Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: WFKsnZNT5pMCdn5kSFBTBTvZkbj1Rdgcu6DePLf2T2c=
Subject key identifier: 6C:8F:4A:28:90:93:5C:4C:27:7E:83:3E:DD:BA:5B:2B:40:C3:9A:78
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 0198D65F326BD666009CA71F3F2D3682DA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 123E
Signing time: Sat 23 Aug 2025 10:00:19 +0000
Manifest this update: Sat 23 Aug 2025 10:00:19 +0000
Manifest next update: Sun 24 Aug 2025 10:00:19 +0000
Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: KzhoEzUEXVlONxCxJGlAff3r90cAQf6hYM22owm/7n8=)
4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:32:6b:d6:66:00:9c:a7:1f:3f:2d:36:82:da:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Aug 23 10:00:19 2025 GMT
Not After : Aug 24 10:00:19 2025 GMT
Subject: CN=6c8f4a2890935c4c277e833eddba5b2b40c39a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:44:4d:41:d1:6c:99:27:45:2f:dc:3d:d1:
e4:5b:78:0e:21:32:b0:8b:d4:51:c3:67:cf:c6:9d:
cc:e5:3f:f6:38:50:52:72:8b:67:22:e3:43:44:20:
d9:a3:21:81:ea:21:58:3c:28:1b:69:29:5a:da:9f:
b0:7c:91:e7:15:bc:a7:46:9e:ee:43:94:40:f0:b6:
98:87:1f:84:03:6f:68:ae:ac:e3:a2:f6:6f:e9:ac:
39:d8:d6:c1:81:ea:41:2a:0d:cf:04:a5:e5:88:42:
d3:84:1e:8b:f6:7e:75:d5:57:5b:35:33:bf:de:1d:
c3:4b:0d:27:5b:24:e9:e7:af:3f:b2:59:bb:80:2b:
3a:ea:48:fd:2b:a5:9b:96:b8:10:f0:b1:c3:8a:ab:
b8:00:de:fc:cb:c2:73:06:aa:f6:f2:5d:d1:4a:a3:
87:fb:17:d5:8e:3c:c8:4e:27:24:9a:68:89:fc:da:
6b:82:c8:45:8c:bb:b4:1e:bf:9c:76:19:09:db:81:
75:7e:3b:98:86:eb:62:fc:48:64:9e:52:c8:dd:2f:
34:07:d9:02:80:26:94:15:44:23:7a:fa:7c:c7:de:
23:b4:f4:37:25:6f:3f:4f:06:d9:6f:7b:77:51:93:
9b:d8:ca:db:f3:0f:89:03:da:d0:62:f0:28:28:df:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8F:4A:28:90:93:5C:4C:27:7E:83:3E:DD:BA:5B:2B:40:C3:9A:78
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cd:a6:60:b3:67:ed:55:98:57:61:19:b1:59:36:13:6f:70:
6a:47:6d:a7:e7:a6:34:aa:b7:68:9f:22:f8:f4:4e:62:00:01:
d5:ef:53:44:31:29:ff:92:99:0e:c3:1d:51:0b:21:b0:1b:66:
89:47:5b:35:df:81:61:48:44:08:a7:4c:bf:5b:0d:3a:61:f7:
e7:69:6b:c9:d7:26:9a:7a:c8:01:d4:0b:fd:6a:40:a3:b2:70:
a8:1a:fe:74:02:58:e8:8e:86:89:e5:74:2f:c6:e6:ad:4a:83:
e6:2c:e3:47:7d:87:f8:47:a2:2c:76:3e:f2:b8:7e:89:a7:f1:
68:1d:14:cf:38:4f:4f:1f:f4:e7:b4:e0:63:70:88:bc:29:a8:
b7:c2:c8:ae:e9:40:9d:a1:3e:4f:8f:54:cf:de:c2:20:d3:0e:
9a:c6:97:c3:e3:1a:de:57:34:32:86:c1:89:5c:1b:83:33:de:
0d:2c:36:eb:52:03:71:57:19:0f:c3:b3:87:7f:f8:a1:a0:5b:
a8:7a:75:69:0b:90:35:a8:fb:0f:1b:81:83:56:0f:ce:9d:3f:
cd:87:97:6f:99:88:d3:c0:6c:05:46:49:e0:c3:35:ca:e7:2b:
6c:15:f1:cd:4a:28:ef:64:af:08:8d:74:c8:10:36:0b:ea:c5:
9a:2b:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:27 2025 by rpki-client