Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: TNN5oCMrYwupl3uZzzo/KTT9k7eQqNhsi/F7Q+62QJs=
Subject key identifier: 32:55:D9:96:D8:2B:0A:9A:BF:3A:42:97:D2:2B:B4:A0:0F:01:DE:AD
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019845F6815CF0F67371202EF57CF41AFC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 14C8
Signing time: Sat 26 Jul 2025 09:00:39 +0000
Manifest this update: Sat 26 Jul 2025 09:00:39 +0000
Manifest next update: Sun 27 Jul 2025 09:00:39 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: XLL4vfd5w5ko1xYrvaJQ2/YlQE0ukB/NUt0BrrlEgKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:81:5c:f0:f6:73:71:20:2e:f5:7c:f4:1a:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jul 26 09:00:39 2025 GMT
Not After : Jul 27 09:00:39 2025 GMT
Subject: CN=3255d996d82b0a9abf3a4297d22bb4a00f01dead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:5e:74:27:3c:ca:cd:c1:65:4f:ae:47:ce:
bc:9f:dc:08:26:25:9f:50:bf:a4:ca:82:1a:f7:6b:
66:e9:aa:de:68:b4:0b:e0:0e:90:23:87:a1:80:8d:
3b:2d:52:65:eb:6b:c6:a8:6e:53:73:61:65:8a:ba:
18:d1:f6:18:ce:20:13:04:09:fb:56:7a:92:91:98:
ab:f7:ff:68:69:ac:ef:61:e0:f2:59:10:64:f0:5d:
66:b8:0a:da:fb:51:20:4b:cc:49:17:55:fc:47:c7:
42:73:b0:41:b9:37:34:7e:e0:57:e4:f8:a2:a6:37:
18:9d:55:63:f8:e6:9e:76:01:75:06:7e:33:2b:24:
27:65:9a:ee:4d:3e:28:f2:65:aa:fa:93:0d:b3:d1:
40:29:e1:20:30:3d:f1:a3:7b:5a:86:4c:1e:f0:85:
68:fa:c2:39:74:ed:5b:ca:a7:6b:5a:4b:10:c4:bf:
1e:0b:27:15:f9:97:db:85:4e:b1:2e:9e:79:46:1f:
07:62:62:22:cc:6a:d3:26:90:cc:02:87:0a:ac:d8:
c1:33:6b:b2:e2:79:20:7d:84:bf:49:af:27:ae:dd:
3b:a9:76:62:78:18:fc:5a:fd:3c:17:e6:56:a2:82:
ab:6e:65:ac:1d:a5:8c:ef:af:19:29:70:20:1d:ba:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:55:D9:96:D8:2B:0A:9A:BF:3A:42:97:D2:2B:B4:A0:0F:01:DE:AD
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:64:5e:82:c6:0b:7d:d0:17:66:6e:82:a4:af:3d:f0:c4:c8:
df:d3:18:99:25:33:c4:5a:93:5a:b7:71:e5:f6:96:94:77:6e:
5d:7a:2e:af:71:29:d2:7e:e9:27:99:b7:6c:3e:f0:3f:c3:00:
43:a7:a5:76:1b:31:25:cd:4c:39:d4:0e:b5:ed:b7:3d:ef:aa:
11:d0:4a:42:3a:c8:97:c1:c3:95:1f:2c:ea:f3:dd:ff:70:1c:
81:8f:57:2f:9c:dc:7b:e5:54:ca:ff:05:16:bf:97:c0:94:5d:
33:72:3d:7b:6c:2e:d8:ef:6b:8f:52:94:4f:4e:dd:94:2e:da:
40:1b:8d:ed:51:b5:12:fb:a2:36:fa:8a:20:14:49:41:9d:48:
15:2c:49:a0:cd:0e:60:b7:0d:ac:53:9a:28:32:b0:06:18:e5:
0a:24:e1:84:fd:de:19:82:17:19:00:01:b3:f4:c4:2c:f1:00:
3a:31:c7:6e:80:68:a8:8f:ba:c2:3f:b3:11:03:36:f9:d7:fa:
b4:4c:4b:e9:06:84:76:48:0f:67:a4:16:2f:25:46:fd:94:1a:
2f:87:eb:3a:76:f7:1c:24:87:8d:35:a0:0a:82:a6:fd:f2:c9:
7f:77:4c:66:f0:25:e0:2e:fb:a8:e6:30:c2:30:43:a4:a4:16:
a2:c9:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:46:01 2025 by rpki-client