Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: L5o/ClKC0O2N0uuLGEPJCCu4ujQDaXErCWspf2rMdQw=
Subject key identifier: 3D:D3:37:B3:5B:DF:93:D0:49:9A:2E:7C:97:69:04:19:82:FA:BF:1C
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 0198D5BBD813C2F73438D149995CB47C4093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: BtFFasa4p+BZvNzfA593Ay4WixIpe3n1iOA6Tf9BK2E=)
3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d8:13:c2:f7:34:38:d1:49:99:5c:b4:7c:40:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=3dd337b35bdf93d0499a2e7c9769041982fabf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:47:60:01:c2:b5:3d:0b:4d:fe:e6:ef:dd:
e2:a3:17:0a:2c:f2:f4:50:15:22:ec:fc:1a:d2:1e:
e6:3e:b4:d4:1b:1b:b1:94:1d:6d:c6:89:28:42:f4:
bc:ef:a6:29:2a:d2:12:4c:76:9b:07:e8:70:12:c2:
21:b1:62:7b:ef:08:ff:46:75:3a:34:29:60:04:3b:
e8:ba:6f:08:67:62:07:28:e8:b4:a0:67:40:c8:47:
bc:83:ce:80:61:84:59:8a:0b:e0:9a:29:a9:72:ee:
dc:b1:ce:6d:49:f3:80:d6:e2:bd:bf:ac:10:52:75:
de:70:95:a1:9b:9e:fe:04:1b:cb:7f:da:1f:93:0d:
54:1c:56:f9:bd:5f:6d:03:f6:bf:75:2a:81:92:75:
85:5a:b4:a2:09:1e:11:26:2d:73:cf:3b:3d:a9:ae:
85:1e:22:7f:f9:3a:89:49:1b:1a:a4:72:9a:87:6d:
6b:91:9c:1f:c7:e8:1e:3a:32:c8:2e:34:9f:03:f7:
94:77:48:92:6a:22:8e:fc:f1:fe:6b:15:2a:8b:20:
c2:a6:ea:82:fb:74:e7:ad:61:b1:ea:80:07:cb:b1:
29:6a:e5:3a:8e:b8:55:32:c3:31:8c:f2:fa:0f:cc:
02:69:14:e2:94:4e:ce:28:e6:ce:7e:20:7b:4e:45:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:37:B3:5B:DF:93:D0:49:9A:2E:7C:97:69:04:19:82:FA:BF:1C
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c8:58:a8:8e:36:1c:4d:4e:ba:f1:0a:0c:46:85:83:ba:dd:
2a:91:ed:52:30:47:bf:9b:88:b3:47:2e:40:23:b8:f8:5c:c4:
09:8f:a6:a5:49:e7:fa:b1:08:c3:1e:4a:99:59:3a:6b:df:4e:
a5:8c:d0:05:7a:71:76:43:f5:c7:99:65:53:3a:b5:d3:6d:e0:
86:c5:6d:b5:d2:93:09:2d:d1:3f:31:02:37:cd:de:15:89:26:
a8:7b:91:cf:63:a5:e3:4d:5f:aa:dc:aa:7f:cc:79:42:d1:cb:
0a:2b:4c:f9:cc:a1:34:56:d9:e7:dd:e2:e3:56:3e:c6:94:e3:
71:4a:ca:fa:af:f0:3e:3a:9b:ad:b2:f5:24:da:7d:0a:84:63:
17:5a:cf:a0:9f:a8:b9:3b:6c:97:c4:82:ae:0f:c7:31:6c:85:
61:10:ac:a5:95:db:ba:bb:a1:2e:66:38:01:52:80:86:8a:2d:
a1:be:fe:1d:3d:ae:80:a2:3f:d5:03:90:14:79:a8:b9:80:0a:
f0:8b:5b:35:e7:1d:26:33:44:cb:ec:60:7c:f1:49:8e:96:81:
c4:24:6b:38:f2:2e:16:cb:5f:d3:03:59:82:f6:70:68:0c:53:
60:73:27:73:d2:e7:aa:7c:fc:89:ac:dd:f5:c5:a2:31:96:89:
ac:e5:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:57 2025 by rpki-client