Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: KEilY72tymukLgWU1wI5P7Vp1vmZoSX3pue4acBwwZs=
Subject key identifier: 90:30:5E:A5:43:4A:BD:1E:A0:10:EA:96:58:FB:46:09:E2:E4:19:60
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 019923A06840B2A3D41FD724A9A1C9929E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 0E4B
Signing time: Sun 07 Sep 2025 10:02:18 +0000
Manifest this update: Sun 07 Sep 2025 10:02:18 +0000
Manifest next update: Mon 08 Sep 2025 10:02:18 +0000
Files and hashes: 1: 6He2HCHOgYmFWCnJx-CHnw1DNw4.roa (hash: R/op20lcuNNKjtAV2ZxOf6+gcTn27jdjTjhCIstJEzU=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: oePaFRg+NXA3rUPk3wqurave/S/vPMSMc17/muvfK2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:68:40:b2:a3:d4:1f:d7:24:a9:a1:c9:92:9e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Sep 7 10:02:18 2025 GMT
Not After : Sep 8 10:02:18 2025 GMT
Subject: CN=90305ea5434abd1ea010ea9658fb4609e2e41960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:a7:a6:3a:c0:88:84:b4:44:e7:6d:07:dc:
05:fa:a3:29:aa:53:d7:d4:1c:17:8f:8b:d5:bc:39:
39:dd:6d:a9:d8:50:8c:cf:9c:63:1b:6b:68:25:e1:
8e:84:79:4b:c6:49:df:18:cb:db:6d:42:92:73:73:
6f:b4:c4:18:1b:e1:2d:d7:76:e6:68:29:6a:26:f2:
c3:bd:1d:6c:50:f6:da:1e:5d:e1:0e:ef:80:b2:54:
38:c1:67:f1:4f:56:4b:62:9d:af:eb:58:5a:bd:13:
08:5c:b7:58:10:59:9b:75:95:4c:a7:f0:0f:59:59:
0a:3b:6a:ad:d8:f2:7b:38:1f:00:d4:33:a4:27:d2:
2a:3d:e4:5d:c6:67:cd:09:c0:93:32:c6:76:5d:6c:
9e:58:ef:72:a4:55:a7:7f:7c:a4:0b:01:f8:bb:17:
72:91:02:28:6d:82:e6:39:ed:07:10:2f:d3:63:4a:
06:fb:e6:e1:14:44:09:f2:15:96:55:7a:0c:aa:51:
e8:8f:82:2b:0b:ca:d3:41:68:03:1a:8a:8c:07:6e:
8a:0b:9e:bc:44:ba:6d:f7:01:41:3c:e7:c1:e6:41:
02:7f:b7:82:2c:68:b3:71:27:0b:5d:4c:00:a6:0e:
6e:17:d0:fc:e0:37:eb:6f:c1:fb:57:4a:af:0b:11:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:5E:A5:43:4A:BD:1E:A0:10:EA:96:58:FB:46:09:E2:E4:19:60
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:40:09:f8:f6:b6:32:90:72:7c:0c:8e:f3:69:78:32:da:90:
b0:f2:54:fa:b5:df:2c:68:f6:60:d2:bf:af:c3:dd:a0:ff:51:
ab:e3:ae:c1:36:24:5c:36:5f:1a:54:51:82:2e:57:7e:4e:7b:
1c:89:39:30:e8:c0:74:39:e5:6b:23:52:a2:96:34:a3:6e:d1:
bf:85:a0:d0:4e:3d:fc:d7:d8:5b:54:6f:85:c2:97:50:fd:a8:
ae:60:af:11:04:c8:fb:59:0b:6b:62:95:c0:0b:29:3c:1a:83:
0f:18:d5:c9:a7:15:a0:a5:30:90:db:f7:15:14:09:52:10:1b:
cf:19:32:c2:0a:a8:ed:20:8e:d9:0d:41:1c:cc:8a:2e:d1:ce:
3b:a8:a7:c9:2e:5d:e0:3c:1d:a5:26:5e:0f:01:78:2a:cd:a5:
91:4d:5d:4c:bd:1a:5c:ea:aa:93:85:cd:53:00:74:68:d8:51:
b0:5f:bc:74:fa:cd:a8:73:8a:75:ce:35:31:14:76:86:cd:e4:
75:c7:51:36:e6:0e:7d:72:2a:77:43:a6:dd:79:06:52:4f:ff:
50:34:52:94:f8:1c:c7:40:07:c5:29:df:b5:9d:8e:31:2a:9b:
50:9f:c5:8a:58:1a:73:c5:62:e3:2d:d5:f5:8b:fa:02:0e:74:
a4:97:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:33 2025 by rpki-client