Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: nbm9ILMrGjznX70/Hho4YUsqGPTXqy/Ys/Z9dZpcpjc=
Subject key identifier: 71:32:43:26:80:63:40:2D:7B:C7:AF:31:BD:1D:01:27:A9:D9:65:A3
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 019847ADB718788234259905E78ED7B4F2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 02E1
Signing time: Sat 26 Jul 2025 17:00:23 +0000
Manifest this update: Sat 26 Jul 2025 17:00:23 +0000
Manifest next update: Sun 27 Jul 2025 17:00:23 +0000
Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: syaZDfHhwISMzQgCNPUmv0Bn5GmrIq0tvk1LAJmu5M8=)
2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:b7:18:78:82:34:25:99:05:e7:8e:d7:b4:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Jul 26 17:00:23 2025 GMT
Not After : Jul 27 17:00:23 2025 GMT
Subject: CN=713243268063402d7bc7af31bd1d0127a9d965a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:fb:ff:78:47:4c:1d:d8:9c:b6:84:42:9c:
db:85:6a:bd:c6:ed:e4:2a:ec:cb:94:b6:2b:d7:f2:
16:71:dd:15:17:70:42:fb:8f:89:4b:87:9a:92:3b:
c9:f5:e9:8a:83:fa:08:36:f6:fd:fb:5b:bc:30:af:
68:41:46:4d:15:23:8b:3d:34:6c:66:5f:b4:45:0a:
ed:97:01:43:ed:2e:52:af:a8:68:df:84:e9:00:42:
88:92:b6:8a:1b:91:a1:a4:7c:ee:01:18:57:ba:03:
1f:12:59:d5:9e:2f:f4:69:38:9c:c5:95:43:bb:57:
3d:b9:d7:7f:c0:5a:b4:94:b8:1d:ec:47:2a:e6:f1:
d9:39:78:d0:f8:32:e9:c3:30:dd:67:59:99:c0:e9:
bc:78:46:27:96:09:e1:3f:77:47:fa:51:8d:17:46:
6c:e4:d9:d5:83:17:27:8b:34:01:45:6f:1a:58:0f:
3c:b5:98:78:17:fc:85:a3:e4:be:aa:e7:12:88:fd:
05:11:3f:5d:a8:26:4e:85:09:e5:ad:c3:da:f1:87:
da:8d:f7:8a:fe:43:d9:30:da:99:cd:6f:ee:66:22:
61:e4:c1:d7:45:75:b8:0a:b2:e0:c3:ef:ba:8c:22:
e1:43:d1:8e:16:99:86:6b:11:d6:34:e2:a5:14:4d:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:32:43:26:80:63:40:2D:7B:C7:AF:31:BD:1D:01:27:A9:D9:65:A3
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7b:99:ff:5c:b0:d4:27:2d:2d:60:26:e2:cd:b2:74:89:60:
78:b3:c4:01:17:80:e3:1f:c5:b8:3f:12:8a:2f:e0:40:0c:e3:
e6:9b:ca:1a:66:47:fc:b7:4c:9b:65:a4:ec:eb:5c:3a:e2:33:
df:e3:92:c4:f3:43:63:59:d5:2b:dd:34:9e:b3:95:59:05:6e:
2e:a1:7b:9a:e2:2b:64:00:06:e6:9a:94:67:f4:2a:eb:93:43:
9d:30:c5:b7:c6:16:f5:89:a7:71:2f:91:46:f9:99:9b:cb:7c:
af:21:d1:6c:9a:7c:e7:ba:ad:b1:40:cb:ba:a8:c2:38:b6:70:
3f:58:d1:7e:39:f0:ed:17:0a:8f:42:32:c1:47:72:7a:c2:46:
64:31:8f:fb:cc:05:f1:2a:a0:0e:ab:e3:39:7f:3c:a1:1b:da:
50:c0:e5:4e:70:b8:49:ff:1a:5f:a1:10:ad:54:aa:96:a3:70:
d2:da:4e:2e:52:69:f2:01:44:75:9f:d1:80:20:a6:7d:84:50:
d4:99:29:2b:17:7d:48:33:fe:da:1e:30:11:37:46:5f:f2:40:
9b:7c:3e:88:db:81:bf:84:07:04:9a:a8:e0:cb:3f:b7:d2:58:
1e:07:76:b2:0a:81:fe:ff:42:3c:29:5c:f7:f7:c9:b6:d1:c0:
41:ef:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:12 2025 by rpki-client