Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: XGxzZTmLsAhBAh3fONiy/97mGLq8kvlSUrc/e+uJkfc=
Subject key identifier: BA:CC:D7:70:40:37:14:31:41:3E:F6:6B:70:E4:4A:46:F7:C9:51:EF
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 0198D5BBE62F8888155B38FE5870014050CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 10B0
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: AvJb74NdHbKbd6ECAAej3/z5sMDuvTQlzG+4s9SIeWA=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e6:2f:88:88:15:5b:38:fe:58:70:01:40:50:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=baccd77040371431413ef66b70e44a46f7c951ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:f5:b7:79:50:0e:d1:42:fc:de:b6:f9:7d:
ba:87:6a:03:09:0e:f3:47:b0:c8:86:cf:7e:a6:b7:
95:f4:ce:4e:63:33:a6:a0:29:bd:59:33:9f:29:fc:
ee:f5:7f:c3:82:09:19:d8:55:29:a3:1f:80:b7:9c:
45:96:2e:a9:db:c9:8b:8b:2e:84:0e:29:58:23:35:
92:8f:19:b7:df:2e:b2:ba:c2:56:63:92:22:62:0a:
93:3b:0c:9b:aa:5d:7d:bb:84:28:6d:59:94:18:38:
66:63:84:08:18:50:b2:da:47:67:fe:8e:1e:1e:ed:
27:7f:15:01:c7:9a:54:a1:95:b2:c9:da:03:01:b2:
9e:94:fb:56:16:09:d5:48:a5:1b:b5:f1:f8:e8:cd:
01:86:54:5c:1a:f6:6d:dc:8b:d4:4e:13:60:b9:a9:
07:77:df:11:c9:d2:f1:19:d8:2a:d2:f8:84:dc:e2:
a9:24:4c:de:e8:f4:9c:31:8a:14:be:1c:78:e8:d5:
09:41:52:e4:a2:8d:73:63:dc:d1:8a:a6:e6:a7:5c:
0f:9f:69:87:b3:64:08:3c:33:87:71:f1:b1:29:23:
a6:1f:c3:fd:1f:b7:64:d8:0f:c3:c4:e0:34:f2:19:
28:ea:a5:7d:f5:c5:2c:3a:8d:39:0a:87:1d:47:2c:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:D7:70:40:37:14:31:41:3E:F6:6B:70:E4:4A:46:F7:C9:51:EF
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:b8:aa:e0:ac:95:fb:07:4a:6a:8d:cd:10:6f:01:be:c8:
93:cd:a3:b0:78:d2:60:9e:6e:25:a0:93:7b:49:6c:5d:14:20:
91:d9:40:89:1a:93:93:de:92:74:5d:b0:66:57:df:22:ad:a6:
20:48:df:93:fe:43:40:d5:51:82:bd:c2:c9:b2:9a:a5:69:ec:
46:0b:66:e0:95:5f:9f:99:9a:9f:29:87:60:f1:72:ca:b1:08:
cd:c0:16:dc:c0:2c:4d:96:8e:e4:b6:ac:80:d4:29:98:8b:17:
1e:29:38:0a:ff:6d:5e:5b:39:b9:8c:6c:4e:db:dc:84:04:3b:
6e:9c:43:68:18:5c:13:ff:f7:03:da:d0:88:a8:01:53:3c:93:
05:d9:9b:90:01:a4:48:79:73:1e:d1:66:b7:49:53:b9:dd:aa:
23:51:f1:2a:ab:f6:40:c7:98:5d:fd:c4:2b:8e:5b:c5:14:fe:
74:6d:73:84:eb:51:2f:d5:dd:f5:3a:3c:5e:70:0d:5a:1d:27:
35:9c:38:63:9f:ae:e1:f6:a4:b1:0c:47:68:da:d0:68:1e:b1:
28:bb:90:17:c0:d9:37:0f:71:35:4f:d6:84:ae:b4:dd:0d:a2:
55:c8:38:5f:2b:6b:9c:14:fa:ab:de:d5:ed:09:79:e9:81:7b:
78:4c:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:19 2025 by rpki-client