Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: +tc4J6mBL8g85KUWArHD6tAaqwFts0asSO1nsPTtTiY=
Subject key identifier: AA:7E:62:DF:06:F9:EA:18:31:83:75:A4:68:27:A2:BF:5E:4B:03:10
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 0198D4A862DF2BADA156D3E14644C538C5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 084B
Signing time: Sat 23 Aug 2025 02:01:01 +0000
Manifest this update: Sat 23 Aug 2025 02:01:01 +0000
Manifest next update: Sun 24 Aug 2025 02:01:01 +0000
Files and hashes: 1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: Ef9vxqQbEKceK5GBJcOu7imUP94abHg7xpEoKpNrwgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:62:df:2b:ad:a1:56:d3:e1:46:44:c5:38:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Aug 23 02:01:01 2025 GMT
Not After : Aug 24 02:01:01 2025 GMT
Subject: CN=aa7e62df06f9ea18318375a46827a2bf5e4b0310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:0e:24:cc:5c:76:b4:59:68:01:91:39:50:
b0:76:b3:4b:d5:01:de:58:ab:e3:d5:e0:8c:20:35:
b1:5c:ea:2f:da:54:95:6c:c4:a5:53:d1:65:f8:d5:
25:39:1c:85:68:4a:c6:a9:b8:c3:95:41:c1:0c:12:
53:b6:e5:7f:c3:b4:0f:2b:8b:f9:1c:d0:a3:86:ac:
65:0a:16:96:fd:c1:a4:62:20:d8:f1:74:ac:dd:87:
4a:41:ad:a6:f8:67:ed:38:66:ec:f2:05:e4:d1:d7:
e7:e7:9c:11:c5:a7:6c:5d:82:0a:43:0b:64:33:ca:
96:2a:20:73:82:fc:4f:aa:6f:18:d5:78:32:43:c5:
94:44:4b:b2:ee:e6:67:39:62:89:6e:34:8d:2a:37:
55:47:31:1b:54:a3:58:4d:9b:9b:4f:9d:3e:19:ba:
16:f4:ca:87:5b:e5:f0:76:e9:f5:b4:f3:9c:31:72:
5b:a4:ff:22:51:8b:74:35:a1:b9:3c:bf:d9:73:cc:
ae:e5:8a:9b:57:6f:df:96:07:d6:08:a6:87:03:fa:
22:fa:45:8a:45:51:cd:76:cb:ad:21:6b:c1:cc:79:
1a:8f:9e:6f:55:96:13:6c:c1:84:6b:41:62:50:ca:
74:17:ab:6e:b8:66:36:b5:26:0d:36:9f:1a:4b:b6:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7E:62:DF:06:F9:EA:18:31:83:75:A4:68:27:A2:BF:5E:4B:03:10
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:96:9e:84:fe:b9:ae:e9:4a:e0:18:d7:d6:40:3a:5e:9b:89:
69:87:04:81:28:7a:a7:1c:02:02:97:c2:82:5c:04:69:f4:2f:
15:28:aa:96:d2:dd:b1:70:c3:26:7b:58:75:92:d1:fa:42:f3:
cf:b1:67:0c:2f:51:50:9f:b1:e3:d1:cf:94:6a:66:a8:45:a8:
3e:00:be:11:6e:ed:f1:55:0c:21:3a:f1:74:63:a9:c4:eb:98:
b7:95:02:0e:e5:36:f7:52:fb:4b:a3:4c:08:cd:09:e0:9b:7e:
78:b1:a9:6b:0d:b0:c5:04:d7:df:40:ab:c4:9b:b6:24:a3:c1:
ea:74:42:d0:4f:53:b6:56:d1:7d:25:3e:2c:df:4c:06:0d:7c:
a1:bc:27:6b:60:45:60:4f:ba:59:ba:64:90:7d:92:cd:21:21:
17:c7:28:c1:59:cd:b4:97:50:07:53:c8:6d:29:0b:0a:d3:7f:
d2:48:98:8c:8d:b9:21:96:47:4c:f5:02:3a:a2:50:13:d6:08:
7f:2e:91:a5:50:04:10:b7:be:cb:d0:87:31:6c:d4:37:3a:67:
bf:0f:8d:eb:ac:c0:3f:bc:d7:c3:11:66:fa:4a:94:09:fb:98:
b4:31:bc:c2:bc:d4:1a:55:c9:a2:2f:f2:5d:a1:c8:50:c0:7c:
bb:23:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:49 2025 by rpki-client