Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File: YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier: q52/CZb3ASjaOcERs0BNssdh4Bib7dk3srjlbQJ6ink=
Subject key identifier: 9B:7A:FE:45:B3:86:C0:00:FE:E6:14:31:69:38:FA:87:8C:6F:FB:32
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 019844ACAE7DA09FF69AEE34835FDF2E80D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 03:00:24 +0000
Manifest this update: Sat 26 Jul 2025 03:00:24 +0000
Manifest next update: Sun 27 Jul 2025 03:00:24 +0000
Files and hashes: 1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: fFpBXdyKh6BdMubJt4Q46oc0BurrzeeKAdTzG1yNSoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:ae:7d:a0:9f:f6:9a:ee:34:83:5f:df:2e:80:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: Jul 26 03:00:24 2025 GMT
Not After : Jul 27 03:00:24 2025 GMT
Subject: CN=9b7afe45b386c000fee614316938fa878c6ffb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:af:80:88:77:4c:9a:03:75:d9:48:29:a7:
1b:ff:6e:c4:ce:5c:ba:07:ed:76:67:ab:f5:a1:af:
68:4c:df:a3:bd:a0:1c:f1:db:9c:67:57:79:af:22:
bb:41:85:83:ba:51:3a:30:64:66:12:25:94:b8:4f:
e0:3e:2b:a9:51:ab:e1:3c:4a:f0:9e:81:4d:81:fe:
8a:5a:ab:db:4a:51:fb:fd:12:65:ab:39:21:af:e2:
71:88:ff:28:84:15:17:00:85:90:92:79:87:7d:36:
69:c6:8b:0b:d9:da:b9:a6:97:21:6d:51:2b:85:1c:
ce:b1:4e:55:69:0f:08:69:24:aa:b9:5b:b3:98:00:
59:39:02:52:75:98:de:ce:c8:42:08:e6:9f:43:e5:
f0:e6:69:1f:1f:11:99:30:ae:1d:ec:af:96:c5:c2:
bb:d5:bc:fb:70:3b:2f:f3:4b:e5:d9:d1:83:f8:b0:
e4:92:06:d1:b1:29:17:e3:15:5b:75:64:6b:4e:a4:
32:d3:3b:08:cb:8b:f1:97:a6:10:36:1d:0c:67:63:
8b:d2:c4:02:64:c3:e7:4c:2a:61:b7:0b:e2:6a:bf:
82:75:35:36:3a:ba:dd:d6:8c:0d:69:da:a7:34:4d:
b8:a9:b1:a3:78:62:38:23:37:34:2d:ab:37:33:b1:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:FE:45:B3:86:C0:00:FE:E6:14:31:69:38:FA:87:8C:6F:FB:32
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:83:e6:14:aa:af:70:f8:51:73:f8:5e:b7:4a:47:05:1f:87:
84:77:84:14:5e:3f:97:8a:18:a7:75:d3:c7:73:eb:b0:d3:9e:
47:50:3b:dd:d0:ec:e2:7a:da:d6:73:9a:ec:5d:0a:75:23:83:
05:84:38:57:1d:46:d2:93:5c:ae:fa:77:15:d6:29:85:8e:17:
46:a2:fc:2a:d5:c2:ac:8a:57:57:4f:2a:63:85:ec:a1:67:b7:
4e:e2:3c:1c:ee:e6:33:ee:91:e8:05:67:56:08:58:fa:fa:8a:
35:e0:bf:86:35:d7:2f:f5:e5:5b:1b:fa:55:77:ff:58:21:4c:
6b:da:a3:03:70:15:cf:1b:7c:5a:9b:c0:b9:56:64:c1:5d:5d:
33:bc:bc:4b:7a:b9:a4:d1:f1:9f:d7:2b:94:bf:a9:cd:e1:66:
06:fe:ac:34:f7:e4:ba:32:ec:ec:66:de:a7:b8:b4:34:24:eb:
76:4e:d4:76:48:d5:5f:c6:bf:70:69:e2:97:5f:29:f0:4d:99:
56:15:ef:c8:9d:62:04:4d:75:69:75:22:a3:59:c1:47:81:b8:
08:a8:33:25:cc:dc:91:40:da:80:d6:9f:6c:9d:87:3b:6a:24:
ac:a7:1e:07:b2:3e:b4:37:99:83:53:b3:e0:22:d4:b9:28:52:
bc:eb:28:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErK59oJ/2mu40g1/fLoDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTljZmRmYzAxZGFlNjdmYTZlZTMxNzk0ODA3NzBjNDUy
YmFjMjIwHhcNMjUwNzI2MDMwMDI0WhcNMjUwNzI3MDMwMDI0WjAzMTEwLwYDVQQD
Eyg5YjdhZmU0NWIzODZjMDAwZmVlNjE0MzE2OTM4ZmE4NzhjNmZmYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrqvgIh3TJoDddlIKacb/27Ezly6
B+12Z6v1oa9oTN+jvaAc8ducZ1d5ryK7QYWDulE6MGRmEiWUuE/gPiupUavhPErw
noFNgf6KWqvbSlH7/RJlqzkhr+JxiP8ohBUXAIWQknmHfTZpxosL2dq5ppchbVEr
hRzOsU5VaQ8IaSSquVuzmABZOQJSdZjezshCCOafQ+Xw5mkfHxGZMK4d7K+WxcK7
1bz7cDsv80vl2dGD+LDkkgbRsSkX4xVbdWRrTqQy0zsIy4vxl6YQNh0MZ2OL0sQC
ZMPnTCphtwviar+CdTU2Orrd1owNadqnNE24qbGjeGI4Izc0Las3M7FgWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt6/kWzhsAA/uYUMWk4+oeMb/syMB8GA1UdIwQY
MBaAFGKZz9/AHa5n+m7jF5SAdwxFK6wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBuUDM4QWRybWY2YnVNWGxJQjNERVVyckNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jOGJmYjgtZjQ3ZS00MzBlLWFlM2Ut
NjhhMTRjZTQyZmE2LzEvWXBuUDM4QWRybWY2YnVNWGxJQjNERVVyckNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jOGJmYjgtZjQ3ZS00MzBlLWFlM2UtNjhhMTRjZTQyZmE2
LzEvWXBuUDM4QWRybWY2YnVNWGxJQjNERVVyckNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIPmFKqv
cPhRc/het0pHBR+HhHeEFF4/l4oYp3XTx3PrsNOeR1A73dDs4nra1nOa7F0KdSOD
BYQ4Vx1G0pNcrvp3FdYphY4XRqL8KtXCrIpXV08qY4XsoWe3TuI8HO7mM+6R6AVn
VghY+vqKNeC/hjXXL/XlWxv6VXf/WCFMa9qjA3AVzxt8WpvAuVZkwV1dM7y8S3q5
pNHxn9crlL+pzeFmBv6sNPfkujLs7Gbep7i0NCTrdk7UdkjVX8a/cGnil18p8E2Z
VhXvyJ1iBE11aXUio1nBR4G4CKgzJczckUDagNafbJ2HO2okrKceB7I+tDeZg1Oz
4CLUuShSvOsoww==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:43 2025 by rpki-client