Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: COpuPh5HiDiuQZq5EV7f/+6KBjzMffZIayKRixhyyPM=
Subject key identifier: 59:1A:03:6F:64:3F:4E:88:67:B0:0F:3D:EE:FC:E7:64:DA:95:A9:02
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 01984889998D8CC5BD886CC62C3AEC53BE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 11C3
Signing time: Sat 26 Jul 2025 21:00:33 +0000
Manifest this update: Sat 26 Jul 2025 21:00:33 +0000
Manifest next update: Sun 27 Jul 2025 21:00:33 +0000
Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: bZg1duxKGiEo+cWql37f4mCEDnyIVb4zwNd/SMolxSM=)
2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:99:8d:8c:c5:bd:88:6c:c6:2c:3a:ec:53:be:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Jul 26 21:00:33 2025 GMT
Not After : Jul 27 21:00:33 2025 GMT
Subject: CN=591a036f643f4e8867b00f3deefce764da95a902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:c5:86:64:73:d1:87:54:74:29:3f:cd:9c:
e7:8a:65:7b:1f:cf:e6:f6:bd:5e:75:3b:be:9d:bc:
4f:d8:82:5a:9c:45:40:ad:19:73:0d:6b:62:bc:e5:
b8:ad:2e:63:0c:13:a2:7e:1a:d8:94:5a:f0:c0:f1:
c9:7b:96:00:e0:2b:0f:36:11:64:ee:4b:e3:5a:e3:
ce:6f:f9:06:cd:79:d8:a8:f4:31:47:57:b5:0a:5b:
bc:a8:7b:6b:51:c4:78:9d:31:47:b3:66:05:20:1f:
4c:44:a2:08:c5:07:dc:26:26:3b:c4:ed:bf:f1:74:
26:f8:94:90:c1:0c:12:17:98:e0:7b:60:57:53:f9:
98:cf:80:c1:6c:2c:21:7c:17:a8:b6:32:a8:44:62:
5c:34:a9:76:c5:2c:6c:a7:52:fb:4e:04:73:64:4c:
a7:46:0a:15:49:bc:61:3c:85:66:f8:e2:1f:f4:2c:
5c:57:a1:45:e5:85:8b:d8:19:b2:06:19:5d:df:c1:
8f:96:4c:1d:15:6a:02:e5:6b:ce:6a:9d:11:5d:9f:
71:e2:4b:b6:20:d2:e4:17:19:97:de:df:d6:67:5f:
0d:e7:70:27:3b:72:ad:b5:6e:34:2f:f6:8c:9e:e1:
01:7b:a9:ea:d2:4e:2b:4d:c6:dc:48:54:67:e8:74:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:03:6F:64:3F:4E:88:67:B0:0F:3D:EE:FC:E7:64:DA:95:A9:02
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:d5:4d:00:35:fc:09:ab:92:22:42:a2:42:b8:9f:24:84:
e2:87:7f:4a:f4:e4:73:55:05:65:8e:b6:f7:22:35:0c:ce:4e:
83:a2:26:ba:19:27:fe:a2:ff:34:d6:b2:a6:41:cf:31:e0:d5:
07:d7:96:59:52:09:4e:53:04:00:f3:cd:fb:6b:02:e8:5d:04:
09:c2:1e:b5:05:04:07:ae:33:24:db:0b:5e:78:6f:de:e6:eb:
27:97:d8:15:38:41:51:7c:44:cd:4c:6d:db:8e:9a:17:a9:1b:
2f:75:9d:59:1f:45:3c:77:1e:cc:98:e4:74:a6:dc:58:92:6b:
81:d8:71:80:be:33:71:41:db:ef:ad:aa:a7:10:ef:5d:7d:fd:
85:de:ce:c4:1e:e0:dc:79:95:6f:4c:de:da:37:13:f6:dd:75:
57:ef:2c:c5:92:7c:4d:e6:3c:42:d7:03:bc:ed:e1:1c:62:8a:
66:8f:62:77:7a:38:5a:9b:81:1e:0f:f2:56:2c:35:a8:2e:68:
f6:64:58:ed:af:14:27:8c:83:6a:e4:bc:19:49:b8:af:47:d2:
70:54:b2:fc:61:46:f7:ed:a4:ec:04:8b:8a:3e:4b:58:3e:e7:
1d:d1:6a:66:75:29:73:87:bc:32:98:6f:be:e8:ee:7f:56:a4:
cf:db:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:23 2025 by rpki-client