
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File: YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier: f108swx7R91mXczA1ECB6k7zP1xHVyMTy8vIicTKOLM=
Subject key identifier: 9D:74:DC:6F:56:67:61:1A:27:4F:11:6C:97:53:79:C7:7E:E2:26:5B
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 0198D473E786A08F2F5F8A064E7635E74005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: 5fuh3MDvvFTdM9YPWplIlmW8ZkA.roa (hash: Wdi/0+eUolZTOBljIE3hewam0WUu332lXIc8cs32Fgk=)
2: 925S4SchOi83vL3V68Y_AUuJSD8.roa (hash: 6EULq2ShinRvQFwY+uALe+ivLl2vWfr/F3fyELn3cug=)
3: PGmGsgYp4SpOgDQPzfkm2Kp84ms.roa (hash: QvQzg0nCw1e7QpH5gXcvQpoprtCI6UOH6zwCxDuFkv0=)
4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: j5MznhetqeGBVaayeTVJHr3G388u0+LJXmQSX9pUaAo=)
5: z3s2kSvc4H2ywLCnLljgXCeMKHc.roa (hash: pgMrP+tE9sQxVvQRywnzdq3UOn28MH01XXGUWXVHask=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e7:86:a0:8f:2f:5f:8a:06:4e:76:35:e7:40:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=9d74dc6f5667611a274f116c975379c77ee2265b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:4a:ee:56:6d:fa:8f:7d:79:ca:f9:da:bd:
7e:fa:be:84:9d:87:98:42:a3:cf:8a:92:01:43:e8:
72:5a:22:96:61:ab:41:2a:58:66:07:54:53:00:0c:
1b:4f:bb:bf:6c:74:ed:9c:ad:a4:f0:d4:10:02:0c:
16:57:42:e5:da:54:91:5f:8e:89:c8:2e:b4:76:0b:
c8:de:e4:72:ae:7e:2e:27:d8:73:c3:00:a4:be:fc:
01:9f:c3:ea:27:a8:7f:ff:85:27:64:53:37:1b:93:
0c:43:fa:81:b4:2f:5b:a8:1a:2c:c9:3f:f6:14:bd:
8f:25:2e:3e:d6:bf:45:a8:d9:fe:5c:ae:a5:66:ec:
54:34:33:3e:dc:dd:61:dc:d2:c3:41:31:23:cd:92:
d6:45:d5:54:c3:4f:1c:ea:0f:37:68:f5:46:b5:ad:
ce:fc:b4:32:52:9f:de:6e:a2:38:05:44:03:2d:6b:
d3:42:24:97:80:72:21:b6:ba:25:b4:9c:29:78:11:
3f:50:f7:c9:6c:2f:ee:62:5c:dc:61:f1:24:c8:9b:
98:4b:5e:9d:62:16:fa:03:96:73:2e:13:c7:cf:b5:
95:b5:d3:ab:5a:8e:aa:af:e1:69:8b:25:80:09:db:
fd:21:d3:32:85:17:01:3e:2e:e9:4f:41:77:13:34:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:DC:6F:56:67:61:1A:27:4F:11:6C:97:53:79:C7:7E:E2:26:5B
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7c:b1:b9:0f:04:9e:2f:6d:41:99:bb:ad:a5:7e:c6:93:d1:
c6:08:bf:0f:8c:7c:40:2a:d0:fd:f7:5c:80:0f:96:b7:5e:83:
0c:d9:71:71:98:f6:36:b2:21:e7:b2:aa:02:77:58:ef:92:3a:
c2:4c:6f:35:ee:fe:db:46:33:2a:ce:cd:32:2a:18:ee:56:1f:
f9:0d:38:e5:b9:c1:e0:d3:11:7a:54:a3:ab:ae:34:e6:6a:53:
d4:d5:e6:b3:ef:1d:7d:70:c4:5e:22:6c:15:98:91:b7:5c:5a:
48:58:9f:a5:1b:d7:fa:13:d1:4a:d4:a6:3f:03:f7:a1:c6:1a:
2c:23:78:0a:41:57:15:1d:22:84:99:d6:a8:c4:f0:bc:29:ae:
80:f7:26:48:28:8a:a6:7f:73:e2:ef:7c:6a:21:60:70:9d:d8:
e4:b2:21:52:01:61:30:08:88:95:db:36:7f:1d:43:15:01:0f:
cf:07:94:54:84:7c:d9:00:ca:07:b6:07:a6:82:3d:6c:82:85:
68:21:34:53:bb:da:1f:98:10:5d:4a:c0:89:02:11:6c:87:bb:
e3:fe:c4:eb:1c:63:d5:ca:97:a7:0e:2e:ed:44:e8:3a:d4:ce:
d4:7e:05:28:44:a9:f8:38:a0:10:69:0f:15:4c:a3:46:69:d9:
4b:a8:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:48 2025 by rpki-client