Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: dJczTTvAcWqyNsEg1yn1g0y7sXGQFhidw3DeSbD5oks=
Subject key identifier: 9C:3D:FA:CC:7E:9B:C1:0C:7F:A3:A9:67:11:74:8E:8D:A5:1C:BB:AA
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 0198D473049CE3E6A9A1E365DADDAF09C9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 12A7
Signing time: Sat 23 Aug 2025 01:02:44 +0000
Manifest this update: Sat 23 Aug 2025 01:02:44 +0000
Manifest next update: Sun 24 Aug 2025 01:02:44 +0000
Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: 2cHnltBySPAf9LXSygUvYf0CK8SWtQ7dQku/3gxaySE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:04:9c:e3:e6:a9:a1:e3:65:da:dd:af:09:c9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Aug 23 01:02:44 2025 GMT
Not After : Aug 24 01:02:44 2025 GMT
Subject: CN=9c3dfacc7e9bc10c7fa3a96711748e8da51cbbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:dd:84:db:78:6c:47:40:4b:92:c0:73:ea:
08:19:c8:3d:f0:1e:3d:4c:db:06:60:c9:e9:4c:f7:
66:59:c2:39:24:6d:ce:a3:48:05:79:93:07:ff:b5:
73:fa:d3:9d:5e:40:a8:ed:33:94:59:51:26:69:ba:
d7:99:d8:e1:b3:29:f8:2a:d4:21:52:2e:0f:09:c6:
87:80:b0:4a:c8:cf:be:d6:12:f9:25:10:de:cf:fd:
56:86:d8:f6:00:e5:35:64:73:3e:ac:21:85:b9:af:
48:f2:71:09:2a:95:be:15:9b:2d:46:4b:c5:c6:c3:
75:cf:03:ac:f3:a5:02:77:7f:db:cc:b2:17:04:63:
71:70:ed:90:84:99:f0:86:26:c9:27:da:b7:d1:69:
7b:88:bf:c5:7f:91:76:5f:cd:92:45:ee:67:09:6c:
30:a2:d9:31:10:1e:30:c3:28:1d:1e:d3:24:67:7c:
8d:32:e5:85:97:d6:a5:ef:64:cb:1d:ef:61:35:63:
1c:2f:f9:93:37:2c:7b:7e:a5:8e:26:e5:04:17:cc:
d4:53:ca:cf:b9:ce:98:0a:ac:ce:ae:65:38:db:3c:
44:03:29:9e:79:b5:3e:da:95:7f:8f:d8:dd:18:c5:
e3:b2:61:d8:c9:97:a4:65:32:c7:d2:21:f8:a7:3c:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3D:FA:CC:7E:9B:C1:0C:7F:A3:A9:67:11:74:8E:8D:A5:1C:BB:AA
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2a:16:28:f4:d9:95:5e:b9:d6:26:93:a0:6a:60:98:c8:3b:
ff:91:23:26:24:4d:e2:ac:e1:d4:a7:89:ee:64:27:10:ee:de:
2b:22:c6:16:3c:47:79:a5:e7:11:44:87:a7:76:93:44:47:ad:
cf:35:da:0e:28:33:5a:9c:cd:c0:1f:66:97:5b:f2:59:0a:26:
52:2c:e1:be:76:ac:66:6d:94:83:6c:8a:36:42:ce:41:ed:c0:
2f:57:7b:b4:54:0c:6b:d4:f0:29:54:f2:0d:9b:bc:ce:28:20:
f7:c8:ed:87:f9:17:a1:62:11:c1:7c:bc:77:a1:bd:8f:03:6e:
61:98:cf:30:c6:33:6a:9a:cb:0d:bb:d9:d5:5e:65:ef:7a:04:
ff:cb:7c:d0:4c:58:04:a8:0e:5a:b4:ea:ea:1c:d6:dd:20:59:
c9:7d:aa:20:82:8b:2c:d3:03:05:79:f4:62:f8:b7:86:50:46:
84:4e:6c:a2:bf:a8:df:e6:65:0c:e8:c1:cd:fa:a9:50:1b:93:
08:42:73:60:0a:ca:34:a8:cf:36:08:fe:4a:f0:7e:56:ba:22:
7d:0b:e2:52:53:34:ed:40:16:d4:79:5d:c2:4b:5e:49:83:02:
04:5a:3c:fc:8c:83:82:db:06:02:b1:f1:bf:96:5a:f5:1d:b8:
27:54:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:24 2025 by rpki-client