 03:01:18 2025 GMT
Not After : Aug 5 03:01:18 2025 GMT
Subject: CN=76c49c7a92a23693fafeca6ac77af7166cba4e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:63:a6:46:9b:61:ff:fd:e8:67:58:79:3d:
84:9c:61:8f:81:e6:d0:73:cd:23:25:bb:65:e3:7a:
01:bd:31:47:27:4d:e2:6c:3f:41:89:0f:f4:e8:27:
39:42:19:3a:80:6e:9d:84:4b:b0:7e:0e:c4:91:82:
73:0f:7e:db:97:f9:52:f3:40:02:5f:69:c9:9a:b1:
fd:58:eb:6a:0a:78:b0:42:9e:92:26:36:17:ae:4a:
c0:8a:30:e3:4c:26:7f:6c:46:f4:2b:8f:9f:b2:42:
79:5e:e9:3f:84:a5:99:f8:ff:0e:e4:48:4f:9a:20:
34:dd:59:cd:c7:f6:42:d6:48:23:4b:9e:28:6a:84:
26:ac:92:6d:84:a2:15:47:7e:cb:e4:ba:5f:2d:b6:
4c:78:34:2d:34:6b:ee:0d:34:ea:03:8b:b6:85:82:
50:a2:ee:1b:d2:d3:98:4b:33:6c:2d:05:45:54:cb:
e6:f6:8e:a1:50:ad:0a:02:4a:d4:68:49:c3:37:ce:
a8:5b:5e:3b:fb:d6:cf:65:90:12:25:05:d0:2d:01:
57:69:5d:72:24:ed:d8:a9:2b:6f:d5:dd:1f:18:6b:
2c:48:53:a8:7b:c0:b8:a4:2a:51:f5:d1:33:03:f9:
20:ca:ad:c7:8b:62:fe:2b:30:81:83:28:72:68:ca:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C4:9C:7A:92:A2:36:93:FA:FE:CA:6A:C7:7A:F7:16:6C:BA:4E:5D
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:88:2a:24:f5:e6:92:1f:94:f0:d0:57:13:3f:59:b2:26:2d:
7e:d5:d1:c6:7a:f9:99:d6:e8:c4:3c:82:85:1e:f1:95:26:0a:
55:0c:40:03:69:5a:bd:7b:9d:c6:12:95:02:48:93:00:94:fa:
0d:b7:86:3b:d0:d8:37:36:c6:d5:63:3b:85:58:55:e8:28:79:
6c:80:b0:17:1b:29:ea:ac:d8:57:41:a3:e8:d2:83:e4:12:e9:
80:16:8d:74:0e:61:0e:6c:0d:5d:92:2c:7a:07:1c:bf:10:4b:
5f:19:2b:0d:78:73:2a:26:2e:da:e7:0c:c2:b5:a6:dc:ec:f2:
9e:93:cd:d0:bb:e7:e0:da:03:08:a1:1f:d4:19:07:0a:f3:35:
4a:f0:98:96:b7:5a:b5:d1:24:e1:1d:a4:b7:22:7b:47:2b:16:
cb:38:4c:9c:37:8f:c1:69:61:98:cc:3a:a9:1b:ef:bb:97:a9:
bf:98:a8:d8:f1:40:f1:21:a2:b9:84:c6:13:66:12:1c:1b:3d:
fe:df:f5:bd:06:3b:a5:ca:bc:d6:56:d9:2f:43:e9:e8:25:27:
bc:b7:e7:48:87:77:8f:7f:d8:21:fc:a2:5e:ce:08:23:21:26:
1e:38:98:b8:34:9b:a4:2a:52:27:f1:da:64:f4:ef:39:94:1f:
29:36:ad:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:33 2025 by rpki-client