Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: PPegKAIEi6uSWrgGrmdwc+H4r7V1sgEIJE7v9CL2Mto=
Subject key identifier: 68:A4:0B:A3:11:AF:21:51:F7:2D:CF:39:0B:6E:73:0D:A5:B9:9B:29
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 0198D66032D2CDB8E3047AFD94BDFE21AD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 0E23
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: 6He2HCHOgYmFWCnJx-CHnw1DNw4.roa (hash: R/op20lcuNNKjtAV2ZxOf6+gcTn27jdjTjhCIstJEzU=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: dkP+MTPk+uuJVJoyjKkDE9+JpY/ox9uGSvnJJA3bmlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:32:d2:cd:b8:e3:04:7a:fd:94:bd:fe:21:ad:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=68a40ba311af2151f72dcf390b6e730da5b99b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:ee:7d:e6:c0:56:0e:96:a3:93:57:ac:e3:
da:63:b2:b2:05:38:39:eb:41:76:bc:35:44:46:e0:
be:99:b6:39:59:82:a8:5e:ad:f1:37:2f:12:38:08:
0a:b5:61:9e:27:5b:16:5e:e6:65:6b:c9:9e:00:bf:
12:77:03:cb:d7:7f:f4:a0:10:fc:df:49:29:d5:a3:
2f:91:84:ba:2e:2c:2f:3f:d2:01:88:3c:5c:48:c5:
94:43:7d:c9:6c:f9:3a:3c:1e:62:d9:9f:eb:5f:51:
65:a6:8b:30:aa:fd:df:89:6e:61:32:66:35:fa:66:
2a:52:e0:40:d3:3e:b7:49:ce:48:ff:72:ca:ea:08:
07:4e:9e:53:f6:f6:f3:47:6a:fb:e0:02:71:44:b6:
19:c5:5a:44:b0:87:1d:6b:9d:c8:a4:1f:61:84:b1:
60:0a:f2:e9:76:c9:ed:75:a0:7c:68:1c:54:32:70:
7f:e6:0f:e7:08:fa:bd:eb:61:94:d4:67:b9:b6:d1:
19:76:96:58:a8:04:17:9e:8a:6c:51:08:df:0e:c6:
71:8d:1d:9e:41:17:04:08:e2:3e:25:dd:92:80:ba:
99:4f:29:b7:3b:73:2b:2b:ba:c3:49:90:48:f2:04:
a2:7f:96:3e:f6:6d:00:ca:ce:23:b0:87:35:3b:f9:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A4:0B:A3:11:AF:21:51:F7:2D:CF:39:0B:6E:73:0D:A5:B9:9B:29
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:58:e6:00:0d:57:4a:e5:a4:be:c4:74:4c:51:6f:17:57:fe:
34:f2:2c:9f:44:a3:8c:ff:d7:51:54:8d:b6:b7:33:61:0a:5e:
32:20:10:a7:f1:c2:b7:1d:de:91:33:c2:fc:c6:33:7e:b6:df:
bd:f8:5d:f0:65:7d:76:61:2b:a1:46:b2:a1:73:a4:4f:60:67:
d8:66:9f:a7:56:09:8b:c7:8d:f5:88:51:12:04:6c:e2:bf:31:
63:1e:ae:18:f8:6d:51:fd:90:df:ca:8f:37:c5:81:02:b8:e6:
4c:01:73:46:e2:b0:70:71:49:5b:43:c4:e9:11:13:62:d5:ac:
79:26:39:b7:7f:57:b0:2b:85:48:13:15:9f:f2:7c:40:0a:b5:
10:f6:1c:5b:f8:da:4d:5d:49:58:d6:a5:f9:dd:e4:36:fc:19:
fc:b2:fd:33:b1:55:a7:60:8b:2b:33:11:13:84:45:01:c0:20:
21:b2:30:4a:11:06:32:d7:fb:21:2f:98:13:64:f8:94:1e:92:
06:c8:94:dd:3a:c5:be:a3:36:8a:c4:b0:2c:91:17:de:cd:62:
a6:70:d1:67:37:f2:ce:48:b7:1f:ae:bd:c6:8c:21:08:86:8f:
c1:5b:61:b4:64:0a:2e:24:13:5e:87:fe:29:12:68:e1:2f:6e:
a5:e1:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:27 2025 by rpki-client