Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: V2tIpCD5AD0Rx+awRdf/crqtCypcHkV/Uw38V0dtWdQ=
Subject key identifier: B2:6D:7C:D4:B6:36:00:AA:C3:E0:1B:1E:40:3C:DE:7F:68:FB:1B:35
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 0198413D92FA02FA50FD4529C63D27E619F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 08C9
Signing time: Fri 25 Jul 2025 11:00:10 +0000
Manifest this update: Fri 25 Jul 2025 11:00:10 +0000
Manifest next update: Sat 26 Jul 2025 11:00:10 +0000
Files and hashes: 1: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (hash: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=)
2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: bir1eiDd0Y+73bymN4UslmdsqcQhq6RNyd/0fJx0hQg=)
3: pdC1KsOnjOvGFainyuUjzICPFes.roa (hash: 9PpZVEet2RmTDOe5qqgJNSaHCeSHC8NK2RueyDRCl5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:92:fa:02:fa:50:fd:45:29:c6:3d:27:e6:19:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Jul 25 11:00:10 2025 GMT
Not After : Jul 26 11:00:10 2025 GMT
Subject: CN=b26d7cd4b63600aac3e01b1e403cde7f68fb1b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:3f:cd:aa:ce:6c:66:e2:2e:22:0c:e9:0a:
4d:70:e4:ad:51:54:76:c4:73:db:43:af:9a:55:c3:
7f:80:a5:c9:da:b1:e1:a1:dc:16:94:d5:90:57:6e:
33:19:ec:2d:a6:d5:b0:8d:76:f1:1f:f6:df:bd:d1:
1c:a9:e5:72:80:53:08:08:a7:7e:59:c2:7f:38:ca:
b8:3a:5b:3d:f1:5b:c7:fb:a6:32:75:c8:42:b1:3f:
61:c8:65:64:f7:77:25:d7:c0:30:6b:a1:1c:19:dc:
2e:3c:dd:a5:a2:6c:1c:74:7e:2c:b2:5f:52:3c:83:
01:4f:17:72:2e:62:dc:be:92:c8:31:d6:46:83:73:
0c:e4:bc:44:4f:47:b9:8d:35:2f:82:6e:d5:41:51:
29:f2:01:e7:bd:b1:da:0f:9d:14:d8:68:b5:25:10:
82:df:4b:74:05:72:b2:dc:1a:7d:d3:67:90:ba:6b:
00:6e:c7:b9:0d:5f:dd:8c:d8:1b:e3:91:a5:b7:25:
82:c0:24:6c:bf:61:e8:61:4a:6c:d4:0e:72:19:97:
c6:e6:ee:e8:03:af:90:24:08:05:be:4d:52:9a:38:
ea:11:f2:18:1e:8d:0f:83:ab:32:d5:6e:c8:ea:63:
20:7a:f0:d5:81:a9:d3:0c:78:28:77:1a:6b:61:de:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6D:7C:D4:B6:36:00:AA:C3:E0:1B:1E:40:3C:DE:7F:68:FB:1B:35
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a4:73:80:4e:3b:1e:4a:38:d5:0e:ff:f8:cc:f3:dd:2e:a4:
54:82:76:2b:8c:49:9e:46:36:89:f7:01:20:1b:1e:e6:7f:27:
b6:56:b8:4c:50:2b:d2:b7:c1:44:c6:b2:94:50:c9:0f:b6:d4:
13:20:b5:8c:d2:4e:27:0f:64:23:d4:bb:91:6d:40:e3:31:22:
06:fc:19:7c:6f:19:91:07:79:e3:89:24:37:ab:29:b1:87:95:
94:7a:54:92:6d:e7:d3:44:a2:cd:91:fa:ad:a1:2d:8c:da:8d:
5e:d1:a1:60:a3:fb:6f:3c:f2:83:8f:0e:a8:1e:54:3e:24:79:
0f:cb:17:de:3d:3c:9b:e0:ca:0f:2e:c6:d5:1d:1e:75:f6:39:
37:8f:60:3b:04:9d:f2:87:6f:c8:3d:01:39:c4:56:04:e1:a8:
84:fa:5b:d6:85:ba:dc:5f:44:c1:1f:5e:34:6c:07:8f:44:5e:
7f:c7:ed:aa:d6:c7:76:aa:65:18:5e:22:94:9b:77:c2:42:d0:
5d:c6:f6:57:e5:e8:dc:68:dc:70:60:a5:ed:a8:59:39:be:c7:
97:ef:bd:ea:d3:29:be:a1:40:7f:4c:b7:b9:b1:4b:09:87:60:
05:40:33:8b:c3:e7:ce:7b:1c:00:d7:0a:34:28:78:4f:8c:60:
cb:d3:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:19:04 2025 by rpki-client