Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: np8vlcRLvs/Ys2DFH3DUEqkntQ292aoGfFuINPMhKuE=
Subject key identifier: 1C:2A:5F:F4:D3:56:BE:47:E5:B0:12:95:3A:54:6D:B0:98:BB:40:55
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 0198D661057FB6088536A24A874FA50CF3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: Y7CTxC3D5Pvo3WpQEVCcHoJO37GlJh8E3Xh4NV3cC4Q=)
2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:05:7f:b6:08:85:36:a2:4a:87:4f:a5:0c:f3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=1c2a5ff4d356be47e5b012953a546db098bb4055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:91:e4:b3:b9:d6:e0:98:96:9f:51:7c:e9:
17:d8:8f:3c:42:b0:c9:1a:4c:e0:f0:07:83:63:ea:
e5:94:76:13:16:03:21:d4:04:fc:43:0c:90:27:c9:
6c:5d:d6:a7:1b:7d:54:42:d7:01:46:9b:80:cd:5c:
d7:6b:4f:ea:62:2c:b7:4b:f3:94:55:8a:47:fb:57:
94:45:f3:2f:43:3e:7e:60:00:75:04:92:a6:7c:33:
a2:fe:d8:a0:aa:f6:72:9a:3e:9b:c7:23:2e:27:89:
4b:ac:1d:4b:03:23:6a:e8:ba:5c:0b:b1:ef:03:5b:
7c:31:26:67:20:de:fe:14:79:32:81:11:3f:d0:a2:
ed:7f:fe:78:63:31:41:0a:81:c8:c9:e2:ae:47:22:
67:46:de:cd:55:aa:38:69:74:88:39:12:46:e9:16:
57:71:f7:29:63:5c:fe:4a:d5:4e:0b:e1:6e:69:dd:
b1:14:c9:53:d1:b2:58:ae:9a:2d:7b:52:63:8f:d2:
0b:8a:a9:00:6f:0d:c6:f3:e5:fa:2c:ec:9f:a1:ca:
8d:a9:ba:62:ca:c4:52:ef:f7:dc:ee:d7:6c:05:f8:
93:8d:f6:71:4d:63:8a:14:bb:c0:2d:8a:2a:57:62:
b6:ae:aa:f8:c3:db:dc:c9:f1:3c:63:9a:b3:02:b9:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:5F:F4:D3:56:BE:47:E5:B0:12:95:3A:54:6D:B0:98:BB:40:55
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:96:c2:dd:78:00:88:27:7a:04:e2:06:08:8a:40:65:71:32:
d5:83:7c:8a:a5:bb:89:5a:db:4d:1e:3b:fd:c0:e7:52:fa:16:
e6:5d:9b:8e:06:da:44:2a:94:b5:e0:3f:c4:dd:d8:18:18:08:
fc:ae:fd:7c:ef:23:32:6b:d1:7e:36:e0:fd:8a:98:ad:1e:37:
12:c5:1d:e1:bc:29:ee:6b:7d:5e:3a:f5:ac:b9:79:43:c7:c4:
79:d6:75:22:e3:7f:d0:69:29:38:cb:87:3c:c9:9e:2b:c5:21:
9f:6d:b3:7e:41:fc:91:a9:6c:26:86:76:c9:08:bc:06:c5:c2:
e4:61:da:c7:32:99:14:c1:ca:9d:60:49:0c:ba:51:86:db:85:
bc:06:ff:79:8a:2e:c6:64:4a:9e:79:c6:4c:32:34:90:9e:fd:
c6:26:39:7e:88:96:e5:07:14:3b:b2:e1:5d:f7:a1:68:ea:7e:
60:01:46:f6:24:40:52:57:be:35:0a:ec:cb:08:85:06:85:b8:
5d:a9:da:24:be:5a:12:2c:12:87:c2:ba:ed:9f:18:3e:59:b8:
88:39:f3:e6:4a:10:f4:b8:2d:b3:d8:82:22:4a:07:29:87:c6:
b1:80:03:38:be:65:c6:36:10:5f:f2:1b:21:9a:6c:32:75:e1:
5f:9c:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:22 2025 by rpki-client