Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: oY0T5Yja7R2OnEYsBQVtLWnRkkfwEb6LCpDlBy2Ya8I=
Subject key identifier: FD:5F:32:85:B1:80:60:39:24:AB:67:40:96:7E:B4:31:40:4D:10:F5
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 01984A0A243232B5AE32240CE9923E987220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:35 +0000
Manifest this update: Sun 27 Jul 2025 04:00:35 +0000
Manifest next update: Mon 28 Jul 2025 04:00:35 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: XieocYMtYetPN+u3PUNhVHhJzShuD74zDWxcohKgH3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:24:32:32:b5:ae:32:24:0c:e9:92:3e:98:72:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Jul 27 04:00:35 2025 GMT
Not After : Jul 28 04:00:35 2025 GMT
Subject: CN=fd5f3285b180603924ab6740967eb431404d10f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:7d:3c:7d:2e:69:d7:6e:1b:96:18:e6:95:
e7:5f:90:55:73:92:ad:0b:46:ba:2e:65:3e:c5:fe:
42:c1:0d:9d:c0:01:b6:60:ce:cc:8f:8b:74:56:c8:
6a:49:91:2d:0a:b4:9a:6a:9e:21:33:54:4b:d6:a3:
6e:b2:55:c7:ff:e6:71:46:2f:69:ba:ea:91:bf:df:
72:1b:62:f7:bc:d9:14:63:30:8e:50:05:86:a6:fe:
42:cb:fa:a6:df:b2:dc:8b:af:42:b8:ea:c3:4a:06:
aa:20:b1:9e:6e:7f:d5:33:3e:ca:fa:95:79:1b:61:
7b:f4:d8:8c:da:25:a4:26:bc:b2:6f:62:d5:11:4f:
ef:f0:bc:3e:04:49:f1:cc:9c:8e:82:7f:c6:c6:80:
61:58:ef:81:74:1c:fb:40:73:a4:96:60:f4:0e:4e:
ec:b8:f1:d2:54:f0:84:36:5b:ab:bf:e5:8a:c4:d5:
46:9e:fb:ee:d3:85:44:c1:8f:b9:92:22:ed:ba:ea:
b2:b2:42:96:91:5a:47:58:4a:74:58:8e:3b:1e:a7:
99:7f:15:c6:08:b7:03:f7:0e:3a:5f:d5:18:d8:44:
87:e3:16:42:e3:c4:19:83:04:34:0f:a8:04:98:e5:
03:f2:75:8d:c8:5b:89:0e:20:ae:be:65:6c:10:99:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5F:32:85:B1:80:60:39:24:AB:67:40:96:7E:B4:31:40:4D:10:F5
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4f:7e:fa:eb:0e:cb:b4:72:29:5b:e4:a5:68:b2:cf:4c:bf:
77:5d:5b:1b:5f:b9:f4:e2:78:e0:d2:16:36:d0:a4:5b:2a:6e:
17:51:90:aa:88:fb:fd:a8:31:80:0b:32:5e:09:a2:5e:59:72:
53:f1:aa:23:55:16:c4:40:ee:26:96:1a:d6:b2:f7:ae:2d:c3:
07:2a:e0:9a:ce:0f:fc:89:34:af:da:9a:8b:ed:16:44:73:97:
52:46:ea:a7:48:12:09:b0:43:1f:15:be:6a:b9:ac:78:d2:8f:
0b:2b:de:25:7e:69:2d:af:66:0e:bb:48:aa:ac:cc:6e:f5:be:
d8:fe:c0:20:25:fe:7b:e6:29:86:3d:20:5b:36:b7:68:0b:d2:
53:98:dc:ec:99:a2:c0:1d:e9:70:f9:d2:60:40:9e:96:a0:f0:
a4:8a:93:92:b4:cf:cd:35:19:95:64:40:c6:cc:8e:c7:5b:3c:
84:b8:91:7c:3c:8d:48:30:70:c4:b7:ee:de:9f:b5:51:d2:11:
a8:b9:a0:8c:9d:95:d3:55:09:04:10:45:f2:ef:34:ee:53:dd:
00:20:1d:8f:35:23:4d:a3:98:82:0a:aa:74:4a:43:ea:56:28:
63:6f:3d:88:57:4c:d8:c5:90:ea:6a:f6:4b:ed:ca:f7:48:15:
56:5f:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:50:05 2025 by rpki-client