Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: dx4g6C+UEJyFtOPwZt5MzQdLzJhiBtnZ6L5Upgm+8Ow=
Subject key identifier: 3B:EB:B2:79:F8:2A:1C:7D:E0:2C:5D:28:FF:AB:53:CF:8B:5C:4E:E4
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 01984965B435F47CE7EEEE97C426AC4F28EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:58 +0000
Manifest this update: Sun 27 Jul 2025 01:00:58 +0000
Manifest next update: Mon 28 Jul 2025 01:00:58 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: tq1352uvBWeY4jWbKctqP0mjN0Vx1TLFq2LfWC6TZkU=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b4:35:f4:7c:e7:ee:ee:97:c4:26:ac:4f:28:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Jul 27 01:00:58 2025 GMT
Not After : Jul 28 01:00:58 2025 GMT
Subject: CN=3bebb279f82a1c7de02c5d28ffab53cf8b5c4ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:7a:9c:17:b8:4a:3c:1a:de:e3:5e:fe:29:
0a:e4:d5:0a:2b:a3:0a:56:a0:15:d0:d3:45:ad:63:
32:20:03:47:91:83:2b:f8:a2:4d:8d:9a:fc:e8:87:
eb:10:5e:0b:e3:9c:15:2c:b2:a1:64:6b:93:ed:e5:
7a:18:75:5a:3c:e6:82:a1:f3:b1:f5:67:47:ea:e5:
a8:54:84:de:10:6f:af:e9:e1:6a:de:05:77:fa:4b:
0f:94:81:ff:b8:19:dc:b2:03:9c:21:04:2f:77:49:
0f:2b:87:ff:46:80:c9:a1:97:ac:eb:fe:9e:f6:c2:
fe:b4:30:ea:48:aa:b4:47:33:9c:a4:b1:65:f0:5d:
57:54:ea:58:8d:cd:e5:87:74:8d:87:b6:48:71:d5:
e0:e3:bd:08:10:3f:a6:e0:ec:d5:81:89:d1:58:65:
77:4b:4b:50:f0:68:9f:68:c7:96:ce:67:8a:2c:09:
a3:af:56:d7:33:17:d9:91:62:77:b0:8b:6f:2f:69:
96:59:f0:ca:8c:89:b1:d5:b4:7f:96:12:b3:d8:50:
d6:04:ee:61:2e:1c:3b:80:f8:8f:ba:06:7d:5e:9e:
bf:84:32:cb:c5:82:cf:ac:bb:af:9f:b7:77:82:6f:
2c:69:3b:2a:d7:28:6c:7d:fd:56:c8:ed:cb:b5:09:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EB:B2:79:F8:2A:1C:7D:E0:2C:5D:28:FF:AB:53:CF:8B:5C:4E:E4
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:83:71:9d:07:26:db:d4:bc:a9:f2:f8:8e:8d:f3:a7:75:48:
0e:20:61:e3:0e:02:45:71:7a:78:6c:37:12:c8:29:c4:21:0c:
1f:97:ce:7d:b2:9e:23:ca:8d:d5:bd:6a:8f:2f:e8:5a:f5:9c:
81:29:39:c5:48:11:a9:ba:94:87:c3:af:fe:2d:b6:62:26:24:
df:d9:3c:40:c8:00:a5:8c:a4:75:ad:48:89:44:15:83:ca:15:
2f:3a:40:91:8f:2b:04:af:76:85:e7:f9:66:17:c1:ba:50:14:
db:65:44:14:e8:8d:29:a5:b8:4a:66:37:46:e7:74:1a:dc:10:
c5:4b:19:de:ac:c5:b8:c3:08:15:42:25:11:56:2b:73:4c:d9:
8b:49:4e:1e:7d:bb:9b:89:c3:4f:74:17:57:b4:4a:74:ac:44:
fa:30:07:32:cb:d1:71:b9:96:d5:38:cb:1a:4e:10:83:a8:26:
31:02:2d:b7:d7:57:c8:bb:c3:71:98:2b:e3:c2:bd:5e:25:7d:
a8:58:f9:24:15:5f:b5:aa:42:0a:a0:a2:27:02:ac:f5:de:87:
88:5f:7c:11:2e:f0:28:1a:e2:d8:48:e8:c8:72:48:19:dd:b3:
80:e7:b5:1a:2c:dc:2a:e6:e7:ba:71:2b:d1:c1:a0:86:e2:9d:
c1:a9:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:24 2025 by rpki-client