Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: JH8k3eVb0YqK9Ctyn5IpKz5ie7rAgK2vbUhu9/ingag=
Subject key identifier: 7E:1C:90:62:EE:5F:7F:50:7D:13:CB:17:75:3C:41:20:92:54:FF:01
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 0198D54DEFB217081484128DA833B4783B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: dptu5mSK8brmSEUgtM6xkrT36vuG/COQDiNrF8Cx+Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ef:b2:17:08:14:84:12:8d:a8:33:b4:78:3b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=7e1c9062ee5f7f507d13cb17753c41209254ff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:9b:d6:56:8a:b3:48:1a:2e:82:8c:95:43:
e9:af:54:8e:3d:a7:7c:14:7c:f5:c7:ef:3b:31:26:
fc:8b:f8:04:18:de:dd:76:62:7a:4a:7e:99:43:d6:
c0:52:a0:4a:b4:0c:09:4a:d0:ad:d0:37:49:4c:ac:
a4:64:79:f5:a2:04:df:ed:f2:8c:41:cd:4b:b9:2f:
8c:06:05:2b:86:d4:ff:d8:62:15:6c:6d:59:60:58:
9b:56:12:f2:26:b0:88:74:4d:9c:7c:62:e4:3b:ba:
9f:84:f7:fc:8b:3e:42:c4:63:01:45:fe:1e:f3:d6:
8c:b6:b3:14:d7:92:ed:62:c1:fa:af:b8:78:6f:ab:
81:69:68:ff:18:a0:60:87:c8:89:4b:bb:a9:e8:30:
59:1a:52:b9:16:bb:aa:d3:17:4b:7e:dd:c1:a8:7c:
ac:d7:58:bf:13:ee:63:be:cc:aa:d9:d9:47:96:56:
93:a2:5b:12:8b:f9:41:d9:d3:f4:16:c7:a7:2a:4f:
04:46:c6:11:df:05:ab:52:3d:da:fd:2f:d1:5a:dc:
c7:e4:19:47:3b:1c:b7:96:92:17:39:39:8b:e3:48:
b6:2c:a8:d9:9e:aa:7d:d1:e4:f1:9e:40:6b:df:03:
06:8b:75:2b:9a:75:69:e6:18:88:70:18:f9:4d:25:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1C:90:62:EE:5F:7F:50:7D:13:CB:17:75:3C:41:20:92:54:FF:01
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:9a:0d:ad:b1:3a:ad:bd:b2:d8:cb:7f:21:9b:b9:b2:77:
4b:70:f4:b7:9e:5c:19:9d:f7:f0:29:2f:ed:04:0d:2e:52:e1:
63:44:2a:bb:d0:f3:2b:f1:d8:8f:5b:c1:9b:d8:d4:99:80:46:
03:d7:96:95:e7:fe:f6:27:0e:c3:cb:57:45:2d:93:fc:30:4b:
b3:33:1a:d7:09:d8:17:0d:58:c8:c0:8f:06:7a:a2:02:12:aa:
10:58:49:27:29:5f:aa:ae:b6:76:e1:c3:d8:85:d0:24:e0:b2:
1a:09:0c:be:e4:7d:5b:77:24:96:9b:06:72:77:9c:18:2d:9e:
74:8a:4d:ae:b9:8c:d5:86:88:81:e2:dd:02:60:6a:80:13:2f:
6d:e7:24:63:9f:5c:4b:2a:92:03:94:09:2b:43:af:69:d5:9f:
c8:fa:b4:53:1f:78:0a:19:69:c9:0e:ec:5a:c8:75:a6:57:61:
17:4d:1d:64:ad:ce:ae:b2:27:2c:11:70:9a:74:3d:b6:89:54:
44:a5:60:f8:8f:a8:2c:27:a0:d2:61:97:6e:bd:17:3a:a9:3e:
1d:ab:be:59:c3:dc:45:92:55:15:76:03:6a:b7:7a:1d:be:2f:
d6:52:2e:be:c3:29:9a:46:0c:d4:f7:e9:3b:2c:fd:3d:f8:28:
5c:5a:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:03 2025 by rpki-client