Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: N6+wo1kI5/4vHl4msPQY9DluKA9zFfDjX9vQjlotZ8U=
Subject key identifier: 1A:60:56:3A:D0:C9:75:86:01:A5:C3:35:0E:31:57:80:49:B9:B7:E2
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 0198D5F1BBB232A80E1CB2DC9A83CE2333C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0B4F
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: VGxwoV6XEIX5PdlOKiJToZ+8jwym7zLYqthNmhpNcmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bb:b2:32:a8:0e:1c:b2:dc:9a:83:ce:23:33:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=1a60563ad0c9758601a5c3350e31578049b9b7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:a0:67:4f:b2:ed:e7:70:82:0f:9c:09:ca:
82:8f:a5:5f:32:e2:a2:9b:53:8a:69:c5:56:7c:ab:
71:55:5e:62:33:bf:15:d5:29:74:32:3c:cb:3c:a0:
30:7e:f4:30:0d:38:28:53:ce:bb:97:8a:0e:4c:67:
6f:8f:06:70:99:b6:df:35:c9:37:9b:8e:63:86:ce:
17:d1:4c:e1:be:e1:86:f8:bf:52:0f:58:a0:b0:25:
69:16:5e:a5:fd:57:97:5b:e3:fe:08:2d:fd:92:85:
bf:cb:44:ec:73:74:2f:90:93:35:f9:53:a8:07:9e:
03:14:50:06:61:12:96:2d:10:32:a9:0d:a8:4a:ff:
3c:c2:1d:76:dd:1b:e5:ee:83:83:96:f7:33:95:e1:
45:8a:e5:4a:a9:6c:63:d3:1a:5f:03:5c:41:3e:df:
d7:98:41:f0:60:d3:eb:61:04:cc:8e:ae:df:f5:08:
0c:ca:9b:80:6b:e4:c4:73:52:0a:63:f2:6c:01:7c:
b2:12:c3:c8:56:3f:70:c9:ce:e3:eb:f2:51:71:fe:
8b:3e:0b:37:1f:31:ea:33:39:c8:1b:fd:28:0e:6a:
4f:53:80:9d:65:2d:55:d3:7b:6e:8a:5a:fc:cb:ff:
7a:e6:50:ed:fc:84:70:6a:5d:51:87:70:23:bd:7e:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:56:3A:D0:C9:75:86:01:A5:C3:35:0E:31:57:80:49:B9:B7:E2
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d0:10:32:32:f0:06:f9:e4:c2:dc:60:65:64:7f:a1:af:e3:
be:c5:7a:83:a6:6f:f7:8d:7d:04:fc:e0:29:f6:f8:7d:21:ca:
d3:1e:36:5c:b9:10:9b:81:e0:29:bf:c6:69:72:8f:68:04:c7:
e1:fa:3a:75:06:f4:c6:f7:4b:c9:46:49:a3:bf:95:fa:31:6e:
0d:0f:f3:fd:c4:7e:c1:2f:5b:b6:5e:48:b9:7a:cc:3b:64:9d:
4e:b1:6b:20:39:92:4f:11:67:7f:dc:a7:c6:93:72:13:23:4d:
f9:2e:e3:3a:43:ab:b1:3e:38:91:dc:1e:f2:28:79:45:9d:78:
6c:56:04:31:d8:c6:79:88:09:74:d0:aa:d1:17:64:52:68:12:
f4:2f:24:3c:b5:f1:06:b7:b1:ae:86:94:b7:c8:f6:2b:0d:38:
5c:07:a3:e4:b3:a3:ed:b4:63:fe:37:8e:3d:dd:5d:c7:08:73:
33:3e:5b:12:14:5b:68:7d:51:de:09:6e:0b:a8:fa:bf:ac:1b:
34:1e:8b:23:26:9f:25:38:b5:e0:04:42:56:83:13:15:60:8e:
be:45:44:4a:b3:ab:76:d5:8a:6d:bf:56:e5:28:02:ec:ab:a1:
e4:6e:ff:eb:f4:d1:a0:a5:e1:f9:fb:ac:07:d9:89:c5:d8:77:
18:15:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:29 2025 by rpki-client