Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: 0FNu7O7qMvGfTGg9690ScbmtYnvY/g0zSFc+qQoQcXw=
Subject key identifier: EB:DE:77:A6:AB:D9:82:68:5F:87:DE:9B:34:00:07:5D:67:04:A7:32
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 01992F3557B555AF67CFD9BBD10EA1120EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 16:00:48 +0000
Manifest this update: Tue 09 Sep 2025 16:00:48 +0000
Manifest next update: Wed 10 Sep 2025 16:00:48 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: aHrVLUN0bwdQyvkLFhGpe7UwdhonsKBypGBRNS3T6BA=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:57:b5:55:af:67:cf:d9:bb:d1:0e:a1:12:0e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Sep 9 16:00:48 2025 GMT
Not After : Sep 10 16:00:48 2025 GMT
Subject: CN=ebde77a6abd982685f87de9b3400075d6704a732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:e5:8a:08:b5:c7:66:58:c8:3f:9e:86:df:
70:6e:9b:d6:93:ee:cb:d8:3a:b9:97:0f:7a:23:20:
c1:be:99:d0:df:6a:1f:50:e5:77:b9:13:2f:cf:d0:
b0:1c:66:d6:64:35:eb:4a:da:7b:44:fc:df:c6:3e:
b8:b4:9e:92:12:03:21:79:31:c8:72:b7:04:a0:a7:
82:a8:39:cb:ef:77:a9:cc:38:c7:54:35:ea:fb:1a:
50:28:73:f4:b9:b5:41:50:16:d6:dc:8c:58:31:18:
dd:a0:37:4f:30:62:12:86:80:aa:04:55:ef:3f:63:
a7:9d:05:7a:c4:a2:a8:4d:59:f4:c3:9b:2d:de:ad:
a9:d2:4d:30:40:5e:e5:f1:21:29:01:5e:1f:f0:76:
b1:dc:08:75:bd:a6:27:8b:b5:23:c7:ef:d9:5c:f1:
fd:31:cd:c4:e7:79:e1:6a:5a:71:d1:78:3b:be:a1:
ea:ec:dc:12:a1:5d:87:44:43:71:01:44:19:2a:de:
4b:b3:2f:24:84:f5:0c:c1:d2:2e:bd:4a:fd:b7:c6:
a3:d2:fb:ed:1e:ba:38:fd:c4:c1:30:90:e4:38:fc:
89:d4:e9:0a:c9:f8:63:a9:26:e5:9a:59:2a:42:d4:
e2:8d:8a:44:5f:12:85:c2:7a:6d:b4:d6:89:c7:fa:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:77:A6:AB:D9:82:68:5F:87:DE:9B:34:00:07:5D:67:04:A7:32
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dd:e5:b0:1f:4f:7b:e5:7b:4b:0a:c3:a0:58:cb:f5:94:9e:
a1:26:21:65:bd:89:19:d5:a3:37:05:f6:25:e7:4b:19:42:8d:
c3:4c:57:0c:da:52:e2:f0:15:4f:c0:d0:43:fb:ad:f9:61:15:
fb:a2:85:3c:83:ff:74:e3:94:ca:57:02:01:63:f6:a9:9f:97:
36:f7:39:55:e5:a4:06:65:bd:57:9d:73:bc:87:05:00:98:55:
26:c8:ff:50:97:d2:21:f4:a7:4d:29:f1:dd:5e:44:71:bd:8f:
96:9c:2e:f3:00:20:da:d8:d4:c3:20:07:b4:bb:01:d1:e4:4f:
14:54:e2:1b:03:d6:43:13:5b:b3:f9:f5:fa:a0:0c:f4:7a:fd:
d4:57:12:76:8d:cf:94:67:1a:99:c7:34:6c:1c:15:7f:d4:c2:
c8:79:8f:26:f8:32:c8:f4:11:8c:21:87:38:9b:c0:e8:c0:df:
4b:a1:42:b9:c4:84:5a:27:03:12:c1:e6:6f:d3:92:2f:15:3d:
d5:a9:33:5c:e7:34:16:30:6d:32:fa:f4:2e:6e:14:35:62:cd:
d1:df:27:81:f5:95:55:91:0a:7d:7a:9f:09:14:8c:dc:a8:99:
0f:9a:e5:b4:a4:4d:b9:da:5a:00:a4:dd:e5:86:d6:38:55:c7:
c7:c7:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:06:37 2025 by rpki-client