Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: cmgQMmq/QPzxpvDSAP1OyL/UHfL2xec0Gfx4foXXRo4=
Subject key identifier: 02:2F:74:0E:76:96:B3:8D:42:24:10:26:07:91:0A:30:21:24:CA:22
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 0198D65F8CFBBFDDF9944C8F620BF72ECC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0EA4
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: +HAwGfRW7d60WFWgeu7mSekXt7zEP/kZ1he4qGWHElo=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8c:fb:bf:dd:f9:94:4c:8f:62:0b:f7:2e:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=022f740e7696b38d4224102607910a302124ca22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:df:90:5c:77:b1:ff:05:44:5c:68:8a:a7:
50:50:ff:a2:70:7d:d4:be:ef:98:b8:bb:3d:7b:37:
04:f6:b0:93:b0:9f:2a:98:78:27:cf:9c:77:cf:25:
a6:1b:61:de:78:99:4e:ba:c8:00:1d:67:96:f4:95:
cf:11:76:25:07:b1:c6:0b:51:b5:c5:0b:02:45:31:
89:ef:ed:91:d1:82:34:bb:d7:89:7b:ea:b3:83:5b:
c3:48:26:3a:3e:07:3c:f2:e5:02:1b:cf:0e:de:6e:
22:f3:2d:98:9b:61:eb:c6:d3:29:f9:7d:e0:cc:38:
f0:b5:48:35:34:11:7e:96:54:ee:fd:c3:28:f9:ed:
3f:e3:b6:77:4a:0d:c6:ed:fe:61:03:cf:1b:33:88:
3b:f8:23:f8:d9:11:a1:c1:60:3f:35:fe:f4:2c:d7:
3b:4f:04:5e:ae:fc:ea:22:cf:67:fa:46:53:05:81:
99:0a:6d:b5:4e:63:06:73:ff:32:9c:25:dd:10:e2:
36:57:8c:e4:8d:19:6b:34:5d:55:0a:7a:4f:44:33:
5b:cc:4f:3e:92:e1:e4:88:37:da:82:43:d3:86:7d:
e0:40:39:a6:ec:ea:55:3e:7f:06:ec:30:80:bd:7a:
34:4e:3f:e3:19:db:06:4c:91:e5:c6:a8:b8:f0:c3:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:74:0E:76:96:B3:8D:42:24:10:26:07:91:0A:30:21:24:CA:22
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:81:4a:9e:98:c6:c4:44:25:fe:31:17:4c:f8:61:63:e1:b2:
77:2b:96:55:3e:fa:06:27:6f:9b:2a:a8:e0:3f:c0:73:1f:73:
ef:15:b8:ac:18:a1:3f:68:de:a8:e9:aa:dd:21:b5:4c:30:53:
04:c5:52:1c:05:a9:db:95:4d:d2:e2:83:fd:6d:cc:5b:0b:78:
b5:b5:5f:04:64:ef:a0:ba:f7:8e:7c:77:73:8a:f4:66:09:69:
e3:52:1d:9a:79:1a:d3:b0:47:7c:ce:91:d1:f8:e6:a3:55:4b:
b3:73:17:b1:6c:0a:8b:e0:05:ad:4e:12:0a:d3:df:41:ef:e0:
c0:8b:7b:cf:50:35:58:e7:56:10:be:69:51:a6:da:48:68:e1:
37:0d:8d:85:ae:bd:04:81:9a:7c:bf:6c:9a:46:2b:9c:33:b6:
e6:28:67:8d:71:04:79:cc:02:ca:ca:a5:5d:1e:d6:f4:e2:89:
dd:b8:4f:83:ea:0c:fd:35:87:c5:b7:f7:cf:a9:2f:eb:01:b9:
0f:4e:18:de:93:ec:0c:36:6e:e3:32:6d:9f:52:47:15:d8:46:
4e:1b:f0:83:67:67:9e:c0:32:bd:7b:44:83:ed:f2:68:86:01:
05:13:e9:72:15:81:ce:54:ca:2c:16:2a:47:e9:fa:97:f3:c7:
62:53:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:56 2025 by rpki-client