Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: n4s/CVxiLGAeuoUwSI+VCiYHLNGLdKB+wxLs2kYGuR8=
Subject key identifier: E9:C2:19:6C:19:65:89:6B:C0:83:4F:12:32:1E:D2:AD:55:D5:28:12
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 0198529F87728CE043C3A57EF37BCDF5FBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0AAF
Signing time: Mon 28 Jul 2025 20:00:43 +0000
Manifest this update: Mon 28 Jul 2025 20:00:43 +0000
Manifest next update: Tue 29 Jul 2025 20:00:43 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: FLJNa54NNKz0t1pdUA5pveCl9gkflfJWflxkFjDWhII=)
2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:87:72:8c:e0:43:c3:a5:7e:f3:7b:cd:f5:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Jul 28 20:00:43 2025 GMT
Not After : Jul 29 20:00:43 2025 GMT
Subject: CN=e9c2196c1965896bc0834f12321ed2ad55d52812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:8b:bb:b7:72:49:56:62:0e:b5:aa:c9:e6:
88:60:b0:12:e3:d1:a4:c3:8f:e0:5b:b8:0d:69:e9:
a2:40:0c:53:44:df:f3:a2:0e:d1:85:b7:48:2c:ad:
ec:9f:87:a8:a1:f8:21:d4:ea:72:b7:83:2d:c5:eb:
f8:34:82:a2:de:4c:24:a5:51:0d:87:98:b4:5e:da:
d6:38:65:d7:99:48:ce:6a:21:e8:01:a0:b3:9d:a7:
eb:b9:11:08:14:d5:d0:75:b7:5f:df:cd:75:da:5c:
6a:4a:3e:9f:2e:69:bb:b1:22:6e:df:b5:52:fd:0c:
ac:0e:49:45:30:b9:89:e5:71:0d:53:2e:c2:4c:40:
d8:57:1c:b6:bc:55:40:d2:8f:b3:f0:62:de:8d:b4:
ef:14:88:1b:bb:ce:7c:99:b3:d8:ea:80:75:f8:55:
3f:d0:54:13:ed:80:06:cb:55:bd:a5:cf:22:e3:3b:
12:9e:4a:17:e8:7b:dc:bc:23:fc:af:33:ed:eb:40:
5f:d4:fb:23:bf:88:d8:13:69:14:79:a8:eb:91:cc:
52:0b:34:d8:70:7e:ad:74:d4:4c:b6:66:2c:41:19:
42:0b:46:f3:73:51:41:36:00:1a:22:a9:7e:34:7d:
44:58:ca:3f:c4:e0:d5:de:0b:23:97:3d:07:23:18:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:19:6C:19:65:89:6B:C0:83:4F:12:32:1E:D2:AD:55:D5:28:12
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2b:e9:a3:f4:ea:05:d1:36:29:fc:ae:de:14:c0:3b:6d:db:
b6:a5:cf:17:72:a1:e6:a2:b1:69:91:ae:ed:07:47:bd:ab:3f:
97:d8:8a:4f:88:76:e4:9b:48:69:57:dc:38:79:e0:be:27:c5:
06:3e:c9:2a:5c:9f:44:20:e8:dc:19:2d:a4:cf:e3:69:b6:a9:
be:ba:33:cd:4d:4d:7b:39:16:10:4a:e6:74:e7:45:fe:6b:a8:
c2:0a:bd:4a:36:27:1e:ce:69:a3:1a:e6:5e:60:f6:2b:59:f7:
c3:64:7d:0c:e1:ff:c0:d1:84:e2:9f:d8:15:4c:f6:b2:5f:2e:
bc:6e:ac:f5:fc:37:07:41:fc:9f:61:da:5a:d9:d0:5c:5d:fa:
f4:99:e0:4a:ef:c2:0d:97:b3:70:15:12:c6:6e:99:30:2e:7d:
0d:4f:77:94:04:ab:19:2a:87:91:84:36:26:a1:43:3a:e6:92:
1d:c3:f9:7c:40:70:51:8f:f2:bb:7e:29:c3:da:74:1a:fa:3c:
97:18:94:d5:7e:ae:ca:ba:31:d2:4e:89:76:d6:cb:52:9c:8e:
fb:9b:8c:c9:55:a2:cb:e9:0a:64:25:7e:66:5d:56:1d:d5:a0:
1b:99:64:9a:11:da:7e:ef:40:cc:1a:b6:60:8e:dd:87:51:45:
5c:72:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:27:51 2025 by rpki-client