Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: zWv26Bqs2EKgvOQMyp7gOPlw+9PlNQ5JgshXV7SHXOM=
Subject key identifier: CE:ED:F5:2C:C8:FA:79:95:E4:24:67:79:B0:E7:C2:77:F1:A3:F5:76
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 01984B543D8084710E3EAB1146492649674F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0A3A
Signing time: Sun 27 Jul 2025 10:01:08 +0000
Manifest this update: Sun 27 Jul 2025 10:01:08 +0000
Manifest next update: Mon 28 Jul 2025 10:01:08 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: Tn/PB/8dsacIpulLcMCpMZo1wCu23b+j/tueAuSyYWo=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:3d:80:84:71:0e:3e:ab:11:46:49:26:49:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jul 27 10:01:08 2025 GMT
Not After : Jul 28 10:01:08 2025 GMT
Subject: CN=ceedf52cc8fa7995e4246779b0e7c277f1a3f576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:de:3a:67:d3:3c:50:49:fd:84:d9:f8:e7:
6a:e2:ea:12:17:d0:7d:c8:80:f3:f8:68:f1:b7:9e:
44:7e:4a:79:3b:3c:af:7d:3d:86:64:ad:9c:fa:2b:
44:0e:ac:bc:de:c7:6e:75:b6:47:36:08:ef:07:c5:
46:0c:c3:65:bf:16:dc:b5:44:1e:10:b7:c4:24:82:
5e:75:5e:f5:1d:d2:af:22:91:19:8b:d9:91:22:0f:
7f:3c:32:d8:04:56:d8:e4:88:ba:15:68:9a:40:10:
9a:f5:eb:bf:04:68:ab:e3:0f:c8:20:90:25:e8:50:
1a:d3:61:a1:93:e2:f9:72:c9:6c:f4:4b:2a:8d:7a:
df:56:25:66:0b:2c:a3:63:fd:6b:6f:ac:be:96:fb:
4d:6e:50:a6:1e:e8:f2:e3:a0:cc:1c:86:05:d6:62:
ca:7d:c5:04:1f:b9:31:e5:c4:f0:1f:34:cc:53:38:
75:d8:ce:dc:b2:0f:37:ac:2c:f7:ff:ec:2d:87:54:
82:6e:2f:76:63:5d:a9:cf:8c:73:af:4d:33:de:4b:
ce:19:6f:e9:4c:57:a7:3a:bc:33:59:f6:90:4a:ce:
40:31:6b:24:b2:21:81:fc:82:4f:6d:b2:d7:77:b1:
aa:86:0f:d9:05:61:45:4c:ca:7b:68:bc:d6:ef:7b:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:F5:2C:C8:FA:79:95:E4:24:67:79:B0:E7:C2:77:F1:A3:F5:76
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f1:3d:27:a2:7a:d7:d3:df:b6:c0:1c:eb:53:5d:05:66:40:
5f:0a:a4:a4:96:c3:de:7a:91:53:75:5c:de:9f:3e:00:db:9c:
ed:c4:ae:92:51:7a:49:72:39:8b:8d:c6:11:cc:4f:48:e9:1d:
a5:9a:ae:85:c7:4d:ce:cb:25:0d:fb:9d:c6:9b:87:e6:87:c3:
2a:2a:fa:c4:0b:42:7f:fd:ed:6e:09:aa:a5:7a:7c:7b:db:0c:
e1:9d:ec:be:1b:fb:da:44:78:9c:dd:a4:22:67:ff:f2:46:b1:
44:a0:1d:60:ee:68:ea:50:a4:c8:d0:79:82:83:cc:a5:84:a4:
65:7c:67:51:cc:18:56:39:e6:fc:ac:74:4f:aa:e2:85:7a:93:
91:4c:b6:bb:54:bf:e0:9e:fb:d1:93:49:cc:a2:c4:2c:fc:a7:
a1:87:69:32:f4:35:8f:56:c3:ac:e2:16:48:d1:22:f9:82:9d:
5b:8b:a7:09:1d:c7:9c:d8:1c:ca:e0:05:2f:44:38:89:a2:f4:
88:d0:a6:f3:a1:a7:36:1a:65:18:db:4a:3a:ce:25:c4:53:0d:
0d:f2:8b:b6:7b:12:85:1b:54:d0:8f:54:e1:f0:d9:f7:b0:7e:
49:74:dc:39:15:c2:65:58:3f:b8:e9:81:cc:6f:9c:dd:6b:c9:
23:47:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:34:33 2025 by rpki-client