Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: /PsTVeUL96yksOBfif6wkeSTb14AaLcukvATkwyI2ac=
Subject key identifier: 53:F6:69:15:BB:A4:95:81:98:06:42:C3:DD:87:CC:82:E4:A1:A7:95
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 0198D4A7C7607D4835C01846E3CCDB57E17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 069F
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: AD8WOkZj3y/7tzATBARBvjatw1TXCueNatX5u4EyRa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c7:60:7d:48:35:c0:18:46:e3:cc:db:57:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=53f66915bba49581980642c3dd87cc82e4a1a795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:2b:44:d0:a0:3c:63:8f:c4:65:a3:a4:dd:
f3:7b:fd:8e:b4:03:ce:64:b5:50:cf:6b:80:62:bc:
a6:50:fb:51:8a:f6:74:e0:fd:9d:f6:61:2d:9b:76:
64:8d:42:3a:a4:8f:5f:75:1b:28:b7:be:d3:b8:00:
64:87:59:a5:b0:a8:2a:e3:81:21:5e:c7:82:aa:d8:
cd:52:bb:b8:41:c4:b5:ad:c0:ae:6c:68:af:7f:22:
b7:d5:cd:c6:89:6e:1f:7d:37:b6:4a:f8:30:7e:9a:
c2:f1:f1:e2:74:7a:b2:4d:a2:0a:1a:aa:12:9a:a7:
e0:c4:38:86:42:fc:f5:9c:45:74:fd:e8:3b:3e:e6:
38:cd:89:98:70:52:53:ef:25:a3:b9:7a:1d:09:ec:
bf:fc:3d:dc:07:21:95:06:73:f5:99:aa:80:75:28:
bf:75:a9:8f:1c:46:a5:2e:44:82:67:3e:81:f4:21:
ba:bb:0e:6c:fc:2c:ec:7f:33:b5:d2:64:45:ad:33:
b7:3a:df:fa:3b:75:10:27:2b:fe:32:a8:6a:7a:59:
86:d8:ae:a2:fb:f1:20:01:c2:af:8e:6e:84:df:ca:
b8:30:06:3c:b1:0f:1b:d7:81:22:70:d8:2f:34:ff:
11:6f:01:78:75:90:0d:0a:ae:40:eb:94:33:13:7b:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F6:69:15:BB:A4:95:81:98:06:42:C3:DD:87:CC:82:E4:A1:A7:95
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:65:2e:61:1d:91:dc:eb:df:84:e8:4e:35:87:36:98:7e:54:
99:fa:5c:99:d6:4d:f9:3d:65:91:2a:f7:13:f1:5a:3f:cb:f1:
2c:56:75:00:5d:a6:17:4d:82:35:d1:79:1c:eb:86:60:c6:e8:
05:fb:78:11:d6:67:f7:4a:c7:cf:d5:9f:2d:95:27:b8:27:5a:
0a:bd:31:6f:a5:b8:11:de:b1:b3:0d:cf:5f:d0:42:b8:a3:db:
8a:84:40:28:00:f2:8a:f1:9f:90:dc:9d:29:de:36:f5:b1:33:
2f:cd:64:23:a4:50:0c:db:17:47:94:02:5d:fe:26:85:7d:41:
b0:6f:b7:16:09:eb:8e:88:40:21:0e:0e:6c:7d:d4:52:f5:0d:
61:99:68:5f:91:72:5e:80:a0:e1:ab:cb:e0:d0:a2:f3:a7:f9:
15:a0:26:3b:a0:52:a7:8a:ec:28:70:57:36:db:8e:d3:2a:76:
ed:dc:b7:47:b7:82:26:14:2e:49:4c:2c:25:37:1c:eb:a8:77:
be:28:b0:0c:66:f7:ba:16:91:a5:61:78:e7:47:ef:c2:79:50:
cd:fb:03:50:a3:84:10:7e:20:4b:28:0c:56:19:94:19:02:95:
16:cd:14:88:74:a7:85:dd:4b:87:a6:28:72:38:03:04:d9:c7:
47:63:25:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:22 2025 by rpki-client