Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: f8sXTzgQR88BgFiMFvnQp/ci7VDDTnsniIbiozp8HOw=
Subject key identifier: 02:8E:8F:35:16:67:91:92:39:05:17:E8:44:20:B3:10:C9:15:82:56
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019921B123845D7CF9FF23C634A73EB419EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:01:21 +0000
Manifest this update: Sun 07 Sep 2025 01:01:21 +0000
Manifest next update: Mon 08 Sep 2025 01:01:21 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: s83XokMODimOmCbRFfXe2uogvPYrr0I+HU/jh+nkZPA=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:23:84:5d:7c:f9:ff:23:c6:34:a7:3e:b4:19:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Sep 7 01:01:21 2025 GMT
Not After : Sep 8 01:01:21 2025 GMT
Subject: CN=028e8f3516679192390517e84420b310c9158256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:00:56:18:5c:c2:89:91:93:63:aa:3a:5e:
2d:42:da:ec:ff:4d:52:44:8a:c8:47:0c:09:4f:8d:
13:6f:2c:e0:a5:a4:c8:e1:dc:d8:ef:7f:f8:b1:b7:
f5:cf:79:62:e0:77:e1:4a:13:ce:78:8c:77:92:ea:
ba:1f:1e:41:8a:3c:7d:22:7b:d9:82:9b:b5:81:b9:
82:67:0e:f2:0d:39:93:de:95:9e:ff:fe:70:03:3a:
4e:17:30:9d:9d:e6:72:af:82:db:52:85:7b:6b:c6:
ae:fe:aa:a1:aa:3f:4a:01:ba:fc:35:1c:1b:42:6d:
76:36:a4:6c:81:f3:ff:8f:7e:72:b8:42:4f:cf:43:
ec:c3:c9:f3:23:7b:bf:61:63:4a:64:eb:f4:52:5e:
94:a1:26:84:5b:9d:9e:f4:10:b2:a9:0b:ed:64:f3:
2d:07:d8:f9:a1:07:8d:2e:12:bc:88:60:ab:8b:e4:
dc:57:04:1a:a4:2d:5a:9a:38:e0:c7:d4:92:cf:94:
e2:a5:73:3f:90:b2:20:2f:b1:f2:ff:c3:e3:68:b9:
db:58:97:43:0d:89:8d:47:d7:00:8e:c2:2a:f3:0e:
82:7a:18:a9:ed:90:b1:a0:19:0a:3a:4c:bb:77:4f:
10:fd:84:cf:45:74:4c:57:57:36:d0:08:82:8b:79:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:8F:35:16:67:91:92:39:05:17:E8:44:20:B3:10:C9:15:82:56
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:10:e5:18:31:a6:8e:17:27:a0:48:da:13:5a:ad:d6:d9:3b:
b1:85:00:2c:ca:ad:e1:af:ae:19:81:16:3c:19:bf:f6:72:29:
5a:0e:2d:62:c4:ca:86:cb:3a:4e:0d:96:30:79:67:83:c5:6b:
c8:b7:d7:01:05:3c:3b:ce:6e:3f:f5:0a:e7:a3:7c:15:ce:2d:
29:b2:b8:c0:c6:f0:a8:c3:12:d7:dc:6f:23:48:5f:34:c9:dc:
24:55:b3:06:79:63:e4:bc:f6:4e:66:09:44:13:98:fd:9c:ec:
5f:9d:9a:d2:5c:b1:75:34:69:81:e6:3c:c5:09:f7:ca:0f:c0:
fe:50:52:2e:c8:e2:85:d2:b2:f9:1b:e5:a6:1a:9b:40:6a:67:
e1:6d:19:d7:23:6e:0a:d0:f0:d6:7f:8a:9c:30:1a:93:61:e2:
7b:ad:d4:1d:db:df:8b:0a:0a:52:e5:db:de:6b:65:35:2a:25:
95:05:48:3f:50:60:7c:89:d4:43:a8:54:31:a0:fb:04:cd:bd:
b2:16:32:a7:a0:83:31:7b:f1:18:b1:eb:07:7c:f9:4b:20:8a:
50:7e:c8:a2:da:18:aa:4c:1b:f0:58:53:1c:33:28:31:86:29:
81:7e:d8:56:c6:87:7c:10:d4:86:8e:c0:d0:a8:1a:dd:10:97:
2b:b0:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:06 2025 by rpki-client