Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: XXWkpi5Zc55d7/dKRuczcv8cm+P7XF+dLha2Lsr6Q5I=
Subject key identifier: 9C:EE:13:61:88:68:A4:FE:B0:AE:EA:14:21:ED:38:0D:60:AD:4B:1B
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 0198D5BB87E0E57CF040258A856C67C293E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: o1ySQCG01G1e93bPMqnFq+eNnsAllNYi6+trZ5Iy6II=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:87:e0:e5:7c:f0:40:25:8a:85:6c:67:c2:93:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=9cee13618868a4feb0aeea1421ed380d60ad4b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:ff:55:7a:df:c0:1e:04:90:75:4c:d0:73:
a8:8d:b8:e3:d1:f0:6d:01:bb:d8:76:c7:c6:d4:c4:
9a:24:68:e0:c1:68:75:4f:c5:03:9b:20:88:f6:20:
f2:19:45:26:9c:96:70:a5:43:9f:e3:db:b1:34:8b:
38:3a:9a:af:78:06:60:9e:52:0c:0f:f4:c6:41:2b:
e8:4b:55:a3:c7:12:1d:ae:f5:02:43:b1:23:df:9c:
69:aa:55:16:6b:b6:4a:bb:df:c9:bc:0c:11:9b:7d:
70:52:d5:69:f9:47:23:8f:85:f7:28:0f:f1:66:3b:
46:4b:53:12:14:6f:3d:28:ec:d6:41:8b:2c:97:28:
15:82:48:26:08:c8:14:4d:31:50:00:74:56:96:b7:
01:1f:59:f0:08:e6:34:11:4b:85:78:70:58:5f:d1:
33:cb:8b:72:0e:2b:ef:58:b5:4f:ab:a7:37:f2:cf:
55:22:73:92:a4:b1:93:2e:4b:c2:67:d2:d6:51:78:
14:c1:c2:9c:1b:fd:bb:bc:8f:2e:87:a2:10:cf:91:
f7:53:bf:9f:0d:31:0b:3e:92:e1:8f:08:ed:73:b4:
6b:71:1a:60:e7:d7:5d:3d:1a:fd:a3:92:78:87:de:
fe:61:af:30:8b:1a:74:02:ba:4c:44:be:f6:16:d8:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:13:61:88:68:A4:FE:B0:AE:EA:14:21:ED:38:0D:60:AD:4B:1B
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:8f:e5:04:91:16:d0:8d:7a:77:c2:54:23:63:b9:36:f2:
bd:29:e8:4b:64:4a:dd:9b:aa:39:0b:7e:cc:57:bf:9e:53:a7:
35:a2:b4:90:74:bb:03:5f:20:ba:a8:90:94:d7:3a:2a:ad:72:
a7:80:ec:dc:a4:88:fd:d7:ea:08:52:e7:d4:10:41:ca:50:87:
70:a5:64:2b:39:e7:a2:f1:fb:31:a6:44:e4:54:8d:8f:da:70:
15:fd:5f:55:39:ca:97:0a:64:3b:1a:27:73:a6:78:fd:fa:f8:
4e:2a:10:00:e4:96:57:ce:9e:1e:39:be:b4:5b:15:75:8f:d0:
e4:b5:bf:57:ba:44:59:ae:0e:93:85:1b:a7:cc:6b:f6:02:9f:
18:68:f5:30:fb:1f:36:a4:08:8e:d9:9f:12:b4:5d:eb:bb:b6:
62:68:7c:b6:ac:c7:78:ce:45:3f:d4:32:d2:aa:77:03:6c:ba:
ba:d6:5b:e5:26:3c:60:73:47:a9:23:3e:72:a9:b4:3f:be:1d:
44:5c:9b:07:6d:a0:83:9d:8b:bb:5b:26:f5:4d:dc:f8:0c:c8:
80:78:66:c6:23:1c:ba:59:71:4c:a2:9d:7e:73:a2:51:51:f0:
76:00:e0:4e:a1:bc:b6:4b:5d:f3:8d:c4:e0:91:67:af:f4:39:
d4:8a:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:21 2025 by rpki-client