Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: 918k95nPd5jE01kRuDKTKYJ/LwTtfmXRN5PBrD91peM=
Subject key identifier: D7:A2:3B:88:4E:DB:8E:35:4E:33:C5:C8:76:6E:31:0E:DE:E9:64:C4
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019873E20FE1EA6A68BE37E796355AF5A463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 14B2
Signing time: Mon 04 Aug 2025 07:00:51 +0000
Manifest this update: Mon 04 Aug 2025 07:00:51 +0000
Manifest next update: Tue 05 Aug 2025 07:00:51 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: CiwCfrduGsm8JLLvW6muPIytEgjjorkTNQNBlXI3bUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:0f:e1:ea:6a:68:be:37:e7:96:35:5a:f5:a4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Aug 4 07:00:51 2025 GMT
Not After : Aug 5 07:00:51 2025 GMT
Subject: CN=d7a23b884edb8e354e33c5c8766e310edee964c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:49:39:38:c5:9c:32:0e:91:c9:40:ef:87:
ae:ba:c9:3f:6b:5a:8b:f1:91:df:60:ac:f3:82:3b:
a9:74:d5:55:a5:3a:7c:7c:23:38:86:6e:12:b9:4a:
03:f2:c8:51:e8:27:65:28:c0:8b:08:9b:50:27:6e:
85:87:3e:e4:2e:a6:0a:4b:4e:f6:67:d3:21:52:be:
3f:f6:b6:d1:8b:bb:75:3b:ba:2e:e2:f2:09:44:cb:
8f:93:d6:8b:2d:05:f2:db:41:8f:ed:dd:1d:cf:bc:
03:b5:3b:d3:4e:d9:bd:df:1c:e3:59:20:17:de:90:
99:cb:af:04:7a:4b:35:8a:90:8f:62:c5:fb:fd:2b:
cc:96:f1:5d:dd:70:b9:d0:03:a6:95:24:d2:fd:95:
d1:9f:96:d4:3c:7b:a2:c5:b2:c7:7a:bf:69:dd:c9:
97:79:e5:8f:28:bf:8f:4d:a1:ce:f1:12:fc:cb:d9:
73:c9:1e:cb:4e:8e:c4:de:43:0c:3d:62:9e:ac:46:
cd:07:10:4e:18:b8:75:52:9c:23:50:0c:57:5f:f6:
5f:19:2d:14:2b:25:bb:39:ca:bb:34:69:c6:8d:7b:
ab:1e:cb:af:7e:d7:b9:0b:bc:56:56:8d:20:6c:00:
be:50:3a:04:b3:46:88:cd:64:ad:51:1e:a3:26:13:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A2:3B:88:4E:DB:8E:35:4E:33:C5:C8:76:6E:31:0E:DE:E9:64:C4
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ed:2e:37:64:90:eb:45:a6:bc:25:a1:3f:f7:67:9c:91:69:
d2:cc:75:68:81:1d:fa:e1:ff:2c:00:84:19:b3:24:8b:ad:c2:
3d:e2:98:63:9c:16:77:c8:c8:af:4b:8d:73:06:49:36:09:2b:
bb:90:78:eb:af:3e:b7:a0:5d:28:d7:99:fb:bc:eb:44:c9:93:
7f:d4:25:4a:f3:87:81:fe:b2:df:08:08:50:8f:f6:88:61:e8:
20:fa:9c:d1:7b:b5:43:16:f6:1b:a7:3d:0f:17:65:c2:a1:ad:
73:7b:fa:44:22:2b:1f:dd:dd:13:35:d2:39:3e:6c:8e:01:ee:
5d:c4:44:15:d6:be:ad:5d:51:4f:6d:97:48:57:4e:3c:02:c0:
90:b1:ad:72:15:90:37:57:e8:82:05:12:ce:ba:4b:37:7e:2f:
c4:11:da:6e:6a:9c:fc:7e:30:24:62:f6:5d:60:88:42:10:ea:
71:83:ed:ca:fd:06:db:7c:65:68:2b:b5:bb:21:e9:2e:dd:52:
74:22:73:32:17:2f:79:dd:d6:68:c8:69:dd:a2:e9:95:18:3b:
64:e5:33:7e:d6:04:6e:d0:c5:31:b1:f8:35:13:cd:d9:53:1c:
0c:04:14:9e:9a:21:27:ba:b6:28:9c:9b:c7:39:8d:c4:d1:61:
a6:d7:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:03 2025 by rpki-client