Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: pbOO0ZFqBf96urPXmwA9ynjGXkd4md/wbFTHQCp3vMk=
Subject key identifier: A6:09:FF:02:F0:38:F2:84:01:1D:B1:0D:8F:D4:E6:BD:A3:86:96:FE
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 0198496531B2CB6A86C31EB7B08948C7960E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:25 +0000
Manifest this update: Sun 27 Jul 2025 01:00:25 +0000
Manifest next update: Mon 28 Jul 2025 01:00:25 +0000
Files and hashes: 1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: GC0zm8kAzNbknY38mFGT82ntlwglplfVWAEpktf8Gww=)
2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:31:b2:cb:6a:86:c3:1e:b7:b0:89:48:c7:96:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Jul 27 01:00:25 2025 GMT
Not After : Jul 28 01:00:25 2025 GMT
Subject: CN=a609ff02f038f284011db10d8fd4e6bda38696fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:b4:b2:c1:b6:f8:23:5f:c9:c0:22:ca:43:
a7:46:d7:c4:03:1c:19:ec:4d:1b:39:77:92:ae:f1:
01:ef:5b:34:c4:62:8b:21:6c:ea:ba:b4:ba:f2:f4:
03:7b:9f:00:90:23:ae:aa:69:5a:7c:88:04:04:2d:
23:65:93:05:5a:ca:70:07:7d:6b:1e:3f:86:76:76:
1a:ac:9e:ff:2c:a0:4a:56:a3:b2:65:ee:25:de:ed:
a1:34:f9:06:d3:eb:a6:85:e0:81:b5:fa:50:87:df:
2e:3d:8e:8d:7e:5a:bd:3d:c9:52:b1:df:53:5c:1b:
77:b4:7e:1c:5b:b5:2e:df:0c:10:e5:ac:91:fd:2b:
23:d6:09:e9:e0:09:0f:c1:ff:07:01:fc:61:c0:26:
ce:3e:c4:62:c2:c9:40:0b:b9:22:a7:d4:6a:f0:e0:
25:02:ff:37:7f:51:e4:7d:c7:e9:a2:cc:88:82:a1:
32:5a:a4:1e:e5:70:ef:a4:c7:d7:7f:36:2a:97:c8:
73:9a:bc:0d:cd:c7:66:93:c7:66:79:24:00:46:8b:
7f:c0:e7:93:30:06:85:89:ac:82:70:85:a2:e3:d1:
93:90:07:b9:41:75:76:18:7d:84:b0:74:53:b1:d3:
d6:ec:f8:20:cd:4d:e1:45:8e:6c:dd:d4:bd:cc:ea:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:09:FF:02:F0:38:F2:84:01:1D:B1:0D:8F:D4:E6:BD:A3:86:96:FE
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ee:19:b6:7d:e4:7c:08:91:a7:64:46:21:31:81:57:6e:b2:
da:69:a8:38:23:34:5e:49:8f:5f:34:88:31:64:53:96:05:34:
20:b8:bb:3a:90:42:11:e3:67:02:f5:76:82:5a:64:a1:db:3d:
e6:a5:12:62:db:3c:76:4d:ee:3e:ca:d0:61:78:73:71:44:b2:
c5:8c:a1:19:7a:5c:8e:2a:54:b3:c9:b7:d8:f0:3a:e2:02:8b:
96:1d:6a:f5:a3:93:56:5c:b9:83:85:30:8e:c9:b7:b0:c4:38:
54:52:cc:75:dd:e8:4d:0c:85:a1:da:bf:4c:3f:0e:fd:1d:28:
41:ba:7e:35:33:cf:3d:d4:4b:27:1d:e1:a9:3a:f3:1b:b3:6b:
95:8b:15:fd:e3:a9:15:24:32:16:07:e8:83:dd:70:cb:ef:1a:
8e:67:f3:b0:bc:07:27:5e:41:1a:1e:87:2d:ab:74:7c:82:b7:
0f:9c:9e:4b:57:aa:90:91:6d:2b:cf:eb:50:cc:ed:47:74:d1:
74:a3:6f:55:29:06:fc:95:e0:19:b1:58:5f:c5:5b:30:f9:a8:
0c:90:43:bf:6c:97:22:f8:26:4c:b0:c7:b3:66:4d:95:ae:12:
8a:8c:be:9b:ec:9e:a7:63:27:2d:de:7c:ac:e1:cc:c2:d3:84:
1a:db:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:14 2025 by rpki-client