Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File: YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier: Nvn2iic0wVYmpPONzj828oq6eWBpxS4nd8WA6H/smL4=
Subject key identifier: 65:45:ED:59:58:2A:84:53:95:74:E6:16:4D:68:06:08:B3:7A:8D:9F
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 01987306A01424A10CB1CEE083076E0B3BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 03:01:10 +0000
Manifest this update: Mon 04 Aug 2025 03:01:10 +0000
Manifest next update: Tue 05 Aug 2025 03:01:10 +0000
Files and hashes: 1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: zZnJni3+sC8HiXBjhgu0ZG3jpmLmkZeaMJaA8g9K0xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a0:14:24:a1:0c:b1:ce:e0:83:07:6e:0b:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: Aug 4 03:01:10 2025 GMT
Not After : Aug 5 03:01:10 2025 GMT
Subject: CN=6545ed59582a84539574e6164d680608b37a8d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:c1:60:4f:04:22:68:eb:81:95:d0:e2:02:
52:4d:cb:c1:24:8d:f3:0a:8e:c4:d6:f9:c5:f8:ef:
0e:44:fa:dc:4d:5b:eb:5f:06:3a:d3:17:17:59:e4:
da:c6:c7:c3:24:3e:39:a1:0b:92:af:7e:2c:b5:9e:
89:be:96:6b:e5:53:34:26:86:12:57:c5:cd:82:0f:
ba:49:92:7f:3b:2e:03:17:9b:e7:ed:33:19:f3:b4:
c5:8c:f2:d0:7f:b3:f7:8b:71:d5:ea:20:ff:ec:a0:
31:6a:d3:94:89:93:fe:21:c9:4c:30:2e:cc:7f:34:
36:ba:ad:5d:b0:35:ae:85:4a:84:f1:ec:17:18:0a:
2b:84:04:c3:79:61:c3:3f:c5:6b:b8:0d:a2:ca:c9:
d5:45:e5:34:ee:b0:89:ac:35:49:c0:5c:35:cb:18:
f7:23:58:9b:7a:46:d7:17:ec:e1:eb:1d:ca:b8:35:
e9:27:17:7c:c7:59:1f:4d:6d:43:4b:66:f6:0e:11:
e6:98:02:b5:43:06:c8:c9:ef:1e:f9:53:2a:9d:6a:
f1:d8:70:5a:bd:98:4c:5c:88:d3:67:ea:6c:48:07:
86:b2:6e:d9:6b:5c:70:af:91:12:46:5c:8c:21:6d:
fb:58:50:ea:cb:a9:44:bc:bf:74:39:47:76:08:15:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:ED:59:58:2A:84:53:95:74:E6:16:4D:68:06:08:B3:7A:8D:9F
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:51:5c:6f:af:6e:f6:00:dd:7b:32:dc:e7:7b:4e:33:8c:99:
fe:64:a4:df:3c:0b:20:72:94:8d:1e:cc:87:fa:ef:37:76:4d:
93:a0:86:0b:5c:eb:ce:7d:c7:d6:cc:da:e2:c9:97:ba:ed:b0:
ce:85:49:c8:b6:5f:6b:e8:e1:52:56:75:d2:24:8f:f8:e1:a8:
40:c1:22:38:24:aa:b7:08:76:b1:40:e8:d3:47:a6:38:c7:c5:
17:71:5e:24:3a:a4:09:95:d5:48:f9:81:4b:fe:2e:e5:fc:49:
61:94:7f:d3:08:86:3e:03:0d:a6:b2:8b:4e:83:28:c4:91:cf:
44:91:f8:eb:b1:bc:d4:a2:97:76:3e:19:c1:d4:d0:7d:7b:7e:
4a:4c:d2:19:cf:73:43:bb:e5:00:7a:4f:e2:a7:f2:b9:c3:6e:
07:db:6e:c3:49:bf:2b:fa:fb:ed:c1:b8:17:82:29:c1:c4:49:
2e:8f:f6:78:b2:91:ac:57:f3:d5:f2:dd:85:bf:64:3b:18:58:
51:15:e0:b5:57:66:f7:6c:ac:9a:70:f4:96:34:93:8c:27:61:
dc:53:47:84:b4:87:c9:35:24:45:a0:78:22:70:ae:66:9f:94:
7c:ee:8d:f3:44:38:0d:4a:32:4d:ef:a3:29:36:65:cd:ca:3b:
c5:d2:a0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:00 2025 by rpki-client