Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: EORoWJVw1ocHjMH606s6SccF3AeoeZhpDpDU4ByspfE=
Subject key identifier: 6B:99:4D:BD:DA:09:89:26:2D:AD:1A:F0:98:7C:66:BA:93:36:E1:84
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 0198D51616367DDDBAA85207975A504DDFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0E6A
Signing time: Sat 23 Aug 2025 04:00:51 +0000
Manifest this update: Sat 23 Aug 2025 04:00:51 +0000
Manifest next update: Sun 24 Aug 2025 04:00:51 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: pDQbtRtllIndohbYHUBObG1tPAgD1i5XWALkTwbOf2c=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:16:36:7d:dd:ba:a8:52:07:97:5a:50:4d:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Aug 23 04:00:51 2025 GMT
Not After : Aug 24 04:00:51 2025 GMT
Subject: CN=6b994dbdda0989262dad1af0987c66ba9336e184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:af:cc:f2:c8:5c:e8:a3:a8:98:ff:c3:b8:
34:25:ae:05:0e:99:8b:66:67:ef:26:89:57:4d:0c:
a8:e1:b4:14:de:e6:67:7e:f7:ee:16:ad:7b:58:85:
8b:3e:28:42:5a:af:3e:b3:7e:be:c6:74:98:c2:fb:
a0:9f:4b:ba:d3:e1:d3:da:11:33:80:4c:9e:f9:da:
49:d2:69:c7:0d:60:7d:30:68:3a:eb:be:92:e6:8a:
6f:d6:ed:cd:40:84:1b:e0:66:60:95:ff:17:24:94:
13:f7:99:55:f9:48:bd:7b:92:2f:10:d6:0d:31:38:
c7:89:f1:ca:7b:6f:89:c1:1d:6d:fa:bc:10:5c:c9:
c0:61:85:77:29:f9:ee:f0:f9:08:2d:d9:c1:2c:77:
fb:3c:7b:36:90:18:c6:8c:8a:54:29:37:8f:fd:64:
0a:d4:b6:dd:59:e9:87:4b:33:6e:fc:89:65:19:6b:
9a:a6:6e:fc:43:b2:97:64:23:3e:37:ca:24:ee:07:
d7:c1:3d:90:20:1e:51:2d:c7:7d:9c:e7:83:a4:49:
70:fe:5b:a1:e6:34:61:61:28:5e:e1:82:bb:d2:2a:
a0:4d:1e:cd:10:83:96:c1:bf:3e:41:17:04:1a:a9:
40:b2:eb:26:35:34:72:17:f1:e2:3d:fc:32:42:f4:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:99:4D:BD:DA:09:89:26:2D:AD:1A:F0:98:7C:66:BA:93:36:E1:84
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3f:ed:d8:f9:71:6f:8a:eb:27:0a:fc:83:99:d7:b0:f6:22:
6c:a4:4d:2a:05:c2:2d:6d:29:db:66:4e:3e:01:c2:15:28:45:
85:a6:f1:4d:e2:c1:26:f5:b1:c1:f2:12:c0:e8:92:84:45:0f:
f0:e9:08:1d:99:7e:17:f5:32:df:b7:fb:7d:2f:d6:e3:01:ba:
38:53:74:10:c8:aa:f4:28:1d:0c:bc:a4:51:de:84:33:1b:cb:
56:a6:b0:ae:df:8c:13:de:ff:86:aa:05:2e:99:3c:e6:9a:5c:
0d:20:7e:75:09:6e:1d:bf:c5:ae:59:53:4b:2b:da:b4:ae:49:
2b:f1:9a:58:e9:0b:f7:42:b0:89:02:94:66:28:1e:db:0c:f3:
aa:fd:0e:34:f0:10:25:10:ae:3b:72:e8:59:22:f4:4d:54:dc:
10:ca:27:e8:74:16:3b:6c:93:74:42:b3:9d:c3:05:5f:38:0b:
76:89:13:3c:48:fc:0a:bf:af:76:1d:67:1d:99:a6:bd:2a:10:
9f:57:f9:54:9c:2f:1f:23:c2:02:ee:cb:b9:9d:fe:e4:38:17:
54:d3:a8:c2:5f:5d:c8:27:b9:de:e4:0b:0a:52:4b:96:a8:93:
c0:45:87:dd:90:22:3a:7c:0e:c6:5c:ce:e7:27:87:d3:ef:cf:
24:ff:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:59 2025 by rpki-client