Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: D3Imdz0flE19r4ED8p0GeVoZm47gjTYdHrjdfDeo7Bs=
Subject key identifier: FF:F3:0F:EF:F6:AB:6C:44:FE:32:70:65:5A:47:0A:09:62:C4:31:E0
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019935374BA11D6E760CB7C74908B386E329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1686
Signing time: Wed 10 Sep 2025 20:00:40 +0000
Manifest this update: Wed 10 Sep 2025 20:00:40 +0000
Manifest next update: Thu 11 Sep 2025 20:00:40 +0000
Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=)
2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=)
3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=)
4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=)
5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=)
6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=)
7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=)
8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: LZ6dQXAUcqZ59H9yFacaOaG+mN7f4aMUvq7kswRt0X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:4b:a1:1d:6e:76:0c:b7:c7:49:08:b3:86:e3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Sep 10 20:00:40 2025 GMT
Not After : Sep 11 20:00:40 2025 GMT
Subject: CN=fff30feff6ab6c44fe3270655a470a0962c431e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:fe:43:45:1f:9d:cb:5c:79:58:96:19:2e:
44:16:c9:92:a6:70:b8:e0:5e:c9:79:1b:a4:65:46:
de:2c:ce:b4:8d:9e:e7:7f:2c:78:58:a9:88:6b:83:
33:67:af:d5:4b:53:1a:7f:17:24:ba:95:2b:85:f7:
50:e3:37:fa:ad:67:35:b5:f2:9b:2b:06:96:43:c9:
b2:3b:2c:04:11:ba:82:fb:ec:fb:46:5d:3a:82:46:
46:29:a4:16:5f:01:d9:d5:f0:89:18:3c:b5:1c:1c:
a6:b2:28:dd:56:6a:4c:09:00:90:1f:04:b2:e2:55:
72:5d:d2:40:7f:6b:db:b7:11:49:1f:9e:36:0c:f3:
d4:b3:08:84:d0:13:e4:d2:96:d8:22:99:06:17:45:
af:de:7d:92:a8:cc:b6:19:2c:d0:a4:d3:f1:fd:1c:
d3:0f:8f:ce:67:0b:56:c9:b0:b8:1f:f6:02:96:fd:
42:f1:7d:43:ad:95:fe:06:b0:fb:db:8e:ed:f1:2a:
64:26:93:43:51:ea:b7:f9:9f:c5:0d:50:b5:ca:d3:
76:a8:62:66:67:b2:bd:06:ac:2f:79:d4:49:65:f2:
21:5a:4d:1c:1e:09:98:52:50:76:14:0f:c9:c6:5a:
e5:5a:2a:0a:28:56:36:cc:1e:e4:b0:a6:b3:77:1e:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:0F:EF:F6:AB:6C:44:FE:32:70:65:5A:47:0A:09:62:C4:31:E0
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:ca:7c:ab:06:5c:c9:f9:06:e2:c8:df:71:3c:a3:5c:64:
97:69:be:cb:d5:03:bd:f2:73:52:c3:db:5e:11:9b:3a:d0:3c:
35:05:65:2f:8b:66:d5:8d:d3:05:79:47:2f:28:02:3b:dd:ce:
d1:6f:0b:54:8b:d6:ef:9f:75:da:d1:50:47:db:02:55:37:8b:
fe:8a:b2:54:b2:25:71:9d:80:95:e0:d4:df:54:d1:62:32:66:
c0:1d:39:b0:c6:af:8e:18:f6:ac:5f:71:9b:8a:47:cc:b2:76:
48:18:12:84:e4:c6:09:cf:a2:98:f1:c7:ff:12:2e:7d:26:9f:
d8:e9:76:57:b4:6c:4f:78:2d:52:bd:45:d7:f6:0e:9c:26:b6:
3c:d5:6a:7b:26:17:fe:41:8a:36:b7:f9:fa:39:e6:7c:38:7c:
ee:aa:5c:0a:c6:80:d9:05:9e:35:37:b9:ea:55:36:f4:c0:d8:
05:ec:14:db:93:c1:d2:b4:85:4f:d4:d3:7c:1c:4b:48:33:c4:
55:d3:ea:83:53:b6:ac:35:07:e0:85:69:be:89:3b:fd:35:7c:
d2:68:d4:ac:33:02:a8:19:34:48:a8:36:6f:38:fd:e5:e4:f4:
d7:f0:39:9b:82:7a:fc:08:bb:4a:a3:27:d1:7e:20:b6:cd:93:
0b:8f:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:09:21 2025 by rpki-client