Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: VU6ImSpIvbMhHdBYNjkJ45hS9FGVR941UHAmp5cSuZI=
Subject key identifier: 4B:4D:5F:D1:39:21:E7:21:B9:07:97:F6:5A:12:46:27:9F:ED:1C:75
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 0198D73B828A13666BC0B7A7A62220F7EB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0D14
Signing time: Sat 23 Aug 2025 14:00:58 +0000
Manifest this update: Sat 23 Aug 2025 14:00:58 +0000
Manifest next update: Sun 24 Aug 2025 14:00:58 +0000
Files and hashes: 1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: 5TZaOwGvvz++WRtVCnd1n2R/ORvljVR3Wa90vNTpUAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:82:8a:13:66:6b:c0:b7:a7:a6:22:20:f7:eb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Aug 23 14:00:58 2025 GMT
Not After : Aug 24 14:00:58 2025 GMT
Subject: CN=4b4d5fd13921e721b90797f65a1246279fed1c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:e3:fe:cd:cb:f6:69:15:43:56:0a:7a:ec:
6c:2e:b7:c8:b6:12:99:22:fa:a7:64:d0:19:21:f2:
c0:58:47:62:7d:40:26:98:06:82:5b:40:f3:e6:28:
d1:f2:6d:b2:b1:8b:04:3a:e0:d8:1a:86:75:37:5a:
9f:76:f2:93:69:a7:1e:46:a7:cd:7e:96:0c:61:e2:
20:04:6c:3f:20:cb:06:e8:6c:af:0a:e3:93:e2:2a:
a1:12:b3:c9:de:cd:92:b3:5f:0e:15:29:70:92:41:
d5:d4:83:0f:6f:c7:02:d6:d7:98:0a:5a:dc:7b:e6:
fe:18:a2:a5:16:99:0a:aa:8d:08:fe:bc:18:30:54:
a4:ad:9f:aa:3a:a4:25:d0:ab:ff:43:dc:92:30:7f:
0f:91:ef:36:09:61:ff:98:f1:03:a8:94:62:f1:85:
c8:a2:d3:39:94:3d:29:24:3a:91:2b:41:e8:f2:37:
26:d3:7e:0a:28:e1:5f:d8:32:71:fb:0e:74:82:04:
5d:2b:07:3b:f2:03:b8:27:64:53:87:0d:56:a5:8e:
ac:ad:a8:f0:bb:70:00:15:6f:c7:17:3a:6f:81:89:
aa:91:e7:14:d4:51:dc:29:e5:f2:9e:fb:b8:36:c5:
fc:e5:b1:f9:ad:c8:06:82:32:e9:bd:95:47:2f:17:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:5F:D1:39:21:E7:21:B9:07:97:F6:5A:12:46:27:9F:ED:1C:75
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fe:1e:97:9b:92:fb:d3:6b:be:ca:86:93:2c:11:6b:fb:18:
05:f5:e2:c7:38:9b:22:e9:43:d6:9c:11:9c:b3:b0:cc:12:fa:
09:91:05:cd:5c:28:0f:e0:ce:ca:a8:44:16:0f:68:d4:72:aa:
3c:4f:1c:f2:c4:b9:57:60:ba:56:bf:93:43:75:d9:98:fc:aa:
fd:a2:84:eb:23:55:db:2a:01:06:30:25:50:ac:84:61:78:2a:
e4:3e:79:b1:6d:b0:74:a8:f7:fb:0b:9f:a1:30:40:c7:50:6d:
f5:4c:bd:c0:9b:10:15:d5:5d:9a:01:f0:81:be:f0:e0:5b:f7:
f7:8f:2a:1e:30:a5:d6:e3:30:60:1f:12:92:d7:62:08:4e:58:
45:d2:62:75:82:c7:a9:ac:fd:d0:47:3e:3d:cf:c2:db:85:84:
3c:6d:c8:8d:18:1c:1a:20:48:31:29:a4:63:93:bb:a0:7d:4f:
d1:b9:c2:2e:43:2f:2f:b0:81:b9:6c:32:d4:fa:3a:6a:0c:95:
07:2a:96:4b:23:28:0f:ea:8d:c9:c1:58:9b:1b:6b:d9:98:58:
dc:2e:eb:3b:6b:e1:f1:e4:55:81:bd:90:92:47:ba:86:33:42:
3e:8e:c0:ec:3a:21:20:16:46:e1:d9:47:6a:f3:8f:61:61:42:
58:fb:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:15 2025 by rpki-client