Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: qlcOMr0VsMwrqHtomghuu0+0akVMTl2pcTHsvABLKT4=
Subject key identifier: F4:AB:50:F5:76:69:C0:D2:1D:3B:17:E5:26:43:C9:89:01:40:DF:64
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019847AD8BA6BA02BB801FA93193845CF19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0EE6
Signing time: Sat 26 Jul 2025 17:00:12 +0000
Manifest this update: Sat 26 Jul 2025 17:00:12 +0000
Manifest next update: Sun 27 Jul 2025 17:00:12 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: v0Yo5WZQVz09iPAWjy3WEoHXrHi0j1ia/bnn90vr5Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:8b:a6:ba:02:bb:80:1f:a9:31:93:84:5c:f1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jul 26 17:00:12 2025 GMT
Not After : Jul 27 17:00:12 2025 GMT
Subject: CN=f4ab50f57669c0d21d3b17e52643c9890140df64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:59:1d:ba:6d:5e:86:a9:0a:2e:d3:24:1d:
d3:b6:6a:8e:c3:65:f9:a8:00:10:03:fc:4f:3f:b6:
3a:4e:11:1c:7b:69:fc:5c:2a:73:5c:4d:ac:df:11:
03:6e:fb:8e:43:23:b0:60:40:f5:b5:b0:ca:33:e2:
22:da:ba:f5:80:50:90:a5:7f:9e:5f:94:d3:47:f8:
97:81:65:46:b9:70:1f:6e:aa:a5:15:52:cf:f4:0d:
da:a4:91:46:d1:3a:7f:a1:c1:e9:d9:5b:3c:8f:ed:
11:13:56:3d:b4:56:b9:52:09:c2:3e:95:d1:d0:5f:
e7:5f:ef:bd:17:9d:93:ce:62:a4:fb:64:90:de:32:
0a:14:1e:1a:f4:f4:f1:a7:48:c6:65:40:fa:fc:c1:
0d:25:87:fb:08:79:c4:b4:9b:75:5d:a5:d3:4c:42:
6a:f2:7a:8b:18:3b:c1:dd:b0:c2:ad:ff:a5:c2:c2:
e7:99:7c:97:cd:ba:94:83:b6:99:87:cd:22:05:13:
ea:68:b3:70:0d:70:56:bd:3d:54:ea:40:7d:62:a2:
1f:01:3b:5a:c7:f1:b2:e0:9f:74:29:55:e8:13:02:
34:2e:f7:f1:f3:8d:85:11:0f:ba:5c:35:7f:34:4a:
db:39:f9:83:91:5a:27:db:04:e7:d7:4c:14:e5:e0:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:50:F5:76:69:C0:D2:1D:3B:17:E5:26:43:C9:89:01:40:DF:64
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:32:d4:46:07:05:ec:99:ee:ae:cb:ef:a1:19:14:54:ee:a4:
7b:9e:0f:c6:3c:56:1f:b1:f7:32:93:7c:fd:00:c0:3c:6a:65:
89:bf:34:7e:96:55:f4:f1:21:96:ed:b8:b5:73:c4:c6:7a:1f:
a1:f3:63:51:c0:30:03:3d:6e:f4:c8:fb:fc:01:5f:2e:be:08:
d0:b2:92:f8:b3:89:b7:b6:d9:1e:5e:c1:86:b0:23:7b:4c:bc:
03:eb:d8:f1:32:17:73:b3:3e:48:35:60:d5:04:3b:9a:ba:aa:
8d:f2:5b:b3:97:06:a0:da:c2:e0:cd:34:97:fa:87:c6:f4:8c:
ec:51:11:c2:46:f1:73:e4:72:5f:3f:6d:6b:f4:a3:d8:e8:13:
7f:b5:9b:b8:51:2b:89:db:a8:53:72:33:a9:a7:70:bf:8f:5b:
69:7c:c5:ff:68:5e:3d:56:e9:b9:90:2c:13:d2:b3:3d:b3:80:
6b:4f:03:48:21:97:ed:d5:f9:1d:1c:8c:9d:b4:1c:2e:ee:32:
63:d5:85:c5:97:af:84:c8:83:cf:81:c3:64:23:88:d9:5b:fe:
f7:71:dd:c1:db:b9:ab:1b:f8:9f:14:44:59:4b:34:08:56:ff:
ac:5c:95:ff:d9:3f:8c:f6:0e:45:8f:54:42:3f:8a:e8:9b:39:
56:09:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:32:39 2025 by rpki-client