Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: 43EnH7IspmOOa7d6m0fRenhfOK334ghe2U+29a1y6xo=
Subject key identifier: 7F:23:39:18:28:BC:49:B6:4D:11:61:EB:4F:F8:7D:FC:0F:36:E0:87
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 0198D6613F778A2E8711881DFBC19E2A87CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0ED1
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: hmJPFY06NwvF1pk05cyqI5qYr21sKAOI5k/IppKDZP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3f:77:8a:2e:87:11:88:1d:fb:c1:9e:2a:87:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=7f23391828bc49b64d1161eb4ff87dfc0f36e087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:c9:fa:75:f0:84:12:95:47:b5:de:60:84:
76:bf:57:75:b5:7c:af:1a:bb:e3:73:d8:77:6c:12:
32:0f:88:63:04:4d:c8:53:cc:14:ac:e2:7c:ff:d5:
82:22:0f:58:ac:3f:45:00:2a:a8:24:4c:75:64:76:
6a:23:6d:7e:50:e0:4a:05:0b:a4:75:fe:b0:87:24:
6a:bf:d5:1a:7b:aa:57:dd:c9:2f:88:e9:26:6b:62:
e5:62:37:98:f2:f1:eb:71:1e:a1:6a:46:9f:4e:93:
56:54:cf:aa:8a:e4:46:28:1b:df:0b:ac:62:84:52:
3b:ac:8a:76:31:ac:a3:60:3b:2b:17:e4:21:de:2b:
71:6d:e3:80:66:a1:89:01:c7:8e:45:a2:f6:f8:01:
9f:9f:89:40:f8:b8:3d:f2:0a:50:15:33:8d:d9:ab:
3c:69:43:ba:ef:9b:bf:5f:db:6f:ba:9b:ba:d1:75:
7c:73:0f:23:d9:c5:39:90:95:99:c5:92:18:81:a9:
e0:8f:1b:31:bb:9d:20:94:16:1f:73:a3:71:ff:0f:
e2:4f:75:35:96:d7:4c:cf:f6:3f:a9:1d:8b:09:2f:
38:15:08:57:9d:92:a4:4f:53:43:bd:d9:48:54:42:
ff:4c:18:49:70:b4:2f:8e:7a:a6:14:73:64:99:cc:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:39:18:28:BC:49:B6:4D:11:61:EB:4F:F8:7D:FC:0F:36:E0:87
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:df:60:f5:f0:80:8d:eb:7d:b4:5a:1a:f1:dc:6f:3c:b1:14:
f2:3e:5f:f9:7a:67:f0:c7:58:4b:ac:59:8f:fd:09:35:4b:ef:
8d:ff:76:12:75:45:39:6f:dd:ec:e8:20:b2:63:15:82:67:39:
94:53:78:3d:0b:2b:57:5d:08:1a:a8:6a:dc:b3:5b:a2:6e:ad:
4f:47:e8:d4:51:d7:17:5e:4a:b0:2e:93:8f:fc:a2:d5:26:3b:
57:44:7d:e6:fa:b1:52:15:c5:35:19:ac:cf:b6:43:25:45:fd:
ac:96:51:61:ce:17:47:f0:2b:8f:df:e4:dd:75:eb:10:de:a2:
7d:b2:05:71:51:ce:2a:dc:c5:84:4d:c2:dd:01:ee:82:99:dd:
45:36:bf:36:a4:f0:6e:4d:5d:c9:4d:6c:96:fe:ea:3c:4c:25:
b0:ba:61:e3:d9:7c:37:1d:ff:24:f2:3f:b1:47:2e:01:5c:5b:
2b:f8:0b:7a:a4:98:b0:c8:73:42:87:fe:85:cb:66:4b:04:e9:
0e:ba:e6:90:9b:0d:5a:4d:e0:cd:83:75:a5:00:f8:f6:fb:9e:
ea:4d:45:04:c1:ea:db:b2:0c:cf:d8:79:d1:77:ab:7e:fa:62:
60:55:2b:43:ef:5a:10:86:12:ed:3b:88:9e:7a:59:14:b4:f4:
cc:da:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:56 2025 by rpki-client