Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier: z+M8zMoxysqJbM9G2ImyKqXVOeOuJ3j1Km1DnRt2lCo=
Subject key identifier: C6:4A:CE:A2:15:44:60:F6:C2:02:D0:1E:3E:63:C1:9C:12:6A:8C:C4
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial: 0198D5BBB35256377B103721251E580FB365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number: 062D
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: QQlxlfhA9BwLpxAQMkShfHqNuQ8.roa (hash: J1jtN5BQZROl/8dEYO5qeCL3b90fBYd6l0TNzemkVxs=)
2: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: G9fSoySqR9HJtu8ejyunVTtyCJDZMjxdPkoiTEfkQJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b3:52:56:37:7b:10:37:21:25:1e:58:0f:b3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=c64acea2154460f6c202d01e3e63c19c126a8cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:a4:3b:19:14:a5:78:d7:1d:a7:59:59:8a:
3b:4b:50:c7:38:d9:30:78:7e:37:fa:54:cb:14:f2:
6e:c4:eb:b8:37:55:1d:4e:4c:f6:4e:81:d7:a2:38:
46:b0:f0:2d:a4:6f:7e:32:0f:a8:78:6c:55:60:1f:
e4:10:30:84:ec:8d:a6:c4:d1:be:fa:62:f7:83:6f:
d6:be:2a:f0:8e:60:aa:a1:b8:02:c6:ab:b4:b8:94:
bd:b7:e5:a9:40:e6:16:82:25:d4:cb:2a:17:55:54:
9d:9f:7f:f3:88:c5:e4:3f:89:0a:3d:a7:27:09:ac:
4f:a7:74:54:44:50:0a:64:1d:df:f2:09:fa:5d:66:
a9:8c:a6:11:bc:f9:79:db:ba:d5:6f:1b:d3:23:c8:
36:7f:da:5c:fa:94:c4:4f:6b:d1:92:ee:fa:16:35:
84:3f:50:92:7c:15:81:e2:6f:2c:9f:ed:c1:ba:36:
ec:ce:5d:c6:a8:d2:2e:8c:81:4d:2b:b3:6f:64:f9:
37:96:ed:72:16:0b:bb:93:4e:a1:e4:25:c4:c5:83:
b7:21:51:18:6a:12:c8:6c:bf:d3:28:a7:01:4a:f6:
23:a9:42:ec:c8:ed:bd:88:38:53:f8:5b:85:fa:aa:
fd:84:2a:7f:d7:4b:85:9a:65:76:c2:d5:a2:4a:8a:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:CE:A2:15:44:60:F6:C2:02:D0:1E:3E:63:C1:9C:12:6A:8C:C4
X509v3 Authority Key Identifier:
keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2f:c8:71:87:37:05:06:12:7b:1e:d8:f3:35:2d:61:8d:20:
9f:f0:ec:1b:eb:78:f5:d2:7b:c5:1a:f3:0c:11:52:91:9b:d8:
3a:aa:09:1c:c4:7a:9a:72:f3:eb:7b:6a:e6:de:1d:4d:58:c6:
47:4a:24:ec:a4:cb:59:ad:6c:30:08:c3:ca:63:06:04:49:fd:
15:53:62:0c:50:9a:10:0c:0d:a0:ed:79:23:2d:0f:a3:d5:09:
c5:52:e3:17:54:df:59:af:ee:2a:cf:28:40:87:5d:1b:3c:60:
02:02:ea:bf:35:f7:b9:0c:4b:63:e8:39:68:ee:a6:c4:f6:92:
a5:b8:5d:5a:08:92:f7:51:12:b5:05:e0:a1:6e:d9:0e:09:9e:
4d:18:9e:7b:9d:13:4f:7b:9c:18:e7:ea:2a:8c:c9:ee:d2:45:
93:50:c3:f8:46:41:0a:c1:15:1c:c8:e7:b6:5f:d5:3a:01:59:
8b:9c:ee:4e:d2:9d:8a:ba:81:f5:6c:21:a0:db:f7:e6:80:b8:
71:c6:8e:66:da:74:fa:f8:0c:a2:03:63:3a:d6:47:27:88:9c:
f6:d9:55:d1:cf:cc:1f:bb:e8:0c:1a:e5:d1:0b:3f:21:54:10:
6d:6d:70:76:c1:db:e1:95:9f:5b:c7:24:1d:44:81:8e:5b:ee:
04:dd:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:01 2025 by rpki-client