Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier: dYZqB26KHXftZFhnXWZRZentlMdl8VzFU0gZTa/7JwE=
Subject key identifier: F0:57:29:77:AB:F5:D0:B4:60:01:D8:BC:9D:86:98:C0:96:FA:59:22
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 0198D5BC34BC1FF70C755EFD1960D01430D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: usN8GZVfJ54q0l8hKewfBSWmGHw.roa (hash: IakOdZo+PiFdg1ApCygqDDOunMse1hhehFbuFFIfZ5o=)
2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: 8GXVVI23ExUU8mCGdVliHXepPA3sodklFjD4vdz7q9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:34:bc:1f:f7:0c:75:5e:fd:19:60:d0:14:30:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=f0572977abf5d0b46001d8bc9d8698c096fa5922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:14:91:4e:c2:31:65:be:57:8c:c9:6a:64:
09:42:61:18:42:a8:cd:e0:c0:c6:3d:c2:00:ad:35:
ae:1f:23:d3:ba:4c:23:bd:ba:91:25:ed:30:8e:6c:
51:12:a1:b6:af:f0:a5:34:68:87:e0:b8:e5:ff:70:
d2:ae:fa:b0:74:33:90:be:bd:62:6f:15:85:e3:66:
5d:ad:84:23:c4:08:de:c6:d4:60:95:36:77:91:2e:
33:96:ac:ad:8d:b2:86:86:06:b6:a9:01:d1:ad:44:
79:0a:01:bb:59:4c:46:39:49:d4:55:b9:95:02:f2:
87:a9:37:f3:af:a6:e9:9e:99:b6:09:67:41:f3:6a:
08:85:e7:a4:8c:a1:af:94:94:46:10:ad:c6:8f:0c:
ac:99:57:37:74:c2:c7:4c:0c:8b:5a:e6:4e:8f:d8:
72:41:f2:ca:4d:6b:b2:e6:96:4c:ad:c3:cf:7d:62:
4e:ec:19:27:15:4b:b5:32:69:50:cb:51:d7:4a:f6:
5b:2d:84:06:52:35:c3:11:d3:90:35:67:85:13:6b:
57:88:54:3a:9a:48:30:6e:ac:93:c7:4c:c2:18:8b:
9f:7f:f7:70:9b:2a:8c:46:f2:fd:43:6b:3e:11:1a:
91:64:6a:88:9b:70:39:f3:f1:a6:e1:e8:2e:7e:0d:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:29:77:AB:F5:D0:B4:60:01:D8:BC:9D:86:98:C0:96:FA:59:22
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:53:d3:bd:20:df:a0:15:c8:66:ff:a9:9a:81:44:92:71:df:
07:0b:31:87:f5:6f:ca:30:09:75:63:59:aa:3d:9f:c8:7d:34:
8d:18:27:04:96:f5:a0:ea:c8:71:1b:a0:26:6d:a6:7c:cd:43:
19:3b:79:d1:a9:68:e5:2f:a2:57:cd:68:74:6a:18:2a:aa:44:
e4:01:9d:5b:1f:d3:c6:63:c4:80:d3:fe:64:3d:17:8b:1d:00:
13:62:c7:12:bc:d0:94:ea:89:f6:7a:4a:3f:cb:70:34:f3:73:
3a:2f:01:80:57:b6:d1:62:b7:40:1a:6d:7e:47:9b:6f:2a:ae:
ee:d7:b9:b3:80:34:e4:15:ed:0c:32:3f:f1:3a:55:c4:3f:1c:
43:a7:e0:dc:1a:79:f9:70:04:34:f5:2d:9c:c5:a2:25:5d:e1:
2d:0a:0b:74:7f:57:a8:aa:da:e8:ef:f6:0d:5c:b4:5e:a6:8f:
a5:bf:23:fe:e8:e8:57:b9:2b:b3:fa:15:75:36:43:6a:c4:fb:
fb:19:65:d6:8a:f8:0a:fb:cb:be:b9:51:28:71:88:da:3e:58:
6e:a2:ab:44:cf:a2:a1:40:ff:52:d9:52:54:42:f3:14:f1:e1:
5e:a5:77:8d:ef:f6:82:82:d0:bb:8f:a5:46:48:b6:a8:ff:7e:
d8:86:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:33 2025 by rpki-client