Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: w9S/K24XiFckhGOl7bKN7W27JBRLaOXtUzB3Ni355gg=
Subject key identifier: 3F:06:99:28:9F:BF:46:39:7E:65:83:B8:46:50:AF:3C:A0:90:8D:E0
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 0198477890ED46E3BD2FC3313E029FBAD418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:02:20 +0000
Manifest this update: Sat 26 Jul 2025 16:02:20 +0000
Manifest next update: Sun 27 Jul 2025 16:02:20 +0000
Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: p34sMgZkkm6hUNf4w0l38OxzlS4AdvfuskAgsCkoMFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:90:ed:46:e3:bd:2f:c3:31:3e:02:9f:ba:d4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Jul 26 16:02:20 2025 GMT
Not After : Jul 27 16:02:20 2025 GMT
Subject: CN=3f0699289fbf46397e6583b84650af3ca0908de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:be:79:f9:f8:ca:84:9a:91:97:c5:a6:99:
0d:aa:00:f7:22:65:52:2f:5a:1a:29:bf:ba:c6:9a:
5b:d2:ec:e8:f6:9b:71:c7:13:20:c7:91:d7:4e:f5:
5b:97:d8:bb:08:ee:63:77:1c:d0:64:b8:e4:58:84:
b9:39:27:3b:ed:16:2c:68:c0:c5:12:44:a1:68:14:
86:1d:4a:27:f1:a8:63:5a:14:22:b5:20:64:d5:83:
62:6f:68:74:c3:ff:05:5f:84:ac:c8:d4:d5:2c:b0:
1c:e8:42:12:e9:f1:bb:d4:66:6a:e3:5e:54:d8:f5:
92:bd:50:4d:c7:b9:09:b0:10:e5:b2:a0:08:d2:be:
fe:bd:86:48:a3:a5:b4:14:2a:f9:2e:49:44:90:c9:
42:80:f3:a4:6c:79:15:29:58:f6:00:ef:c9:66:de:
f1:3c:73:6b:17:3b:77:7d:53:ad:77:3c:9b:1a:98:
72:4b:a6:d3:39:36:4a:52:a0:ec:23:09:7a:c5:7f:
80:96:e8:fc:c6:02:3c:9f:a4:ec:e4:7d:51:43:c2:
92:38:0b:c3:8a:76:7f:b7:c7:8d:86:36:89:fd:2c:
79:71:c6:58:cf:11:91:f7:71:c7:10:79:26:db:03:
ee:21:db:db:be:17:e5:96:9b:d5:ca:0d:7d:d1:af:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:99:28:9F:BF:46:39:7E:65:83:B8:46:50:AF:3C:A0:90:8D:E0
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:31:18:5d:da:a2:9d:3d:d5:f8:e8:bb:40:fb:c0:a4:ae:ae:
12:03:f7:9b:61:3f:54:a1:59:56:81:aa:85:e1:66:38:2f:fb:
76:96:f2:03:51:a7:ca:f1:b4:70:05:be:3d:e0:4f:2c:59:9d:
d2:0e:bf:34:bd:ed:b8:22:cd:6d:12:5f:7e:8c:29:b5:08:06:
2e:f6:e2:ad:8f:7c:78:a5:d8:07:a5:a0:8d:10:6b:91:ed:eb:
8a:46:a0:8b:f2:74:8a:9a:b0:6b:27:82:0f:60:41:1e:a2:98:
d4:f7:19:9b:37:f7:a5:ac:6e:9d:2a:35:d6:0e:0b:b6:3c:16:
45:0a:e2:f0:3f:34:9a:1b:1f:2b:05:56:ce:09:a1:cf:86:a7:
c2:7b:aa:30:21:ae:79:3e:ac:2e:9a:6a:6f:aa:3b:58:fd:e5:
7a:f6:d7:79:dd:20:c0:63:79:cc:9d:cc:5c:24:da:5a:eb:20:
77:e0:c7:bd:17:c2:f1:33:6b:f6:f4:3e:e9:14:59:a0:43:d0:
d9:38:0e:18:12:82:b0:31:70:90:f4:e6:cd:1e:18:8b:d5:eb:
61:de:47:27:73:77:28:c5:02:43:ae:9a:a8:64:8d:30:d4:bb:
45:8a:01:e4:b2:d7:2b:dd:fa:aa:93:71:6b:d4:9a:10:30:94:
38:98:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:20:08 2025 by rpki-client