
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier: Ojk1Jqomp2t4rg/5kuNJKaUZy/qB0r28EFpceFhOOHg=
Subject key identifier: 11:6A:EB:B0:F8:48:56:10:2A:20:27:F5:C1:96:89:88:AD:9C:EC:68
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 0198D404A288EF433F83253F1564B743F9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number: 1233
Signing time: Fri 22 Aug 2025 23:02:10 +0000
Manifest this update: Fri 22 Aug 2025 23:02:10 +0000
Manifest next update: Sat 23 Aug 2025 23:02:10 +0000
Files and hashes: 1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: KuKe4uFoc3Rge2MzeA4k8dblc59h41fyazZeV/fyO34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:a2:88:ef:43:3f:83:25:3f:15:64:b7:43:f9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Aug 22 23:02:10 2025 GMT
Not After : Aug 23 23:02:10 2025 GMT
Subject: CN=116aebb0f84856102a2027f5c1968988ad9cec68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:6e:01:bf:55:f4:31:dc:99:66:de:a3:b7:
21:ee:7a:08:40:86:2e:23:8a:09:6a:43:24:bf:4c:
99:37:c1:23:66:f7:ee:b6:60:80:26:38:95:f9:47:
45:10:94:ed:cc:7e:2c:ee:62:d3:48:36:c2:6c:87:
14:e2:f8:fb:3c:2c:a7:72:86:f4:c0:9f:95:0f:82:
d9:fd:15:cd:ee:df:4a:cc:32:41:c4:94:73:be:cf:
6f:b8:9c:9e:1e:3c:d0:39:c7:8e:ad:3a:22:7f:2b:
36:36:4c:ed:6a:b2:27:f7:13:7c:49:f3:1f:a4:6e:
eb:62:db:07:50:2b:46:4c:0f:fd:77:b0:58:5d:3e:
c2:18:36:81:61:39:70:4f:39:06:1f:b4:a7:4a:98:
71:b5:5a:20:c7:db:e6:d6:c5:1d:2c:f5:39:5a:d7:
c6:11:a1:87:f1:48:b6:86:26:6d:19:d3:c4:c8:b8:
8d:37:77:8f:fa:40:a1:a1:5a:07:b9:5c:92:80:bb:
c1:02:f3:e4:6e:38:03:84:d7:2a:d8:8b:34:14:b6:
aa:20:79:17:8a:61:eb:26:ab:c7:39:4d:d6:27:e2:
37:1a:37:e7:4a:68:db:9b:c0:8c:27:ba:dd:ec:6f:
13:97:de:18:1c:74:a4:11:e8:ea:f1:ae:eb:4f:6c:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6A:EB:B0:F8:48:56:10:2A:20:27:F5:C1:96:89:88:AD:9C:EC:68
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:95:9f:78:5c:73:eb:f1:0f:7f:1c:24:9f:aa:85:b1:87:4f:
a5:16:68:b3:b0:4b:98:7a:19:c7:50:21:f0:36:a5:f0:99:c5:
fb:2e:fb:16:62:19:9f:6f:6d:a2:ef:79:7e:77:46:56:04:49:
7a:b7:26:b8:6f:78:d4:50:5f:60:a4:74:29:32:5e:31:dd:d2:
02:33:09:fd:45:93:2d:ee:90:7d:8d:95:e8:77:4e:c7:36:e4:
75:e4:b8:bf:b8:69:4a:5a:0e:01:db:b1:9e:21:dd:7b:4d:8c:
69:f4:6c:05:c8:b1:f1:1e:25:a8:64:dc:f4:95:a4:fa:51:9c:
9a:d8:37:b7:ef:63:db:b1:a8:c7:af:82:ef:b8:ca:30:65:82:
88:8f:c9:8b:18:7f:76:42:22:ba:58:9d:3a:af:ef:9e:97:96:
b1:c3:bc:b9:52:04:67:5c:61:66:66:a0:97:45:8c:67:27:ae:
f8:d2:26:23:b5:ff:2b:a8:51:e2:bb:42:2c:af:43:81:59:0e:
79:ee:a6:f9:5c:4a:b5:3a:2a:d1:78:1c:b1:7f:25:bb:1c:d3:
fa:94:e5:2c:db:f3:3b:b5:9f:bb:6b:1c:c8:4d:09:4e:71:7c:
1e:6a:d5:15:d1:cd:a4:20:ce:5a:21:29:f1:b5:7d:e2:99:9e:
67:76:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:21 2025 by rpki-client