Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: I+fjcqjnlq1GCC3yS1D5PpkbyPEd2gTrjYgKsit9vy4=
Subject key identifier: 97:3D:A1:23:3E:A5:0B:6C:EF:CF:38:BD:7F:58:58:B9:9B:A5:3A:CC
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 0198D884F3C112A096826BC2DC126F38F1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 20:00:48 +0000
Manifest this update: Sat 23 Aug 2025 20:00:48 +0000
Manifest next update: Sun 24 Aug 2025 20:00:48 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: I/J5jJ815sQyXGjXXnnnmP79lyR0YCI/ICgNPOos7KI=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:f3:c1:12:a0:96:82:6b:c2:dc:12:6f:38:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Aug 23 20:00:48 2025 GMT
Not After : Aug 24 20:00:48 2025 GMT
Subject: CN=973da1233ea50b6cefcf38bd7f5858b99ba53acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:31:9c:53:c5:d8:28:d8:23:55:df:1d:80:
e9:b9:36:84:e2:9b:27:95:02:a3:f3:45:cb:a8:1b:
18:de:26:61:83:78:b9:6f:14:5a:9f:01:1e:a0:95:
63:6b:0e:f3:88:7b:48:4e:39:c1:8c:34:dd:51:dc:
ea:61:24:fe:85:4e:d9:7e:70:d4:a8:c9:76:e4:1a:
ee:01:a8:ba:bd:52:9b:95:ba:82:b1:25:7d:31:cf:
10:89:65:60:25:bb:97:3b:fb:52:6c:46:47:cb:4c:
11:87:f8:da:1e:1c:50:2c:84:17:29:9e:73:36:26:
5c:f3:3d:f3:6c:b0:c7:fb:f7:37:cd:a4:6b:b9:57:
24:75:85:31:93:a5:e4:60:69:26:63:e3:81:bd:af:
f4:fd:6a:c4:df:93:75:ab:03:19:22:41:91:37:bf:
9c:05:5e:85:4f:2d:bc:e7:ee:f2:22:de:4c:ff:de:
dc:e2:e7:6f:9a:fd:86:4d:4c:30:06:7c:e9:c6:75:
7d:62:e8:22:9a:56:38:a8:c7:7e:9f:4b:3d:ab:e5:
fb:8c:2c:a0:8f:9e:b3:12:f3:7e:3f:a3:87:ba:16:
be:41:1e:ed:7f:58:7f:c2:78:99:f9:ff:b2:45:79:
11:59:d9:e9:4d:18:17:d3:5c:c6:7f:14:45:e9:01:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:A1:23:3E:A5:0B:6C:EF:CF:38:BD:7F:58:58:B9:9B:A5:3A:CC
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:10:38:2d:62:ad:4f:2c:d8:11:d2:25:6a:a0:e7:d8:df:a4:
72:29:33:1c:e7:96:db:13:0d:de:30:65:84:5e:be:f4:0e:1b:
95:e3:b5:fb:18:cf:fe:64:f3:73:73:38:6c:c2:9f:08:43:f4:
a6:49:5b:a8:2e:19:f7:4e:45:cb:97:28:cd:7d:f1:0f:fb:a3:
8a:58:60:af:ff:ab:a3:bf:16:47:62:ce:a2:b5:9b:51:2e:ec:
ec:2a:7e:f1:54:81:9e:2c:cb:11:40:ef:39:c9:a3:a3:3d:35:
2d:0b:7b:0d:1c:00:2d:e7:05:38:6f:3b:39:85:49:05:11:78:
8a:b9:bc:58:eb:4c:c4:1c:ea:d9:d8:d4:74:c7:b7:5c:5e:03:
02:8a:3d:47:04:ae:c6:63:46:57:31:62:44:f8:65:98:61:62:
17:39:e7:7c:cf:b5:dc:5a:68:1d:99:32:af:9a:eb:d4:ed:f5:
71:ca:8d:92:4f:dc:f6:57:20:9c:8b:4e:85:30:f2:47:a4:c7:
1f:dd:43:8f:95:88:d6:ac:99:0b:00:4d:dd:95:5c:4e:ac:9a:
a0:df:38:bd:4f:25:57:28:3a:2f:c7:9d:b2:68:07:40:e4:c2:
d6:b6:67:b0:ef:41:59:12:9e:f4:8a:06:f6:cb:44:53:87:22:
eb:ab:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:31:32 2025 by rpki-client