Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: fNumrQ0u9JUqkxJs4xfjJ3xt+RuMMTmufBGl9DUxPTE=
Subject key identifier: 51:78:43:2F:11:23:23:01:92:D9:CA:8E:94:75:75:8D:F6:E8:61:F8
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 0198523197F11FFD9BE9F45CDCF8CF3BBBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0AED
Signing time: Mon 28 Jul 2025 18:00:38 +0000
Manifest this update: Mon 28 Jul 2025 18:00:38 +0000
Manifest next update: Tue 29 Jul 2025 18:00:38 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: vyIf1KD1ECtlhFNvs5q/SAkAzeZyglSo6+wn0tPswDU=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:97:f1:1f:fd:9b:e9:f4:5c:dc:f8:cf:3b:bb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jul 28 18:00:38 2025 GMT
Not After : Jul 29 18:00:38 2025 GMT
Subject: CN=5178432f1123230192d9ca8e9475758df6e861f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:b1:e6:eb:70:85:a1:de:55:b9:65:0a:b9:
d6:af:94:dd:30:0c:3f:bb:de:a7:f2:67:92:39:af:
52:59:0c:47:31:0c:25:e1:2d:0e:ea:57:8e:5e:cb:
16:6d:b0:10:5b:e3:e0:c2:c6:77:83:ae:42:5f:26:
66:82:90:7e:dc:35:a8:e4:75:95:c5:fc:13:ee:96:
91:36:84:79:24:bd:af:61:bf:b4:c2:d4:a3:1e:59:
98:8e:27:38:8d:40:50:ba:b0:97:5f:a0:90:74:9f:
c5:7e:3a:7d:29:22:b9:a8:43:d7:f4:51:fd:c5:39:
c8:9f:2e:29:68:83:09:89:50:e8:23:eb:7a:bd:b2:
c1:30:04:83:e7:0e:e7:83:94:0a:06:05:65:03:15:
be:e9:e6:32:01:86:24:85:8a:31:9a:1a:11:22:ad:
52:4d:66:af:6d:4d:bf:40:2c:23:0b:ad:55:5d:f7:
0c:23:06:fa:5e:97:1d:6b:2d:d6:25:f8:c1:9c:93:
13:ba:c0:cf:c7:55:64:be:e6:a9:39:da:24:23:0a:
33:13:e1:14:62:43:ef:86:ec:d0:ba:34:77:41:56:
a5:04:9f:1e:4e:db:d2:e8:d6:b4:72:1c:1d:3c:86:
17:c5:88:3f:ff:81:e1:ec:f6:ae:c9:9a:af:65:b7:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:78:43:2F:11:23:23:01:92:D9:CA:8E:94:75:75:8D:F6:E8:61:F8
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:de:6f:db:89:4a:f0:9a:41:e1:af:b1:d0:9b:e6:d3:7c:87:
e5:04:69:1d:31:72:53:e0:a7:b4:de:b3:86:6e:b7:1d:cf:c8:
dc:8e:f7:d6:3d:31:16:ec:1e:ae:2e:b7:c1:11:1c:14:d4:fc:
b6:5a:a4:3b:f8:d7:b6:3e:59:27:94:48:a2:a8:78:11:41:44:
05:6b:a8:ef:f4:4c:31:ab:de:4c:13:7f:4c:4c:5f:53:82:1a:
81:17:cb:d4:a3:d7:54:99:87:3e:e6:ad:5f:77:2c:e8:e3:61:
ea:c8:ea:c6:98:38:77:b9:b8:af:a1:17:5b:a3:e6:6c:ad:ed:
a7:da:e5:27:40:76:c0:da:fa:98:2b:ea:db:a5:2a:d5:84:92:
f6:2c:82:3d:5a:65:b1:fd:df:c5:5a:04:ca:47:b4:36:57:c1:
90:21:42:ca:24:71:52:7d:0c:81:6c:f1:95:43:9f:3a:f5:98:
0a:23:9e:86:3d:5e:2d:88:43:3a:02:37:6b:71:60:ba:9b:49:
61:7c:f5:db:30:7f:4f:dc:de:9f:60:9d:5c:e1:df:2c:d4:75:
1e:99:ed:53:47:15:9a:a9:a5:a3:f9:72:15:02:cd:8d:c8:13:
34:1c:ad:0c:91:3c:65:0b:3d:34:c6:f2:0d:87:3b:9a:f5:48:
88:fb:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:24 2025 by rpki-client