Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json)
Hash identifier: WStnXrKoDUAvSuiQgyG0NsRBBsD9h+YeSIVUoQp7514=
Subject key identifier: 29:FE:1E:1D:75:FD:EC:1D:DA:7E:95:97:C1:9C:8C:54:D0:E4:E8:9C
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 0198D5F1ABA235F0C9D059D13286104854E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
Manifest number: 0328
Signing time: Sat 23 Aug 2025 08:00:41 +0000
Manifest this update: Sat 23 Aug 2025 08:00:41 +0000
Manifest next update: Sun 24 Aug 2025 08:00:41 +0000
Files and hashes: 1: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (hash: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=)
2: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: AZrzxL183cDfcEoXYJXZ+Q7CiMVlmEcPiiTLLu4hqhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ab:a2:35:f0:c9:d0:59:d1:32:86:10:48:54:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Aug 23 08:00:41 2025 GMT
Not After : Aug 24 08:00:41 2025 GMT
Subject: CN=29fe1e1d75fdec1dda7e9597c19c8c54d0e4e89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:67:34:ec:77:6a:b0:37:9d:7d:e2:88:bf:
3f:7f:2b:5d:2f:49:da:a8:4b:13:6a:1c:a4:a9:01:
1f:38:62:45:f8:69:45:5c:df:bc:c4:6c:9b:63:67:
dd:a0:b0:8b:cd:f5:72:02:cd:e8:f7:d6:50:65:1a:
94:c3:10:d8:33:2f:fb:dd:9b:f7:21:6b:f7:0e:9e:
ca:e9:8b:79:59:ae:22:21:60:fd:d2:ad:53:07:e1:
8a:af:b0:d4:17:df:3f:5d:1e:66:e5:1d:c4:c8:29:
2d:25:d4:d9:04:05:09:9c:21:db:61:1d:ff:62:af:
20:d6:13:ec:6a:15:c0:b3:24:0a:67:2a:34:5b:a7:
7a:27:eb:a7:0f:33:ec:16:2d:97:0d:3b:bc:29:3f:
cb:c1:f8:97:f0:23:3d:fd:05:d8:19:8c:93:f1:03:
a7:3c:05:d9:4a:ff:4d:22:48:43:bb:d6:49:d2:25:
5d:e9:fe:ae:c5:f5:6a:14:42:48:f4:5c:52:01:68:
60:ea:7f:85:e9:d8:a1:16:65:b9:ac:85:06:c4:08:
2c:ae:1f:6a:7a:53:ae:af:f5:2b:a4:28:a6:c5:0e:
19:a3:df:12:8e:55:9d:53:ed:21:c0:02:66:a9:4e:
8b:1f:12:bf:cb:0d:48:8e:cc:76:94:b1:ba:52:3b:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:1E:1D:75:FD:EC:1D:DA:7E:95:97:C1:9C:8C:54:D0:E4:E8:9C
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:41:59:c5:2b:e6:42:9b:56:93:82:44:17:65:14:65:a8:8f:
fb:b9:61:e9:e9:30:cf:2e:1d:bd:45:83:2d:d9:e3:d1:c5:a4:
35:77:3b:04:39:65:11:75:09:6a:34:7f:1c:5d:21:cd:c5:bc:
ab:2b:f1:28:d3:2c:55:7e:3e:53:6c:7f:03:1b:c2:f0:3b:29:
05:a1:08:28:0b:fa:83:29:c1:19:9a:9b:43:17:3c:37:e8:77:
09:f6:57:5f:52:65:cc:59:74:cc:4e:05:50:ff:b8:97:bc:bb:
d7:ce:52:88:91:62:57:ce:aa:de:38:f9:b7:9f:3e:06:08:0a:
d2:cb:74:80:af:c1:b5:dd:bd:c4:38:0f:92:de:35:1f:8c:0a:
cd:a6:a6:a3:f6:84:19:01:62:c7:71:47:5f:91:cc:81:ad:2e:
a9:c9:b2:c3:1d:9c:f3:bb:03:74:fe:c9:5d:c7:7b:5b:96:09:
cb:b1:0c:39:7f:09:7e:a2:6a:c8:a5:c8:73:7a:9f:bb:d3:11:
fb:9b:9a:95:8c:89:ee:98:e8:5f:ae:71:90:49:56:dd:63:95:
af:c7:3f:04:93:21:cb:3c:14:2c:99:cf:f3:fd:e3:d2:20:61:
24:04:9b:76:e7:60:4c:f5:b5:e4:70:5c:e8:3e:8a:f8:81:25:
11:51:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:11 2025 by rpki-client