Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json)
Hash identifier: 8lkyPI6Dp4B1Q833i1nM3tjH2TNYtiAacw7LYZvcMfs=
Subject key identifier: D1:4D:1B:E6:81:8B:D6:36:69:64:E5:5B:36:7A:B5:29:76:EB:7E:6E
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 019923311AE77815AC52131E5EE8920493E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
Manifest number: 0350
Signing time: Sun 07 Sep 2025 08:00:44 +0000
Manifest this update: Sun 07 Sep 2025 08:00:44 +0000
Manifest next update: Mon 08 Sep 2025 08:00:44 +0000
Files and hashes: 1: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (hash: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=)
2: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: b2ST+vqk8If0EFvis85z7f77XuAdOcpKXgG9YMFl9Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:1a:e7:78:15:ac:52:13:1e:5e:e8:92:04:93:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Sep 7 08:00:44 2025 GMT
Not After : Sep 8 08:00:44 2025 GMT
Subject: CN=d14d1be6818bd6366964e55b367ab52976eb7e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:e8:23:e3:ff:4e:a7:af:64:22:09:57:fa:
04:76:49:6e:71:f8:4a:08:d0:19:81:93:05:a0:c9:
68:9f:d1:c9:df:41:ce:1e:78:ed:e8:1e:3e:f3:45:
b6:c7:f8:84:fe:b0:da:0e:96:36:bb:de:5e:be:4d:
2b:45:b6:08:c3:ec:5e:0a:0c:ea:95:7d:bd:2f:7a:
80:10:38:b0:af:96:31:4f:7f:cb:15:a7:43:f4:0d:
de:be:aa:c1:fd:1d:04:12:b3:fd:b5:ab:83:27:25:
99:5c:77:75:71:87:6c:eb:3b:ab:87:ac:41:f7:72:
c9:0e:d1:fe:7c:e6:fd:4d:7b:7b:0c:c9:9a:02:2d:
45:e7:d3:48:48:89:2b:85:a0:2b:be:7a:0e:04:81:
2b:84:b8:ed:5b:1c:87:7d:78:33:34:5c:c5:71:04:
a0:0a:08:38:02:09:1c:33:b5:18:cd:dd:a7:ee:03:
f4:0f:32:0f:8e:79:93:a9:ac:00:48:fa:38:81:f0:
bb:ac:b1:89:8b:b3:a8:3c:c3:47:f9:3a:5a:31:6e:
41:d4:d9:67:0f:c1:1f:11:61:28:d9:a3:1b:19:e8:
0d:b2:14:9f:44:da:54:15:c5:aa:18:d0:28:74:6f:
f6:14:5d:a0:6f:7b:32:07:0f:4d:22:27:04:ea:5f:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4D:1B:E6:81:8B:D6:36:69:64:E5:5B:36:7A:B5:29:76:EB:7E:6E
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:a4:f7:48:86:24:26:a9:2c:c0:08:65:49:01:5c:05:60:
87:17:9c:1c:2b:d1:04:df:07:42:b2:67:fc:b1:aa:65:6a:65:
16:06:08:b8:4f:6a:82:c7:6c:22:78:2a:05:3e:6c:c8:67:04:
91:48:a4:2c:45:59:89:1e:00:c4:0a:81:48:d4:c7:5e:3d:fc:
06:83:13:7c:36:ff:51:9a:f5:8e:c0:67:44:ac:07:0f:85:b1:
74:1f:a6:b2:d0:f0:0c:76:5b:7c:6a:1b:12:7e:d6:3a:de:0e:
17:e3:79:4c:6c:f6:bf:70:06:7d:86:d7:5d:76:1a:7d:2a:c1:
97:38:c4:f2:b5:94:d1:78:cf:83:b5:94:36:b9:cf:67:f0:1f:
b9:d1:31:d9:8f:0e:de:8f:ff:e8:54:1c:18:a8:b0:60:5c:f4:
b0:72:fa:4c:b5:05:39:88:ba:2c:33:16:b8:6e:f4:db:fc:1f:
24:88:4e:c2:e5:78:25:63:39:dc:4a:72:f6:28:02:15:4e:c3:
90:18:20:f1:a2:18:8f:36:08:83:96:77:cb:82:0c:e9:07:95:
02:3f:41:86:8a:6a:5b:e6:a4:67:bc:22:30:83:07:a6:e7:5a:
c2:4a:d2:a8:46:39:63:65:73:b2:f8:69:8f:e6:26:cb:ea:5f:
b8:c1:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:40 2025 by rpki-client