Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: GC6r5WVSPwzmqE9hzqBVw5OdQa5BaDtwhiW87VNIf9U=
Subject key identifier: 9D:D7:6A:F6:28:52:BB:D2:95:1E:58:2D:0F:05:77:11:8C:E7:D9:3C
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 0198D54E6B6B66125B0F9190923DD4B5E90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 06A5
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: wH35GADphalFplIoWdcO3K83KINBAri5RYrSIxVcU5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6b:6b:66:12:5b:0f:91:90:92:3d:d4:b5:e9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=9dd76af62852bbd2951e582d0f0577118ce7d93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:db:0e:21:88:8c:4e:8f:b2:6f:7d:5d:ab:
fa:b6:5c:29:59:06:1b:62:13:5a:6a:90:d7:0d:4c:
45:93:06:3e:3c:b2:2e:6a:4e:a9:61:81:41:fe:65:
87:27:3e:5e:92:ba:20:d8:59:c8:71:6d:6a:96:38:
ff:03:0e:da:f7:36:c6:96:c8:4e:53:a5:f5:c4:50:
4c:f0:46:f4:e8:d2:05:95:e0:d7:ef:83:52:c2:a6:
5b:d4:81:0d:62:61:cf:91:42:68:86:76:e8:20:b4:
95:50:7e:1a:5b:c7:d5:64:1b:79:24:ae:1f:7e:82:
60:5d:5e:50:42:02:c3:c1:e4:f9:13:55:60:28:d1:
87:5b:98:97:c3:d9:5b:b5:09:20:09:16:22:17:61:
43:0c:d1:98:94:88:57:eb:44:04:27:43:0b:8e:4d:
49:09:ab:fe:f4:12:db:72:67:3b:24:db:8d:33:38:
53:0d:7c:08:ed:61:1c:67:cb:33:b4:4f:db:58:c8:
38:f8:3e:ba:aa:40:95:1a:96:6c:a7:b1:ea:81:7f:
9b:39:4a:94:c6:53:a6:8d:13:b1:7d:ff:da:29:c3:
b1:0a:51:6f:5d:54:66:68:23:bc:a4:0c:0f:0c:27:
c3:01:27:aa:cc:85:4c:ce:d5:c6:9a:e0:ce:03:04:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:6A:F6:28:52:BB:D2:95:1E:58:2D:0F:05:77:11:8C:E7:D9:3C
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:31:88:2b:da:b6:49:2d:9f:8d:62:98:f2:ec:be:04:2f:
d7:8e:38:88:1f:4b:f9:91:ca:aa:ea:28:4c:bf:ac:a7:1e:0c:
3a:78:85:43:ce:c2:37:a8:dc:36:6c:25:5e:05:bf:1e:cc:8f:
2c:96:99:2b:1f:02:80:18:c1:49:30:05:51:0c:e1:b0:6e:62:
92:b7:09:fa:b8:f8:9f:46:5d:4f:84:9c:7f:bc:c9:e4:5e:58:
43:9a:a4:46:55:56:52:69:ec:54:fc:f6:d5:b8:42:e3:4d:bf:
ee:df:1e:ac:d7:e4:54:91:26:4f:ef:be:3f:50:da:d3:1c:fe:
ec:09:df:24:9a:36:af:ab:2f:3c:d2:f1:3a:79:47:aa:1a:fc:
9c:be:f4:d6:34:5e:5b:55:98:24:e3:a5:33:a7:24:63:42:84:
25:76:d0:46:86:ff:2b:6e:d0:1d:27:f9:6b:06:be:94:63:67:
c9:ad:e0:6c:ab:71:d5:d1:32:3b:f2:e1:38:d8:11:45:6e:f3:
5f:19:bf:6b:d1:5f:b0:94:31:35:12:6d:24:ab:c1:33:0f:4b:
42:34:d2:ed:0e:fb:1c:a7:1b:54:29:c5:03:ff:a4:e2:f1:70:
2b:5d:4a:35:58:e4:67:79:bf:e4:4c:1d:e9:a6:43:84:36:db:
5d:d6:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:27 2025 by rpki-client