Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: UW0ySTgsZdG+k8cO3KU412v1lKFvwPdlYXuLg4YDDIg=
Subject key identifier: 74:FE:F5:E5:11:45:AC:0A:B1:AE:05:D2:6B:55:70:75:B8:D1:40:D5
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 019827B57101E82EFCCF9AEEEF43C7685C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 1A
Signing time: Sun 20 Jul 2025 12:00:58 +0000
Manifest this update: Sun 20 Jul 2025 12:00:58 +0000
Manifest next update: Mon 21 Jul 2025 12:00:58 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: 5Fq5fFhRQ11dHf9EL9VcrYVgOf7r0FKRS8ZteNDGy10=)
2: yJ1HWDzaQf8_v_QIkEVeJhHUsNs.roa (hash: uRF7ZuSGISVIOWjvLjFgvjfyhiciNwgKOFC9/lRcs/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:71:01:e8:2e:fc:cf:9a:ee:ef:43:c7:68:5c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Jul 20 12:00:58 2025 GMT
Not After : Jul 21 12:00:58 2025 GMT
Subject: CN=74fef5e51145ac0ab1ae05d26b557075b8d140d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8f:80:cf:9d:50:d8:50:f1:d7:8c:dc:c4:c9:
b8:11:20:5f:e0:4f:96:fc:a5:78:86:43:87:47:77:
2c:04:9a:43:14:1c:51:23:31:63:dd:16:92:d9:23:
82:c4:70:cb:a5:46:4a:aa:06:16:bf:5a:2c:a3:21:
fa:9b:23:c5:6e:08:cc:11:ca:06:f9:65:f3:0f:ec:
40:fa:fe:fc:bc:5a:5a:d2:aa:5b:53:89:94:7b:46:
87:e9:3c:e9:79:b2:c4:e1:ea:24:32:eb:37:51:4d:
55:cb:c1:cc:0d:a7:94:7b:42:d3:39:8d:04:0a:45:
70:20:7c:30:84:5e:30:0e:80:a9:db:f3:43:a1:b7:
d3:2e:a8:14:c6:17:c2:bd:27:55:3e:2b:51:fd:32:
92:02:f2:28:26:22:d2:14:f5:2a:98:98:7f:b4:e9:
d5:aa:9b:33:28:e7:ec:b1:07:72:2b:b0:d5:50:7f:
00:03:9b:e2:cb:58:50:a9:a2:6e:c9:f5:ee:68:0c:
26:9e:e0:55:d1:c4:dd:bc:11:d5:23:da:4f:c7:29:
5c:12:09:dc:22:8e:d7:47:d5:14:5a:c3:43:41:85:
40:36:99:23:93:29:5b:5e:f7:3d:af:01:b1:1e:2f:
50:4c:32:7a:8d:74:3e:f0:37:58:d5:3a:44:c8:a0:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:F5:E5:11:45:AC:0A:B1:AE:05:D2:6B:55:70:75:B8:D1:40:D5
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:45:1c:a0:ac:12:5f:dd:c9:2e:66:82:29:de:cd:fa:2a:11:
54:67:99:5e:23:70:a6:24:43:ad:bd:0e:cd:56:07:a4:7e:0f:
97:dc:c9:82:10:e2:72:66:e8:07:f8:ef:1c:a3:f3:00:e6:42:
72:f1:91:80:8a:ba:31:c7:44:14:f0:65:76:e2:bb:28:2a:ac:
0b:51:1b:b3:b6:fd:3c:04:55:41:af:77:0e:3b:ff:b9:ae:3f:
df:9d:d1:6a:26:8c:b5:5e:8d:58:bf:36:30:09:57:2b:c0:47:
a4:7d:16:89:21:76:db:7c:a7:28:82:57:41:43:f2:5d:ee:bd:
7c:15:85:00:f6:0c:2d:75:ab:c3:88:2e:d5:7c:ab:49:a1:25:
36:38:4c:ce:11:01:53:d8:cf:7d:f8:dd:a3:16:69:ab:09:da:
d6:58:fd:0d:3f:c2:a5:f2:9b:06:24:d1:85:dd:7d:91:8a:1c:
1b:d0:72:eb:2e:e9:82:51:65:ba:db:6e:f5:cf:90:72:e0:c8:
b0:1c:3c:9e:94:5d:1d:1b:53:fb:e1:65:35:90:90:ab:f3:03:
72:23:00:d9:e8:ed:3b:48:93:15:e6:31:cd:b1:52:4c:41:0e:
e8:d4:83:27:2b:66:f0:67:c6:34:0a:53:48:79:31:b9:b9:8e:
dc:53:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:04 2025 by rpki-client