Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
File: yoaOeySqNaTdEKyVmfBkqpadAx0.mft (raw, json)
Hash identifier: YT83y1bk0YKayRdezyh0W9+VvzNf8mlP8/2Obv248DQ=
Subject key identifier: A2:61:1C:C7:27:62:2B:6B:B3:80:DD:C5:CB:78:13:60:DD:62:94:20
Authority key identifier: CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
Certificate issuer: /CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Certificate serial: 01987306A8AAA490C173F6EA1644B213C1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
Manifest number: 0288
Signing time: Mon 04 Aug 2025 03:01:12 +0000
Manifest this update: Mon 04 Aug 2025 03:01:12 +0000
Manifest next update: Tue 05 Aug 2025 03:01:12 +0000
Files and hashes: 1: yoaOeySqNaTdEKyVmfBkqpadAx0.crl (hash: +OoRYqNLLpAnXCbtHl3VsfFS8qdkWv8HrSGfS4FjtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a8:aa:a4:90:c1:73:f6:ea:16:44:b2:13:c1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Validity
Not Before: Aug 4 03:01:12 2025 GMT
Not After : Aug 5 03:01:12 2025 GMT
Subject: CN=a2611cc727622b6bb380ddc5cb781360dd629420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:ee:a9:3a:e7:54:72:39:bd:a8:f4:a5:60:
28:0d:28:6a:e9:7c:6b:7e:e4:3b:7f:bf:a2:86:d9:
26:aa:58:8c:3d:5e:a9:3b:f3:28:53:e0:26:42:a3:
67:87:70:3d:ac:e6:c0:75:fc:48:48:8c:62:dc:ea:
df:ca:3f:69:d3:0f:de:76:58:7e:98:5a:b9:ef:87:
65:00:0d:e4:ba:17:78:cd:6f:85:82:ad:63:1c:bd:
08:7f:2a:bb:ad:27:99:c6:5d:90:18:99:09:3f:59:
04:89:5a:82:ee:c5:02:4c:60:7f:25:ba:8d:a9:49:
fc:87:ca:32:ba:ad:4c:81:b2:0d:49:46:10:28:72:
eb:68:b4:f3:c5:a4:59:55:60:e7:98:fe:03:6e:cc:
c0:e2:00:48:d8:a7:61:21:2e:ec:22:ff:02:28:77:
a2:62:87:be:b1:9c:ed:c4:4e:d6:8f:f6:7b:b8:52:
e7:64:c5:58:ac:0c:6e:78:d8:60:36:01:6d:ed:f6:
7f:3b:cc:59:64:be:6b:c3:8c:c1:a3:5d:e2:1c:c2:
4e:35:9a:33:32:60:78:98:1e:89:55:ff:a5:1c:b3:
b6:fe:30:ed:53:a4:1d:3a:cb:f5:d4:db:e5:b2:62:
91:60:14:19:72:91:ba:d2:08:24:99:b2:6f:87:a4:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:61:1C:C7:27:62:2B:6B:B3:80:DD:C5:CB:78:13:60:DD:62:94:20
X509v3 Authority Key Identifier:
keyid:CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:25:86:03:ed:13:ce:f7:24:d3:e6:d4:b1:b2:a1:cf:2f:
26:98:3d:41:80:57:2a:44:ba:c0:6a:b3:48:54:c0:1a:66:92:
06:7b:67:d6:1e:94:d6:f8:12:38:7f:7c:0a:15:93:10:8a:db:
89:fd:54:51:c9:0c:e1:a7:ec:9a:df:36:4d:5b:c5:cd:ce:39:
61:23:ac:36:b3:73:11:c3:0f:96:87:88:50:3d:68:59:da:aa:
2c:3a:9c:b0:71:82:1c:58:45:25:14:34:0c:47:37:86:6c:b9:
76:d5:1b:40:81:f7:d6:cc:e3:21:38:b1:1e:29:c6:04:03:e7:
08:d9:02:85:18:79:2e:c1:43:7e:4b:b2:fe:88:01:4b:3f:73:
b3:0d:ce:48:6a:2e:58:19:1f:a8:32:89:e8:a3:85:cd:e9:de:
ad:09:a2:c1:7e:7b:69:60:b3:9b:c3:5d:92:1d:21:78:53:f2:
6a:4f:2a:04:48:ad:b8:63:6e:d7:8c:6e:f7:f8:16:ec:b3:74:
59:7d:3d:62:28:9b:3f:9a:81:bc:97:74:56:c9:ed:5e:42:3b:
c0:3e:48:f1:42:4a:16:94:87:cd:ff:19:1f:25:86:c2:94:8e:
57:c4:62:fd:e2:54:5a:85:86:37:2d:3f:2e:d0:aa:e3:21:4b:
81:15:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:44 2025 by rpki-client