Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: vTIVYm1Aa1UFY4xC2UdgDEhIWRJPgdBQl/alxiaXVWg=
Subject key identifier: F0:28:59:83:A1:89:C5:37:9C:60:C6:7A:C6:47:57:1E:D1:CB:DA:47
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 0198D7E14D112FDA966FC623B0B91640BFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 0DDA
Signing time: Sat 23 Aug 2025 17:02:03 +0000
Manifest this update: Sat 23 Aug 2025 17:02:03 +0000
Manifest next update: Sun 24 Aug 2025 17:02:03 +0000
Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: NxyPak5HwOYtnL5+Qjl4bHEsqpZMULQV/m/ehhzUFhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:4d:11:2f:da:96:6f:c6:23:b0:b9:16:40:bf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Aug 23 17:02:03 2025 GMT
Not After : Aug 24 17:02:03 2025 GMT
Subject: CN=f0285983a189c5379c60c67ac647571ed1cbda47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:9e:fc:12:df:0d:72:48:7c:3a:8f:b4:37:
50:c9:de:c9:3c:d9:58:d2:e2:34:f8:b9:6f:29:be:
e0:9e:b6:73:33:57:c0:b3:8d:ac:39:c8:7c:3f:9c:
18:2f:db:80:8e:42:26:eb:4c:2b:6e:41:e4:58:32:
a5:ec:1e:08:34:bf:e3:f3:42:9b:56:21:f6:d3:d4:
a1:1f:02:7b:ad:7d:6e:34:dc:2e:3d:66:47:5f:73:
60:28:c4:9a:e0:f0:63:28:1a:95:19:b0:8c:0b:34:
54:6c:60:5c:05:13:a3:12:50:be:fa:58:b6:c4:cf:
04:5a:c1:ea:fd:55:a8:6c:8d:8b:41:73:85:71:af:
28:03:94:02:e4:e5:c5:f7:bd:d4:6c:f5:e7:11:ed:
87:bc:6b:95:df:5a:b0:9f:f6:a1:2a:07:b9:10:50:
6a:b3:ab:f3:b4:76:ae:8b:8e:ae:2d:30:5b:01:a2:
78:d5:ec:72:b5:92:6f:42:ad:ee:69:41:f1:9f:eb:
99:4a:6b:1f:1d:bd:4e:b2:9f:ac:57:ca:60:3d:22:
51:47:28:9b:99:a6:4c:cb:e5:f1:37:1b:e6:cc:7d:
74:70:04:d7:45:c6:17:50:1a:5d:d6:16:02:8f:58:
6b:d1:41:67:ad:11:d1:53:0a:37:ce:03:e8:02:e6:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:59:83:A1:89:C5:37:9C:60:C6:7A:C6:47:57:1E:D1:CB:DA:47
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:90:25:e1:36:64:5b:a8:c3:1e:8e:97:f9:c3:b9:df:1b:c1:
60:a8:e9:84:53:9b:2f:83:df:c1:56:dd:61:12:78:90:b8:d7:
72:34:98:b6:f8:6a:9e:51:56:ba:85:52:14:00:14:46:f8:6c:
63:2c:48:d3:00:0e:02:76:db:2f:49:61:d4:2f:5e:e8:f6:b9:
0a:89:a2:bb:8d:1d:50:aa:55:88:db:f8:23:e2:21:a9:cd:67:
82:d2:25:f8:58:74:88:87:8f:8e:53:f7:9a:e8:3a:91:33:e0:
f9:75:f4:b9:65:9e:f0:d8:5e:76:0f:c9:94:c7:93:36:ed:84:
32:8c:ba:4a:cd:e8:98:d2:9b:5f:71:51:f2:06:3a:c1:84:c8:
88:66:da:23:5a:88:46:fd:7f:15:ef:33:4a:4a:15:21:a0:7a:
fc:4b:90:f3:d5:e4:f9:fa:8b:a4:92:8e:46:70:dd:6b:ed:3c:
d3:10:17:06:9b:9e:a1:51:7c:1f:c8:15:fa:d2:22:87:d5:71:
67:50:ee:d1:a6:f8:7d:96:89:4e:9a:81:bc:9f:67:eb:52:27:
61:b2:de:93:69:7f:6f:bf:df:99:6c:a8:7a:9f:1d:dd:92:0b:
61:4d:3c:fb:45:9c:69:eb:2f:6c:bf:2a:e6:1e:76:b1:8e:15:
e6:12:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:57:22 2025 by rpki-client