Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: t9v5WfrvimFGWAcMj7qxAuBUuCBfyAIILUHJIaSDmCA=
Subject key identifier: E2:4D:1C:AA:3F:61:81:DC:FF:DE:7E:33:79:D7:41:49:70:AD:2F:41
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 01988F22BB4CD92E126E189A82C58BB32E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 11AA
Signing time: Sat 09 Aug 2025 14:01:14 +0000
Manifest this update: Sat 09 Aug 2025 14:01:14 +0000
Manifest next update: Sun 10 Aug 2025 14:01:14 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: 4k1HWOGGI50QxlzqL+VoGqkCmKHOTlUjdJiU65mWE4g=)
2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:bb:4c:d9:2e:12:6e:18:9a:82:c5:8b:b3:2e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Aug 9 14:01:14 2025 GMT
Not After : Aug 10 14:01:14 2025 GMT
Subject: CN=e24d1caa3f6181dcffde7e3379d7414970ad2f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:93:2b:72:48:36:b3:92:3d:df:e7:9d:0b:
e8:6d:cc:72:3b:ce:4a:75:54:21:c2:a5:0c:a3:a9:
bc:1b:38:8f:a4:b5:91:98:14:d6:ab:ae:ff:87:86:
b6:a2:eb:ac:52:a0:b6:a5:e8:af:04:17:97:18:da:
44:f7:81:bd:af:9d:0b:6f:76:c6:80:19:20:6b:c3:
b9:a7:d4:4d:e3:d8:35:fe:9a:9c:97:a5:11:b9:9e:
33:5b:f5:b8:ff:d2:76:8d:e5:06:32:0b:2b:99:13:
a2:71:32:7b:5b:a1:c3:d8:27:97:db:bb:32:24:72:
4d:43:99:c9:21:24:f1:15:e9:34:e1:20:26:76:ae:
cc:49:f1:10:23:d7:72:8e:4f:8b:30:7f:0b:2f:ab:
9d:09:9b:df:9b:04:5f:6b:74:d6:8d:4a:07:16:c7:
67:e5:6d:79:d9:76:1d:40:99:95:4d:34:eb:26:21:
84:cf:d8:3a:cd:c4:71:20:13:1b:d2:9d:71:59:c5:
5d:55:3a:60:06:ff:cd:b1:ec:89:e8:20:d5:2e:8b:
45:24:4c:57:07:35:03:85:82:5f:a5:3f:9d:af:40:
3d:e3:4f:d7:95:31:de:19:33:ea:54:5e:f3:36:4a:
74:5d:4d:4f:d4:a3:d2:6d:81:05:95:72:9a:c4:00:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:1C:AA:3F:61:81:DC:FF:DE:7E:33:79:D7:41:49:70:AD:2F:41
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:27:80:d5:8b:03:c7:e2:78:94:9e:8f:61:b2:8d:3b:37:34:
10:a0:f4:1b:8f:f8:b1:f6:b2:c9:cd:67:7c:ed:e1:65:00:11:
ae:bc:c9:23:d2:02:fd:f5:e6:54:3e:07:5a:3a:3d:f6:31:7f:
b5:97:58:9b:db:00:80:ff:5b:d3:06:db:a2:96:ae:94:62:9e:
65:f7:27:d2:a4:f3:06:13:e7:08:05:d0:a6:98:a3:c4:e4:77:
08:43:94:63:70:fd:88:ed:5a:db:9b:1c:6e:2e:0d:93:d3:c6:
bc:8c:4c:52:ec:2e:8b:51:14:02:c1:ff:f5:90:6d:de:bd:25:
2b:77:9b:50:98:69:28:b3:0f:ae:4f:63:6f:b3:81:fc:67:9d:
3a:fc:80:75:e5:a1:74:79:f9:d4:56:a1:46:62:7e:1d:4c:27:
74:cd:e7:a2:2a:ee:0f:b7:22:25:13:56:40:d7:80:52:c1:55:
65:d5:f8:d6:e0:c6:82:88:75:5a:21:8e:6f:40:bd:43:df:9d:
d5:7c:61:48:28:d2:a8:a1:be:c7:3c:ee:70:6a:78:e9:38:b9:
2c:58:06:a2:31:e5:49:d2:1c:95:b2:ea:c1:9c:eb:2d:83:18:
06:5f:d2:fb:61:ad:c5:b1:24:37:d2:8c:02:d7:bf:05:0e:cd:
7d:05:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:16 2025 by rpki-client