Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: kGzq1in+pAcibW2yhLllyLZDyZs9qCdIFiKFzNcTkjA=
Subject key identifier: 27:52:CC:93:F6:EF:17:2C:45:F2:F7:56:F8:B8:6E:DC:B7:46:C5:D4
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 0198D6CE05E8301636BFB82592E2CEE4819F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1577
Signing time: Sat 23 Aug 2025 12:01:22 +0000
Manifest this update: Sat 23 Aug 2025 12:01:22 +0000
Manifest next update: Sun 24 Aug 2025 12:01:22 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: 6/Ue5DfvijE6kjR4pz5LvWRbNYdjsNK0qGoEP3lW1Sc=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:05:e8:30:16:36:bf:b8:25:92:e2:ce:e4:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Aug 23 12:01:22 2025 GMT
Not After : Aug 24 12:01:22 2025 GMT
Subject: CN=2752cc93f6ef172c45f2f756f8b86edcb746c5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:38:60:62:d4:3d:36:b4:e0:46:c8:fa:6f:
df:14:6a:69:69:b1:cb:07:5b:07:cc:6a:5a:56:90:
53:5b:81:8a:40:52:84:14:0f:ae:59:b6:b9:4b:45:
b4:6c:43:17:95:a0:15:ac:1c:f9:b8:b0:7d:b4:00:
aa:ab:65:3e:d3:ea:40:4f:0c:93:8f:e6:3d:4d:0f:
d5:9d:2a:f5:da:e6:45:36:bf:ba:16:98:76:49:1f:
90:5f:21:b1:4c:61:e3:c1:17:b3:d6:92:d0:45:36:
20:79:64:e2:83:9a:0a:75:0f:7f:75:e0:fd:07:01:
b8:c2:a9:cb:c8:cc:07:2f:a5:3f:b4:57:a4:03:f2:
50:b9:95:ed:cf:2a:78:f2:65:8d:c2:2b:c8:3b:b1:
de:1a:50:de:fc:1a:47:73:7f:20:4f:54:a6:d3:c2:
8f:d3:d9:3f:08:47:4c:a3:7c:48:c7:5a:38:97:25:
59:17:69:2e:00:44:74:3a:9c:41:6e:cb:7f:50:e7:
15:a8:cb:cc:15:d1:3c:ac:38:a0:93:fd:a2:28:7c:
e9:bd:33:0e:f5:d0:22:a7:97:7a:19:53:0d:92:5a:
e4:1c:53:c6:30:a3:0c:e4:58:aa:db:d6:11:ef:47:
bb:ac:1f:a9:44:8c:d7:ff:2a:d8:21:4b:48:3e:8f:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:52:CC:93:F6:EF:17:2C:45:F2:F7:56:F8:B8:6E:DC:B7:46:C5:D4
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a8:68:93:e3:db:58:0e:e2:d0:8f:30:a3:37:dc:87:59:84:
db:00:ae:2b:45:92:ff:74:3f:76:0a:b6:58:7d:93:6f:69:9f:
90:45:28:d1:02:07:b2:c5:2a:2f:81:6e:28:0f:87:3f:5a:bf:
89:e1:a3:ad:74:c3:e6:3b:fa:da:00:f8:dd:fd:dc:66:74:0a:
da:9b:56:98:fd:27:34:0f:f7:6b:69:73:70:4c:06:6e:2e:80:
58:45:d6:72:be:14:76:81:fa:29:ef:4c:fd:5d:d1:6b:47:f6:
d5:78:e5:69:fa:6b:24:12:c9:da:f9:21:12:a3:18:b1:f4:0e:
d3:83:f2:ac:e6:d2:5a:81:23:a6:f6:6c:ad:d6:90:c0:d6:4c:
8e:a9:34:00:4b:9a:df:52:fe:a5:2c:31:6b:8e:b5:66:7d:23:
97:41:da:a3:44:e8:71:64:52:89:d9:3c:32:17:64:bb:e5:91:
b8:21:22:8a:0b:53:46:49:05:4d:e9:f7:6f:a0:c8:86:da:77:
a3:cd:19:f1:35:2c:8e:6c:ef:11:d8:7b:26:67:e3:ac:71:27:
be:af:56:99:34:74:e1:55:46:ea:9a:d4:08:0c:2a:8d:af:1a:
4e:d4:70:07:d1:8b:9c:6c:82:f9:c2:21:08:c4:4a:f2:9d:b4:
eb:da:ad:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:52 2025 by rpki-client