Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: E3FQ14JBcG/Hc4Qiuks2YOz2UE0rvwvB3Qcmzf5tDX8=
Subject key identifier: E0:81:0F:D9:F5:0C:8F:D3:9D:0B:A5:D1:FC:58:15:0F:B1:8D:A7:71
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 0198349504ABFEE72691F853F36F283CEC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 11C9
Signing time: Wed 23 Jul 2025 00:00:37 +0000
Manifest this update: Wed 23 Jul 2025 00:00:37 +0000
Manifest next update: Thu 24 Jul 2025 00:00:37 +0000
Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: 8j0G69gzHN3A/epVRCcQAomPeyuPLbGOQXknGjCBMfw=)
5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:04:ab:fe:e7:26:91:f8:53:f3:6f:28:3c:ec:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jul 23 00:00:37 2025 GMT
Not After : Jul 24 00:00:37 2025 GMT
Subject: CN=e0810fd9f50c8fd39d0ba5d1fc58150fb18da771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:84:60:ad:a8:32:37:b9:7c:fe:12:6f:f6:1d:
0d:5d:0f:4c:92:3d:bf:35:4d:18:84:0c:fb:ac:b5:
fc:68:6a:ec:b7:2f:7d:2c:c7:a2:7a:9d:fc:4a:11:
3a:5c:81:0c:56:27:96:b4:98:1f:90:1a:01:d0:3f:
0f:26:d8:a5:32:e2:65:c1:df:fd:c5:78:77:af:d5:
dc:a9:1f:ae:8a:41:17:4b:3a:04:d4:aa:36:00:ef:
c4:a0:97:93:47:62:5e:75:75:64:3b:e1:d3:a2:16:
38:44:03:41:f7:65:2e:33:04:5c:45:b5:16:ec:66:
b1:25:25:3c:4b:0c:42:65:d2:77:20:a9:90:dd:e8:
95:16:35:43:f2:5f:ea:b6:ca:7f:da:72:c7:8d:71:
68:f0:35:0c:33:33:a8:fe:f8:bb:a6:a9:af:38:7b:
01:6c:50:d3:ce:17:f2:5c:2b:26:2a:a7:d3:29:9a:
fe:c6:8f:44:18:71:61:88:74:23:37:05:f2:4a:c6:
64:99:ec:50:92:d3:a3:66:5c:2a:48:df:a5:09:3b:
bd:3b:7f:5b:fd:9e:93:00:a0:69:5e:c2:bc:51:c3:
4e:88:5e:a0:60:40:35:cc:16:84:d6:ee:66:8a:bb:
58:9c:61:cf:00:a5:b5:74:c2:8f:4a:fc:9f:00:3c:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:0F:D9:F5:0C:8F:D3:9D:0B:A5:D1:FC:58:15:0F:B1:8D:A7:71
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:32:65:00:a1:da:b5:b0:5a:c0:84:c5:7f:c5:30:63:9f:a9:
fe:fd:f7:24:63:43:bd:ab:41:af:02:7b:e4:4d:e9:9d:fb:a8:
9b:87:01:3e:7f:de:e0:6a:4e:05:25:47:e0:5b:86:ed:e6:0b:
aa:0e:53:00:d9:2d:36:d3:50:23:3d:5f:7c:55:7f:b3:9a:3a:
4d:93:98:90:d3:2c:b7:4f:38:a8:36:20:d6:88:03:ba:b7:6f:
c4:0b:60:98:db:c2:92:f1:c4:c9:df:81:1d:d0:b8:39:ed:6b:
68:7d:8b:0a:3f:49:49:2c:fd:0d:43:6b:86:16:f4:a8:70:ff:
1e:2a:0e:12:8d:e5:72:ef:57:70:75:05:4a:00:2a:28:a6:e2:
0d:9e:56:65:68:65:36:3f:a9:e6:18:e2:46:07:00:c6:02:50:
bd:81:56:cb:d9:02:52:70:69:f6:54:5a:1c:95:67:a8:16:34:
d6:ec:1c:d4:92:26:82:d6:32:2e:6f:54:cd:75:72:c3:17:2b:
4d:cf:77:26:b5:f7:b3:f8:1f:31:0f:39:08:32:85:8f:dc:46:
e9:92:c9:b6:02:66:62:31:15:2b:96:7d:e8:fe:85:52:42:f9:
01:a5:35:67:3e:67:e9:23:2d:65:a0:e3:47:b3:6a:26:d4:93:
d6:0b:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:54:52 2025 by rpki-client