Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: 204SKqfUHpeGNczz0S45fKSAbZyZaGKMsOxkvXQTIxo=
Subject key identifier: 36:73:05:2A:DA:13:CE:CD:70:B5:76:BF:A9:70:55:7C:0E:3F:32:87
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 0198D4DFD224DDC81120968B1D6F8005CFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: vbKexLgpIFOOfO4RhAhumUue8/qTTtPIR14Y2S72suY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d2:24:dd:c8:11:20:96:8b:1d:6f:80:05:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=3673052ada13cecd70b576bfa970557c0e3f3287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:77:ac:57:33:d0:b3:5e:9e:78:09:1b:21:
f3:5a:0b:27:42:6e:cc:f6:9f:ec:66:ee:4f:12:64:
e5:01:06:13:e7:f8:ec:7f:60:d8:cc:fb:96:98:d9:
63:70:7c:de:8d:4b:18:56:4e:c6:86:4f:a3:f5:91:
eb:94:f5:ac:5a:18:66:37:db:56:4d:7e:26:a6:8e:
ae:93:45:0b:02:52:6f:97:da:a3:66:01:a2:27:b2:
97:c2:51:9b:d2:69:07:78:ab:b5:0d:42:42:a4:d3:
d7:c0:02:55:b5:66:44:20:b8:39:94:d8:68:30:16:
fa:e6:af:3c:cb:40:2b:93:ec:16:92:4b:71:ab:c2:
0e:74:b8:c4:10:0d:87:74:1e:0c:f8:8a:02:02:09:
a5:2d:f3:c7:4b:48:6b:d5:35:4b:f9:7c:61:f3:b6:
1a:35:e4:11:80:b7:ae:16:f1:01:e9:7f:99:40:06:
f7:18:9d:f2:e0:17:d7:3a:38:67:bc:0e:13:5e:5c:
d6:61:21:51:b6:5f:09:b4:f1:5d:cf:8e:d3:61:d2:
5d:9b:3f:c0:ff:dc:5b:ad:0a:b3:4b:29:5c:2d:88:
8e:cf:b7:c7:fd:14:99:18:78:3c:ed:43:4b:e1:68:
c8:b5:56:14:a5:43:ed:1c:4b:8b:d3:fa:0e:9f:a4:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:73:05:2A:DA:13:CE:CD:70:B5:76:BF:A9:70:55:7C:0E:3F:32:87
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e4:6d:00:53:35:0a:40:ee:4f:a9:ec:54:35:05:08:47:06:
ba:62:63:e8:0c:8a:a3:4b:5c:1b:a9:d8:e3:2c:e9:e0:02:8a:
49:62:4b:57:69:6a:c0:c1:ad:fe:58:3a:0f:f5:b5:bf:d8:92:
4f:ec:21:f0:f3:cf:71:d9:63:ed:94:29:e4:b6:db:f1:63:ad:
82:9b:98:b8:fb:98:1a:2f:4b:e7:38:3e:03:94:d7:19:54:1b:
2e:b4:b2:4d:41:3a:ff:46:f1:9d:d6:a0:14:f2:78:05:38:87:
a7:1b:98:46:5e:27:83:d3:0d:f1:8c:9e:9e:6f:e2:3c:2b:7e:
8f:8e:c5:74:ae:b7:38:aa:17:36:52:7f:56:48:0b:26:85:91:
67:d1:73:b6:ec:27:99:a2:de:1c:26:64:c4:47:fd:23:19:58:
02:af:4e:33:99:c5:f0:fc:e1:5d:49:ef:82:65:6d:bd:fd:ed:
2e:2a:99:43:fa:f7:35:33:08:ab:b2:c8:c6:44:86:52:67:d5:
f3:f2:c2:37:75:3b:c6:14:00:5a:dc:97:bc:df:17:4c:5b:b4:
23:12:a2:18:39:a5:4b:dd:0e:f8:39:fa:88:94:e6:41:1e:fa:
0d:65:59:19:6b:70:b3:35:c9:5e:54:da:4c:b0:b7:69:fc:bb:
5c:a5:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:59 2025 by rpki-client