Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier: P6peRGryL7CSfhzu6WKO+ZnAU3a8qpCJDh9rf3d11t0=
Subject key identifier: 95:07:EF:47:0D:00:91:36:6A:CC:5A:8A:CF:FD:15:41:32:D2:6E:1A
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 019875D1B7DA3AA3C144DB3A4336D690A7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number: 06A7
Signing time: Mon 04 Aug 2025 16:02:14 +0000
Manifest this update: Mon 04 Aug 2025 16:02:14 +0000
Manifest next update: Tue 05 Aug 2025 16:02:14 +0000
Files and hashes: 1: Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa (hash: FbjTDRIPu8bBy/5KLYHNgVHrWy/v2L+xeWuUUm4Xmek=)
2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: UxGr+AuPgYF7fDH6ozLYlVymLGnrA0aNrXCSBcitZcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:b7:da:3a:a3:c1:44:db:3a:43:36:d6:90:a7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Aug 4 16:02:14 2025 GMT
Not After : Aug 5 16:02:14 2025 GMT
Subject: CN=9507ef470d0091366acc5a8acffd154132d26e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:be:2f:23:65:fa:e7:df:47:ef:27:fc:a9:
ba:29:b4:65:58:5c:3f:53:aa:6d:0f:1a:38:bb:cf:
59:56:cb:ad:1f:61:8c:74:90:aa:d5:59:b6:60:ec:
f6:ef:b0:bf:74:78:87:1c:12:1a:33:fb:11:e4:80:
3a:c7:21:d0:7e:aa:96:53:59:22:26:e6:2a:f9:27:
e6:c6:72:e3:00:34:c7:fb:1b:b7:ca:6b:b7:3e:bd:
c0:25:37:b5:6f:63:3d:12:ef:70:fb:c1:2d:2c:9c:
7e:68:67:e4:39:49:b1:6a:93:81:02:17:3d:3d:58:
c5:83:8f:5d:18:39:11:7b:8e:ab:b0:ff:e5:44:e4:
da:98:f0:14:5c:b8:cb:94:35:41:b9:02:00:d6:0c:
8d:ab:ff:44:1a:e7:0f:ce:88:bf:f4:98:47:8d:8b:
56:cf:25:fa:a7:83:38:1b:63:f9:e7:86:76:ba:0a:
d8:83:10:c8:8e:ee:3d:43:72:e5:fe:0c:3e:65:8c:
f2:d1:15:02:2c:ec:9b:42:1f:09:00:d4:d2:d6:13:
40:b6:57:32:52:e5:2a:66:c1:f1:de:a2:c8:3c:0c:
05:48:5b:d3:48:19:58:86:80:8b:4e:c0:55:30:9d:
7b:6f:e7:88:64:62:93:f5:02:da:82:11:de:a5:94:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:07:EF:47:0D:00:91:36:6A:CC:5A:8A:CF:FD:15:41:32:D2:6E:1A
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:c5:40:cf:54:c3:10:df:ae:2b:0d:db:ac:f3:45:7d:f2:
c6:a6:66:3f:45:2f:74:9d:f1:dd:88:41:3b:2c:51:5a:1f:09:
2e:24:26:da:c6:72:58:64:dc:9e:7b:be:e4:ab:76:99:05:e6:
62:c6:f3:15:54:2a:9e:e6:54:65:ef:60:ee:82:7e:1a:49:41:
1b:9f:29:de:91:b6:56:e8:55:1a:f5:35:c7:6b:cc:39:02:00:
ee:d2:0b:12:a3:fc:e2:20:c7:73:28:7d:df:5d:c4:17:0b:5e:
2f:3a:93:f2:ce:0d:10:78:73:05:1e:72:2d:57:f2:32:55:22:
b6:c2:d8:10:bf:9c:aa:a4:5c:5e:7c:e0:b4:26:5e:80:24:a5:
f7:ae:97:76:34:e0:38:bc:6f:e4:93:aa:fc:06:17:6e:92:f8:
08:ab:1e:85:20:c3:c3:40:e8:ef:f7:26:25:c5:06:93:6c:ab:
7e:4c:ce:9b:ab:ad:01:7f:e9:20:ac:6e:01:53:3b:67:86:ed:
0c:49:c9:17:9f:9a:b4:28:92:56:c6:ed:d7:9f:ad:b8:43:85:
57:58:a8:fe:e9:02:0f:e5:a5:1b:c7:6f:56:95:e8:a6:59:94:
aa:e0:c4:23:9f:b9:21:c3:77:33:2d:00:0b:c1:fd:8d:5e:21:
f5:7a:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:13:52 2025 by rpki-client