Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: GDT8LOoSgrZ4WgC1skyPHGhGDn3gSa3sxcZHkzxtIck=
Subject key identifier: BE:9F:2F:12:08:8D:39:1A:41:45:EF:6E:F5:18:FF:15:06:82:9D:CE
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019874505E3646FED85ED25F154FD22EDB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1341
Signing time: Mon 04 Aug 2025 09:01:20 +0000
Manifest this update: Mon 04 Aug 2025 09:01:20 +0000
Manifest next update: Tue 05 Aug 2025 09:01:20 +0000
Files and hashes: 1: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (hash: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=)
2: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: fFgegqijaU8RiHsodEW5whp/D2RB33ezErObSrr8Y2w=)
3: tedYlf87S78MkPQe8A70plM_Ngw.roa (hash: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:5e:36:46:fe:d8:5e:d2:5f:15:4f:d2:2e:db:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Aug 4 09:01:20 2025 GMT
Not After : Aug 5 09:01:20 2025 GMT
Subject: CN=be9f2f12088d391a4145ef6ef518ff1506829dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:6b:a2:96:a5:c9:36:83:a2:91:3f:49:45:
7d:63:b7:1d:52:e0:06:b2:d2:48:4d:01:9d:66:46:
da:98:29:16:87:e1:11:59:70:e0:4b:2d:e5:a0:66:
c1:cb:c8:e6:0f:3c:82:0e:98:e6:18:bc:37:a2:65:
64:0b:36:25:5b:43:8f:40:78:3a:e5:e1:3f:45:06:
81:3d:4d:11:7c:9d:e0:e6:44:5f:53:71:1c:37:83:
93:11:00:a3:c7:29:30:e5:47:64:7e:a7:b7:f9:50:
73:fe:db:08:69:da:8f:e0:19:5e:44:79:f9:ca:c6:
dc:5a:4d:b2:1b:0b:bd:55:d0:60:1c:07:6e:6e:a2:
eb:46:10:93:d3:37:00:69:ff:ac:b7:f1:18:94:9a:
51:c4:34:b1:68:aa:7f:04:34:2a:8e:3d:c9:4f:58:
0b:f0:53:39:e0:67:7e:61:3a:9c:9b:fc:43:89:b7:
4f:8d:be:be:32:80:10:fe:0a:3d:6b:ef:f4:b7:36:
85:ca:1e:0c:c7:f6:44:bb:36:fd:20:5a:81:13:64:
17:45:f2:71:fe:4d:b8:e9:46:61:31:c4:0d:87:11:
ce:18:b6:d4:ad:47:f8:e2:d0:a5:a3:e2:81:e9:8f:
4b:09:09:bd:be:03:ff:5b:4b:82:0d:7b:2a:f9:9e:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:2F:12:08:8D:39:1A:41:45:EF:6E:F5:18:FF:15:06:82:9D:CE
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bb:13:3f:d2:77:df:42:5e:50:68:80:bc:f3:93:1e:b8:b2:
46:7a:0f:23:32:f7:3c:8c:a9:13:ad:bc:38:cb:be:70:76:ce:
b4:06:ec:39:a6:7b:7e:6d:0b:99:c7:77:40:41:4c:94:f3:ea:
34:29:1d:04:a0:08:80:c0:3e:aa:14:ba:f2:09:8c:30:d6:21:
45:d1:21:25:d2:cb:cd:69:df:dc:c8:3c:f0:43:a6:85:dd:2d:
37:72:ad:0e:21:d5:ec:06:24:fd:c2:a5:df:5d:24:d3:b8:34:
92:54:ef:0f:3f:b9:1a:0e:b4:bd:25:17:49:08:be:a1:63:87:
24:68:a2:36:1b:c1:78:7b:26:8c:dd:3c:d1:f4:52:b2:0c:f9:
f3:21:77:e8:d8:db:a2:fe:3d:c5:c3:08:33:06:ff:35:c2:a6:
85:11:6e:ce:84:13:59:0d:a6:b6:a3:1e:4f:91:87:7e:dc:d4:
12:70:e7:1d:21:49:07:9f:ed:9a:63:cf:0f:10:f6:2a:e1:cb:
e8:20:99:8b:60:d6:ae:07:c3:4d:21:7c:a7:2c:1a:d0:b2:cd:
2a:cc:e2:72:ae:c3:0b:10:c5:b1:53:8b:f4:4b:81:bc:e3:64:
6d:e6:51:8f:e9:a1:d1:3a:42:44:12:ce:a6:ce:0a:49:5a:a5:
c0:c7:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:47 2025 by rpki-client