
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: qjaBv7Zb9zVMzsyLifT9iXl1/am09md99AiNvQL9nfY=
Subject key identifier: DE:CC:CB:8C:3D:33:BE:52:31:DD:B6:40:95:54:6E:2D:A4:6D:91:50
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 019847E4C3011855A2FDF981420DC6F6344E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 18:00:31 +0000
Manifest this update: Sat 26 Jul 2025 18:00:31 +0000
Manifest next update: Sun 27 Jul 2025 18:00:31 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: DC/o5I4z5g8qYyV7o11yrFXvxlvSGoPWSh64SGTmKiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:c3:01:18:55:a2:fd:f9:81:42:0d:c6:f6:34:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Jul 26 18:00:31 2025 GMT
Not After : Jul 27 18:00:31 2025 GMT
Subject: CN=decccb8c3d33be5231ddb64095546e2da46d9150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:37:ba:34:d7:52:ec:b6:96:d0:39:8c:30:
76:93:ee:26:9c:f1:94:0b:29:8c:60:ef:b6:4f:c7:
71:80:10:d5:c1:8b:be:83:d1:fc:ce:35:9b:f7:a6:
90:59:4e:b8:82:d4:e0:1a:18:a4:df:81:b4:cc:66:
86:35:b8:d4:39:d0:e4:81:94:41:1a:b0:29:b7:7c:
aa:3a:ed:46:d1:f9:67:89:9c:49:57:b8:39:b9:c6:
39:ca:d8:61:49:9d:82:45:bb:94:bb:e0:a4:ba:d2:
3e:3e:88:81:cd:d4:09:82:e8:a6:0f:0d:19:8f:03:
7b:92:ca:11:ac:f6:14:cd:b3:55:30:6f:07:cd:60:
20:a5:31:f1:52:89:89:bb:b6:7b:7a:51:e5:ef:1d:
86:ab:22:69:2b:77:fe:f6:d1:30:90:18:d6:3d:dc:
e5:1e:71:8c:43:d7:e1:0f:68:7c:eb:ea:52:60:47:
bb:40:12:7e:6a:16:bf:5f:d7:62:82:50:7a:d4:0c:
d3:99:48:8c:17:99:4b:6a:8f:22:6f:96:e8:ce:91:
8b:51:57:49:54:df:3a:b0:d1:3d:9b:7a:19:bc:79:
b2:33:cc:8a:2a:8a:37:47:74:8b:e2:b6:e3:76:e4:
e2:70:9b:8b:ae:01:58:1f:ec:fe:6e:94:0a:e6:c9:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:CB:8C:3D:33:BE:52:31:DD:B6:40:95:54:6E:2D:A4:6D:91:50
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:06:cc:b3:b4:c4:7e:f3:5f:65:d2:c8:75:bb:8f:37:5c:1d:
8c:92:9f:fc:06:cc:61:5d:57:a0:19:d0:c1:d1:ed:0e:77:9a:
b2:70:94:3d:fa:79:ab:50:62:1b:be:72:57:9d:04:5f:89:fc:
c9:cc:bb:cd:ee:66:82:48:0c:f5:92:bb:43:f2:7b:3e:e8:af:
d7:07:5e:26:be:9e:05:be:ea:0a:ca:3d:0a:71:c4:16:99:6d:
ab:b1:2d:ea:a6:ea:4c:74:e9:cb:a4:4c:a9:cd:05:8e:24:7f:
d0:ab:e4:8c:98:d7:9e:09:30:4c:48:8a:be:b4:c5:1d:dc:5e:
1d:5a:16:e1:d0:a5:59:d4:a5:da:fd:7c:02:b1:4e:5e:a3:bf:
cb:3e:d2:5d:d7:ef:f0:48:88:02:9f:22:48:1d:1d:22:85:d2:
26:a8:33:cc:fd:9a:fa:cb:2a:07:1a:53:ae:e0:75:08:05:6d:
9c:01:67:4e:ea:2d:09:cc:70:b9:be:23:b1:41:48:9e:0e:6a:
7f:83:07:b9:aa:5f:61:ad:12:de:cb:65:39:14:f7:47:06:69:
69:67:b2:14:69:41:0c:c6:e5:3b:97:73:7c:44:8f:47:6a:ca:
c2:8c:26:f8:1d:fe:90:b6:e4:a5:b0:dd:b0:8c:bf:8d:03:52:
19:52:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:12:13 2025 by rpki-client