Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File: YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier: dDa7VB828xDoBLmIuTYbfCesAG6zUjIaw4VOY+/gdjQ=
Subject key identifier: 23:0B:A4:9C:8D:7C:15:BF:E4:17:5C:90:BB:01:B7:CE:D6:81:30:A9
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial: 0198D583D154F05DA72B6D64B2A15EDBCA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: RoOsIEPNuzwGNZjmb7GAIQogiM1F1B/GFZ5wb+q/C6w=)
2: syKB6zisduN4C3cAJozjgCCO0PY.roa (hash: 0Vdx4RjEX6ZtXLCLRmfeUBESEOKss3f6Va2BIWn7LcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d1:54:f0:5d:a7:2b:6d:64:b2:a1:5e:db:ca:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=230ba49c8d7c15bfe4175c90bb01b7ced68130a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:03:6a:1b:3d:3b:e3:53:4c:f5:91:5a:4f:
d2:7f:95:5d:85:73:a5:0b:74:94:68:97:58:90:b2:
6d:30:12:56:b1:f8:3f:26:58:d5:ce:e5:ef:87:9a:
a4:7f:8d:ec:5d:97:50:c2:eb:14:79:5e:7b:ab:30:
0f:36:16:96:56:2d:2b:66:e5:f7:dc:9e:11:1c:61:
3f:1a:b2:5a:f0:c8:c0:fb:66:12:e8:7a:12:96:5e:
c1:69:b5:3b:12:48:13:90:fd:58:df:00:34:f8:10:
ee:a9:be:b4:06:23:41:4a:f5:18:16:c1:a8:6b:30:
6b:74:a6:91:e8:2f:a0:1e:28:c8:08:86:12:2f:c8:
69:8f:27:4e:e6:69:5a:6f:62:d8:2e:65:6d:dd:5b:
be:ab:ce:10:dc:2b:bd:74:d0:a6:59:fc:5b:18:ae:
5e:00:5f:95:38:8b:f0:a4:a3:5a:4a:6e:97:7a:07:
f9:1a:ff:18:89:db:15:c2:87:70:3c:7c:74:d6:9f:
3d:1a:99:37:03:8e:09:ab:23:16:ce:0d:c3:53:a8:
80:4d:bd:2d:a8:da:63:69:e8:86:52:b4:fe:e7:a6:
1f:f7:03:55:4c:50:73:ff:7b:01:f5:b2:06:d5:0e:
aa:14:e6:7b:66:ff:15:d6:c4:81:e1:32:89:b2:a1:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0B:A4:9C:8D:7C:15:BF:E4:17:5C:90:BB:01:B7:CE:D6:81:30:A9
X509v3 Authority Key Identifier:
keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:d0:ab:02:00:5e:f1:5c:38:66:5d:e2:f7:70:64:93:2a:
66:49:cf:63:9d:db:8e:95:47:46:86:e5:3f:2b:bb:7e:6b:1c:
0a:ad:35:53:ce:35:8c:c8:aa:85:a2:7a:35:e8:ef:84:94:18:
fe:5d:9e:53:75:42:96:c5:44:40:00:f0:b0:e1:26:74:46:ec:
22:09:23:c5:04:9d:38:fb:37:77:88:ee:f5:17:6b:79:94:55:
a8:ae:c1:06:98:b3:e2:60:16:03:a5:b3:74:19:ee:d5:4a:0b:
f7:1a:57:a6:ca:0b:b1:ed:f2:43:ce:fe:d9:9f:d6:08:0c:43:
ea:bb:1b:9c:d8:85:69:26:a6:6f:85:0e:29:47:45:db:e7:d3:
93:f4:0b:6c:98:09:48:07:12:06:82:3d:2e:26:23:ed:93:46:
48:04:f4:74:62:ab:9d:a8:5c:c9:93:39:4e:b9:64:37:ae:db:
7e:be:ef:2b:20:c5:23:7d:da:10:bd:8d:2b:ca:4f:a3:a5:b9:
85:26:8c:9b:d6:ed:26:f2:c7:6c:b1:12:d0:4e:9e:bb:91:79:
b7:8e:f6:dc:09:fa:40:04:dc:a2:3d:40:80:c2:aa:0e:04:66:
ba:46:34:7b:0e:85:6f:d1:74:a1:bb:74:60:73:c7:8e:97:e2:
ba:3d:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:35 2025 by rpki-client