Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: EQyi1CpPzhlplblfqS/p8E4P573s4XyvKxIWRuxUCRk=
Subject key identifier: BC:6E:39:E3:67:3F:7F:5F:BC:B4:4C:72:A6:DE:A4:0C:1B:20:4A:67
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 0198D4046428A4AF76125AFACE9050E59FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 0915
Signing time: Fri 22 Aug 2025 23:01:54 +0000
Manifest this update: Fri 22 Aug 2025 23:01:54 +0000
Manifest next update: Sat 23 Aug 2025 23:01:54 +0000
Files and hashes: 1: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (hash: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=)
2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: NF1Bwy+t2aHL048Ocq2ZXHzI2CBrRoLGcIMzh8SBN3I=)
3: pdC1KsOnjOvGFainyuUjzICPFes.roa (hash: 9PpZVEet2RmTDOe5qqgJNSaHCeSHC8NK2RueyDRCl5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:64:28:a4:af:76:12:5a:fa:ce:90:50:e5:9f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Aug 22 23:01:54 2025 GMT
Not After : Aug 23 23:01:54 2025 GMT
Subject: CN=bc6e39e3673f7f5fbcb44c72a6dea40c1b204a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:46:c5:66:5c:01:f0:7b:39:49:f6:aa:84:
6e:e2:e3:e8:f1:e3:df:18:d5:9f:4d:2c:56:ef:3e:
81:9a:70:72:97:cf:11:ac:ad:2c:85:98:a7:a5:b3:
2a:6b:ed:a1:ee:20:cf:73:30:e1:a2:b1:f5:dd:62:
11:d7:9b:5c:66:e1:54:63:dd:ad:87:1e:2f:72:6c:
08:11:da:60:fe:33:eb:f8:aa:61:c4:ca:a2:3d:f8:
8c:a5:12:25:34:35:a7:90:b4:93:59:a6:f1:73:c2:
86:ca:64:50:c5:13:5e:07:31:27:f7:2e:28:f1:64:
12:6b:0d:fc:f6:22:08:9f:94:ea:ca:a0:58:76:8a:
14:70:34:b7:4f:bd:1d:2a:98:61:3f:ab:4e:49:bc:
05:cb:ae:55:80:c5:ef:dc:4f:70:46:db:76:cc:b9:
4c:77:ba:6b:0b:cd:dd:43:e3:07:9b:3d:40:4a:4b:
9e:52:9c:7b:9f:c1:31:15:f7:19:eb:dc:33:52:e3:
3a:9c:eb:38:80:20:ae:12:39:c5:ae:bb:bb:c4:0f:
e9:1f:f5:aa:4d:cc:54:4f:ce:f3:dd:82:ce:e2:ab:
5e:2e:82:37:a3:14:9f:34:3f:99:e1:bd:08:f1:6a:
b1:d5:83:f7:2a:fe:62:14:5f:29:eb:0f:62:bd:72:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6E:39:E3:67:3F:7F:5F:BC:B4:4C:72:A6:DE:A4:0C:1B:20:4A:67
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bf:59:9d:d7:e4:7d:a3:db:80:4f:c0:53:14:1d:9e:a4:dc:
bb:23:c6:47:07:92:1b:88:96:fe:05:30:00:0f:3f:e6:17:8d:
9d:2d:e5:39:23:d8:d8:f7:22:b6:e9:c9:dd:a0:54:b5:f4:f8:
67:a9:60:e9:3a:f7:bd:d8:ac:ba:a4:72:4f:2b:52:83:a3:e4:
47:db:c2:30:9d:09:e1:59:28:36:b2:33:88:86:41:6e:d6:e0:
91:ce:80:5c:ef:80:93:34:d9:6d:89:61:cd:76:e2:97:73:36:
48:37:64:fd:22:0e:49:74:57:70:45:ab:09:3f:ba:63:f9:78:
49:eb:b1:3c:f2:8f:75:82:70:7a:64:1c:b4:8c:4e:a2:ec:ad:
fe:48:c1:ea:bc:9d:8f:5c:6d:19:8e:f8:e8:71:68:ad:f5:89:
76:f7:2f:44:dd:fa:f9:bf:b5:4c:af:20:cd:0e:a0:75:4c:2c:
af:a7:6d:6d:ac:4b:5e:c5:ea:01:e3:a5:48:e6:e2:a7:8c:c8:
4b:2d:37:32:51:64:25:12:89:36:45:c8:4c:ea:eb:30:f8:eb:
8a:92:50:4b:12:15:84:1f:73:df:7d:06:bc:6f:75:3d:34:f7:
72:bc:38:a7:fe:80:37:22:03:7a:6f:22:b9:09:af:9d:a0:e1:
2b:32:d3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:52 2025 by rpki-client