Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: 3vuse4CioqvtRFrUf+Mn5jmfxqlC1A2R7+TGJ4Gho5Q=
Subject key identifier: 29:F3:A4:71:FE:A3:29:C1:9D:5A:6B:A0:39:C2:85:C4:5A:BB:19:3F
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 01989CDE3CA0AE8D16984EB9476C6C41263E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 0217
Signing time: Tue 12 Aug 2025 06:01:06 +0000
Manifest this update: Tue 12 Aug 2025 06:01:06 +0000
Manifest next update: Wed 13 Aug 2025 06:01:06 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: GqDI2TCo1AJ6ELMdU13DhpAvlVwLNgsi1d1V6gU4jg8=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:de:3c:a0:ae:8d:16:98:4e:b9:47:6c:6c:41:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Aug 12 06:01:06 2025 GMT
Not After : Aug 13 06:01:06 2025 GMT
Subject: CN=29f3a471fea329c19d5a6ba039c285c45abb193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:49:30:15:24:21:cf:4b:a6:b2:9b:2d:49:
9b:97:e0:f7:a6:cd:0c:89:6d:a9:d7:b2:cb:98:20:
96:6b:c8:97:fd:0f:4b:06:c3:9a:4b:04:31:07:5a:
69:b9:8f:d1:d9:a2:c3:8f:11:72:6e:5e:5f:12:e0:
1f:08:0d:d3:a1:05:ac:0e:a9:fa:21:aa:08:8f:17:
62:3a:ff:66:80:71:bb:02:11:15:c6:34:09:d8:f4:
7a:e6:79:12:a8:32:48:f4:cc:b5:6c:f1:f1:3b:e8:
f5:72:16:df:98:37:3e:94:71:cd:5f:11:cd:37:0b:
3d:93:7e:3e:46:16:d9:13:77:43:76:06:e5:23:24:
3c:a7:a4:54:36:14:40:ad:c9:a5:d5:64:4f:f3:70:
0b:26:5e:45:23:f0:3c:e2:c5:a0:09:4d:e1:d6:f8:
57:96:3c:7c:6a:61:f9:1e:c5:4c:a8:3a:76:25:9d:
67:27:c9:62:ea:df:14:d5:2f:c0:ae:28:af:b0:87:
b1:22:5f:75:16:02:4b:6a:0e:1d:1e:70:32:92:ef:
ec:5d:ad:8d:35:a5:63:9d:f8:72:1a:6e:27:2b:a8:
3d:1a:62:ee:47:2e:ce:00:4c:16:cf:f4:ee:5c:ff:
15:40:23:ce:d5:f1:82:a7:40:7d:02:14:c9:92:4a:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F3:A4:71:FE:A3:29:C1:9D:5A:6B:A0:39:C2:85:C4:5A:BB:19:3F
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e4:a3:8f:96:30:fe:22:84:26:09:9b:b1:36:30:fb:7f:c5:
7f:64:11:e6:85:e4:8f:b5:18:ff:9e:55:f3:1c:92:66:48:48:
4b:6a:40:62:05:21:8c:32:e0:55:2c:ad:28:35:dd:88:88:7d:
1a:96:90:45:ae:a5:05:4b:25:43:bc:49:8d:a7:13:f4:18:15:
a7:c2:c7:89:96:60:2d:97:10:67:04:3b:33:dd:f1:00:3b:bd:
55:ef:d8:9c:76:e6:d5:b1:a5:12:10:f7:db:2f:13:62:cc:42:
cd:95:b8:5f:a5:3f:50:10:71:98:03:79:a5:50:96:b7:f3:ef:
39:92:0b:21:d1:12:39:98:1d:2d:95:21:68:3e:e4:8b:b2:9d:
74:09:7f:bd:4a:37:13:96:09:e8:f0:1f:6c:8e:f5:34:86:19:
a5:42:1b:c6:af:72:de:28:48:0b:27:72:83:54:53:bf:6c:6e:
e0:1a:1d:f2:6f:3f:c2:d6:10:40:32:a5:62:d8:42:be:c2:fd:
34:72:94:9d:1c:d8:28:5a:b3:ed:08:1b:38:a4:27:7a:3b:00:
3b:26:4b:2a:fb:da:6c:6d:aa:24:1e:8a:44:9a:c6:8c:2e:bc:
c0:47:aa:ec:67:0f:12:5b:37:06:e3:0a:ee:ee:fb:79:92:30:
8d:fb:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:35:00 2025 by rpki-client