Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: c0XEU//NghtGMGSOG7Mr1RCNqFmPfOO+f2OMRWyNM9U=
Subject key identifier: A1:E0:F5:AA:22:5A:4E:C0:15:BC:BB:35:A7:A9:D8:59:08:3E:BE:D7
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01993010FDE6F6998A6E005212DDEDBBBB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0E74
Signing time: Tue 09 Sep 2025 20:00:43 +0000
Manifest this update: Tue 09 Sep 2025 20:00:43 +0000
Manifest next update: Wed 10 Sep 2025 20:00:43 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: Pr7vhlPjFbUOqB4ss9N3/XkYu4PjcRsVNY6tVvNvIpM=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:10:fd:e6:f6:99:8a:6e:00:52:12:dd:ed:bb:bb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Sep 9 20:00:43 2025 GMT
Not After : Sep 10 20:00:43 2025 GMT
Subject: CN=a1e0f5aa225a4ec015bcbb35a7a9d859083ebed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:bc:b5:14:9a:57:25:e0:4b:59:0b:30:14:
81:df:d0:c4:7e:c1:31:ce:30:e1:ae:96:e3:d5:ce:
2b:49:40:5d:14:a9:9a:34:08:a6:06:1a:05:80:0f:
0e:1a:b5:42:7e:4b:21:01:74:39:88:4c:4b:c5:97:
78:d7:ce:85:f6:ea:f8:24:9e:d5:a1:14:89:95:6c:
27:fc:8d:06:a1:51:f8:66:52:07:22:84:55:a6:95:
0d:f9:02:a4:4b:3f:b3:3c:02:5a:67:50:27:87:73:
a3:0c:32:d9:72:52:92:3b:6e:62:d8:68:eb:b5:c1:
f3:83:e7:b5:f3:a5:13:31:62:bd:af:87:2f:c4:57:
65:fd:c3:58:1a:6d:e9:eb:e7:f3:b8:ae:64:e5:77:
9d:30:c1:55:b8:32:fe:3c:38:5e:f7:b1:2f:6c:a0:
eb:c2:b9:ff:4d:8e:3c:f0:b2:8d:81:b4:77:c2:1c:
29:5e:8d:e4:41:3d:fa:30:a0:b8:38:bf:5e:d2:48:
ce:41:12:c5:5a:f4:66:d2:fe:57:5d:74:ea:09:9d:
b9:3d:7a:c6:07:fa:4a:d5:6d:41:d9:05:b6:61:e9:
56:e4:3b:67:7f:b8:26:bd:cf:86:a6:7a:e1:cc:19:
33:ae:74:a0:5c:ff:ab:d3:b6:32:03:4f:bc:6a:85:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:F5:AA:22:5A:4E:C0:15:BC:BB:35:A7:A9:D8:59:08:3E:BE:D7
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a9:12:a5:a3:26:e2:87:24:c4:42:0f:6a:52:37:b8:1e:ae:
c7:15:8f:1a:68:6b:63:2d:67:04:f6:38:50:65:c8:be:09:6d:
ff:4f:f6:c7:29:08:5e:82:07:6c:d1:18:db:47:76:06:30:c8:
d2:33:48:33:73:35:2e:c0:a9:e9:43:71:19:ed:3f:8e:a3:a1:
c3:4b:b5:75:0b:54:bb:ab:60:9b:2f:ff:4b:f6:ac:98:0a:b2:
ee:e8:a9:aa:d7:b7:63:89:91:e5:6f:df:e7:40:43:4c:e3:a1:
c1:65:e4:1d:fa:69:4c:af:05:10:2c:b4:40:84:5c:68:29:5c:
9d:1f:f9:38:5f:a4:82:ff:8a:ef:bb:bf:94:08:c8:ea:9e:0e:
8b:d9:11:ae:06:f8:7b:f2:75:dc:d4:13:26:ae:88:5d:95:ef:
88:08:f8:6c:0a:4e:cd:f2:36:1f:0b:5f:56:b8:9b:07:88:cd:
a5:c0:ea:aa:52:4a:27:29:14:81:14:0f:d3:36:50:a2:70:49:
1e:28:7e:77:2b:13:a8:4f:a4:3f:0e:13:8e:67:5e:84:b2:ad:
2b:30:2d:36:96:1d:b9:71:49:0b:f4:43:11:6e:fe:00:05:3c:
d7:78:75:84:ee:29:ad:f3:1a:85:e7:7e:2e:40:e7:5f:8e:dd:
f6:a1:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:25:22 2025 by rpki-client