Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: tW2Xw2FJtsHx3GuZzuhhqcLo7gmQiTKy0Urt23wpRAI=
Subject key identifier: 2F:D7:76:FF:CC:DE:C4:C8:53:F4:39:9C:B4:EB:71:89:6A:46:70:14
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 0198D773AEC00AF80172AD1EB97D9F60064F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 05AC
Signing time: Sat 23 Aug 2025 15:02:19 +0000
Manifest this update: Sat 23 Aug 2025 15:02:19 +0000
Manifest next update: Sun 24 Aug 2025 15:02:19 +0000
Files and hashes: 1: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: iEbzmXrOXWBpvUvvd3A7YUdwk/PrbwHKGW+BbnPFrak=)
2: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:ae:c0:0a:f8:01:72:ad:1e:b9:7d:9f:60:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Aug 23 15:02:19 2025 GMT
Not After : Aug 24 15:02:19 2025 GMT
Subject: CN=2fd776ffccdec4c853f4399cb4eb71896a467014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:f0:fa:62:ad:c0:0f:ec:d7:03:4a:60:ff:
d1:17:17:84:e5:e2:e1:75:d2:34:d0:c9:85:63:cc:
ed:ba:2d:50:5c:86:39:21:eb:cd:69:3f:bd:23:bc:
d7:d0:9f:1e:72:b6:e9:a7:89:be:c2:2d:d2:ba:a2:
e5:43:6e:85:b1:ca:eb:37:1d:ee:04:d8:e4:4d:5b:
98:cd:01:10:e1:e7:07:70:d9:26:c1:a6:24:95:e8:
6f:e5:4c:c1:e2:73:e0:67:c8:73:68:2d:d0:b0:b1:
11:a5:a7:e4:eb:f2:85:9c:d5:36:22:51:4c:1a:ff:
b6:a7:0f:b5:bc:8b:13:c5:29:44:17:c9:a4:1d:8c:
e7:8f:f0:d6:d1:86:f2:2b:e2:30:7f:10:e4:26:a7:
28:bc:17:ee:bb:a0:9a:65:a6:c2:a7:80:1e:4e:19:
fe:1d:72:e8:50:7e:74:4c:15:05:07:a5:e8:c2:1e:
bd:c7:a5:da:b2:32:09:3c:9a:21:62:87:96:f7:66:
a7:59:e4:c1:b9:dc:eb:9a:51:64:46:4c:99:17:17:
b1:29:13:b9:e8:6e:46:da:a3:46:2b:68:dc:37:06:
30:e5:fc:95:c7:70:c8:b0:54:62:18:62:2b:2e:11:
dd:07:d8:42:3a:96:f6:88:52:fc:fb:27:13:ab:8a:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D7:76:FF:CC:DE:C4:C8:53:F4:39:9C:B4:EB:71:89:6A:46:70:14
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:07:eb:cc:1b:41:cc:bd:5f:13:13:f7:ee:0c:a5:02:eb:6d:
72:e2:93:8c:c2:4d:68:b1:8b:ff:65:24:ac:0f:4a:3f:65:45:
9d:03:b7:7c:ae:47:99:63:34:00:fc:30:e9:78:61:79:9f:63:
20:47:a9:b8:c8:f1:b3:0f:62:6b:b3:49:b8:28:20:09:6f:29:
ac:69:18:1c:a6:aa:cd:63:f4:f1:58:31:aa:61:4f:d0:cf:e2:
99:18:a3:e4:b5:d7:37:88:8b:33:c1:25:1c:bd:64:76:14:7e:
ae:e6:d7:14:75:ee:61:a1:54:80:11:5d:98:59:76:98:39:d1:
67:84:ed:e2:1a:bc:dd:0f:d8:9f:d1:39:6e:e6:70:21:f4:16:
48:6c:a5:b6:5a:b9:24:70:56:69:d4:ca:b5:32:25:ad:e1:81:
5e:50:ea:63:ae:19:80:92:a5:f5:57:0b:1a:36:16:1d:c4:af:
be:42:76:53:55:fc:1e:84:82:06:f9:a3:32:98:61:d6:31:62:
e5:f8:65:7f:42:e2:19:98:38:ec:1e:32:d6:ec:9a:f2:28:e6:
5e:be:45:7d:af:cc:42:66:25:c4:72:cf:84:65:ee:5e:c8:4c:
4f:2c:51:c3:a4:b4:e7:20:48:78:9e:77:de:64:3b:51:65:60:
67:d3:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:38 2025 by rpki-client