Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: iIYGkCnjJ3JEcwn2w0D7UPxMv1bvG2K07BRbaAETDAk=
Subject key identifier: 14:29:F5:4E:06:94:FB:EF:21:E3:6E:51:B3:86:45:16:69:38:4A:7A
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 01984777BF7DFC663FF0664660F60A853BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 02E8
Signing time: Sat 26 Jul 2025 16:01:26 +0000
Manifest this update: Sat 26 Jul 2025 16:01:26 +0000
Manifest next update: Sun 27 Jul 2025 16:01:26 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: A3y8JYvZQ5uMV9naYDl4MLJH7ivdMzJXwqfnvEcELOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:bf:7d:fc:66:3f:f0:66:46:60:f6:0a:85:3b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Jul 26 16:01:26 2025 GMT
Not After : Jul 27 16:01:26 2025 GMT
Subject: CN=1429f54e0694fbef21e36e51b386451669384a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:92:05:1f:a1:36:39:ea:a9:25:59:14:a8:
75:df:e2:a3:51:8c:5f:f7:1f:1b:e0:3f:6d:b8:02:
71:8b:f3:30:cd:64:40:ce:cf:38:f1:52:43:9d:0b:
2a:91:33:2e:0c:91:0b:d2:19:06:ec:b5:ce:45:bb:
bf:ae:57:bc:a0:ab:7f:f8:04:57:49:a8:a4:1f:9a:
ed:2a:17:f1:3c:7e:96:22:a5:21:c0:16:24:49:c8:
8c:79:a7:72:78:a0:62:fa:29:54:c6:ac:a4:18:02:
ef:e2:79:bd:60:e5:80:89:7a:a5:17:68:92:65:7d:
a7:4f:4c:7e:b3:30:17:a9:59:4e:e8:e9:7f:be:d5:
5a:77:bf:12:68:fa:1a:eb:96:b6:c8:92:5d:bf:76:
62:3e:ef:c4:5d:8e:65:09:d9:24:49:5f:84:ee:6b:
08:4d:60:bb:b2:f6:17:30:29:bf:73:5d:8d:39:b0:
ae:87:30:30:04:04:81:1e:11:7b:fa:0b:72:4e:94:
1f:06:d3:e0:4a:61:d6:82:72:3a:b9:1b:98:52:eb:
5a:f3:d4:f3:ef:e6:30:a7:e4:3c:8b:9e:2d:ee:6f:
bf:34:33:dc:c4:ad:76:11:4c:4e:0b:16:ed:8a:23:
61:18:cf:f3:a4:b5:35:9f:d7:25:50:25:eb:7b:a0:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:29:F5:4E:06:94:FB:EF:21:E3:6E:51:B3:86:45:16:69:38:4A:7A
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a5:75:df:fb:d8:8d:4b:0a:be:63:32:48:e5:e3:ac:b8:52:
18:1a:bd:a7:ab:3d:6b:0b:cd:7d:6b:77:57:fb:ee:34:29:43:
3f:bc:b7:99:fa:e3:3c:bd:f8:5b:2f:3b:44:40:71:5c:62:07:
b7:ed:e0:ed:3a:60:74:41:b6:8d:b3:75:d6:f7:e5:87:e4:9e:
65:56:6d:c8:d7:9b:7b:41:49:7d:11:15:f7:b5:6a:ec:d1:7c:
7d:63:93:88:fd:a9:93:28:15:05:66:af:91:7f:28:ff:7a:63:
a6:24:80:ef:dc:ff:bb:9a:0d:a2:05:07:e1:03:f2:8f:f2:99:
66:9f:53:19:91:da:9b:8b:1e:fc:ff:13:98:80:27:84:57:32:
e0:c2:c7:ea:b8:7d:35:71:0b:ed:66:02:c1:f5:96:34:67:85:
b1:e3:4b:55:d7:d9:0c:c8:15:c2:88:62:fe:b7:64:dd:cf:f8:
45:0b:7d:6c:68:d0:26:93:2a:7f:89:9b:47:6d:fc:f4:25:3f:
20:37:93:71:28:5c:28:40:47:c1:37:10:ff:cd:a2:d6:0c:b6:
1c:63:46:5b:7b:06:c6:bd:c0:52:e6:60:1e:cd:e8:13:3b:3f:
4c:e7:67:09:97:34:a8:52:6c:49:8c:4b:68:1a:30:ec:5f:bb:
a8:b8:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:51 2025 by rpki-client