Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier: kDdu/vu8hj/ekBY196TZyuAjg8nMEq5ZIAwH7IUSEhA=
Subject key identifier: DC:D5:E5:05:DC:BF:87:41:8B:92:ED:FC:15:3B:91:EC:07:8C:E9:F5
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer: /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial: 0198D404AA75565EF26C7271C7EA055EB750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number: 1647
Signing time: Fri 22 Aug 2025 23:02:12 +0000
Manifest this update: Fri 22 Aug 2025 23:02:12 +0000
Manifest next update: Sat 23 Aug 2025 23:02:12 +0000
Files and hashes: 1: BoZqZz072WMffBg633aOURbd2Lg.roa (hash: b9zcHNJaQ+Hj+ANj7i08VVN5oo2tzosCmEXhBWweaRk=)
2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: wp3CKjwHB23qZJeC157bWzdnfi62mIuyhcTuHtCJ0+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:aa:75:56:5e:f2:6c:72:71:c7:ea:05:5e:b7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Validity
Not Before: Aug 22 23:02:12 2025 GMT
Not After : Aug 23 23:02:12 2025 GMT
Subject: CN=dcd5e505dcbf87418b92edfc153b91ec078ce9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:a3:e8:2c:93:c6:c8:11:b9:06:5c:d4:d6:
01:7d:34:37:4d:3a:f7:0a:97:39:00:b9:31:d7:b5:
b7:8a:12:fe:33:8c:8e:92:1e:f9:7a:74:a1:fc:2f:
f4:5f:0f:57:ae:28:64:45:37:03:18:dc:64:17:58:
68:9e:a9:91:d4:11:b4:94:3e:09:93:f2:75:2c:57:
a6:bf:c0:1a:3b:c2:36:56:87:21:4c:b3:e4:fc:78:
a1:a3:86:3e:91:35:12:43:f8:11:fe:27:45:f8:d5:
2f:07:2e:2c:d4:10:1d:d2:3d:dd:e2:7b:2e:93:3d:
41:71:5e:51:d7:d7:45:4d:d3:3b:38:5d:5d:cd:11:
dd:b2:84:73:58:a9:5f:0c:41:5e:b7:f3:97:22:82:
af:c3:f8:7d:58:40:5e:f3:1e:e2:25:bf:9e:46:50:
52:07:f6:8a:49:97:a5:c6:20:d2:29:ad:8d:65:54:
ac:8e:fb:65:ce:e1:2e:96:c4:c0:ea:c3:3e:ee:55:
75:8e:9b:24:bf:73:a7:69:67:bf:c7:77:09:e7:84:
b1:8c:65:9e:8a:b9:57:6d:0b:84:88:bf:ba:34:d0:
ff:75:af:d8:c1:33:62:d2:77:79:6a:fd:00:38:77:
08:9c:d2:54:6d:9d:fd:00:64:ab:6a:27:4d:89:e9:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D5:E5:05:DC:BF:87:41:8B:92:ED:FC:15:3B:91:EC:07:8C:E9:F5
X509v3 Authority Key Identifier:
keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:da:60:d5:e2:f6:80:1c:c5:94:e6:50:19:df:18:bf:49:0f:
e1:ff:8d:1a:6a:9e:04:22:3c:4f:15:9f:7c:71:95:d8:d2:51:
d2:c5:fb:1e:e7:bf:e7:4a:96:b7:2e:fc:10:66:4b:f3:d4:e4:
fd:57:0f:8c:2b:24:c4:46:81:3e:86:94:83:35:5e:98:aa:da:
f9:de:cb:b1:09:39:eb:ad:ad:d6:43:7c:1d:b4:48:ce:db:ed:
3e:79:2b:d2:11:50:ae:5b:48:a6:88:df:6e:8f:39:d0:52:14:
8b:c7:5d:bf:9c:f9:b3:67:a3:6b:a8:56:c3:34:4f:56:42:65:
e5:1c:33:a2:71:c7:21:c0:44:55:5e:21:eb:64:4e:56:87:64:
08:11:47:3e:30:3f:a8:67:48:3f:91:95:89:1b:30:3b:d7:dd:
8a:99:6b:dd:0d:8f:45:60:5f:c9:6e:56:64:3b:f3:79:c3:1e:
67:2e:3c:e0:40:29:d0:99:e6:c6:5f:fe:50:35:e9:2e:c5:50:
d3:0a:17:fd:58:c6:c6:8c:e0:e4:7b:57:00:fb:3b:b4:2a:90:
ca:d7:76:49:5e:2e:3e:59:eb:b9:07:33:16:3e:75:ce:80:9e:
dc:f4:2c:2f:0d:b8:90:cd:50:3f:d7:5a:c7:17:6a:57:60:93:
a1:19:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:12 2025 by rpki-client