Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: yDKsF1AYjmHoZCHhhgoBqvpbqS5Fe5cLa2su7/XslgA=
Subject key identifier: 0C:08:A0:6B:24:09:23:45:D6:88:59:38:89:79:EE:3C:C5:76:99:98
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019849D3967908C02561A78A3BE94BC1BFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 152E
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: uJby0Pzhyigmjx7b8nnBD751IIPN2O2aRx6l0PPF1/E=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:96:79:08:c0:25:61:a7:8a:3b:e9:4b:c1:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=0c08a06b24092345d68859388979ee3cc5769998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:b0:59:e2:f3:9c:8a:71:3a:c3:c8:6e:41:
35:26:a1:fc:22:bc:10:0a:71:fc:61:17:21:a8:bd:
da:c9:45:3f:ef:c6:30:d6:bf:44:c3:6f:da:a2:e7:
f7:de:1c:ea:41:03:01:76:86:1d:4e:d6:be:f9:8f:
73:c7:35:c5:d7:ad:7a:80:84:38:de:af:ae:d2:99:
b4:d1:aa:33:94:06:2c:a5:9c:02:73:42:ce:20:da:
2c:bc:7d:af:68:16:16:5f:8e:7c:6d:47:08:d4:bb:
ac:6e:6c:82:97:9f:8a:02:e2:f5:1d:1f:b8:1b:bf:
4b:d2:d2:2f:54:a7:74:87:45:c5:00:b5:87:cd:93:
f9:91:8b:95:a5:e0:99:58:7b:18:5e:67:f8:a2:f8:
33:73:43:4f:b9:be:a8:09:f9:00:65:ca:e3:43:4f:
96:3b:71:7d:48:f4:71:9b:57:77:38:f2:bd:08:63:
9e:a8:e3:69:fe:d4:10:10:a8:59:0f:b8:2d:8d:e4:
d5:17:71:9e:0c:7b:8a:61:f5:e0:fe:78:08:b1:c0:
e4:69:1a:bc:c9:2f:b2:97:7e:f2:36:f3:04:78:7f:
9e:fb:53:1e:c4:fd:0b:3d:c0:26:8c:fb:d4:2a:8c:
5b:e0:9a:4c:d3:ed:e3:7c:0f:db:f3:99:d4:c4:ea:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:A0:6B:24:09:23:45:D6:88:59:38:89:79:EE:3C:C5:76:99:98
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:30:4d:40:f6:62:49:ba:4f:fe:51:1e:97:f2:ce:e2:0e:2b:
02:8c:c6:dd:5b:08:02:b5:a5:0a:7b:5d:4b:ec:25:a3:48:ff:
d7:b7:bc:a2:dc:fc:54:37:7c:41:6b:02:ad:9b:b1:a9:3b:23:
a7:f1:43:02:63:41:0b:54:24:d7:52:8f:6a:28:bf:e2:4d:49:
9d:d5:0a:26:b9:b1:f0:5e:d5:33:3a:41:74:1f:d6:72:f8:26:
40:f7:c3:fa:14:27:3f:f1:b3:65:e1:cc:51:e3:1d:7a:a0:90:
6e:69:d5:70:2f:00:cd:a4:57:11:60:85:39:4f:15:5b:c5:99:
8d:73:32:7f:d9:69:f2:79:67:e1:d5:69:d9:ea:22:4d:b1:2a:
4e:e6:e7:9e:63:ba:64:1f:8a:ea:8c:1d:60:f8:8b:5b:ce:34:
76:88:6c:e3:38:ac:a8:59:f4:18:bd:54:52:82:aa:3c:eb:7f:
67:74:cc:5d:eb:06:e3:cb:83:76:ea:17:81:2c:c4:74:f3:0b:
92:e2:17:47:05:bf:4b:c6:9c:bb:d0:0e:b1:32:15:7a:0d:ee:
fd:4b:1d:50:db:bb:d9:ad:77:b4:ba:03:dc:10:ea:ac:16:dc:
10:00:46:ff:15:27:71:a2:a9:66:ac:a9:c0:90:cc:78:f7:12:
0b:71:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:27:26 2025 by rpki-client