Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: bda7Xf/n0KVfRQmlRV66JXzodxI8NjHmY/x2UbHkOog=
Subject key identifier: 88:7B:25:E7:1E:1C:79:A6:98:92:25:D1:D0:6B:B8:26:56:56:97:7D
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 0197CA5E1544F65C9E8564F94C3D20B8C4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 2D
Signing time: Wed 02 Jul 2025 09:00:52 +0000
Manifest this update: Wed 02 Jul 2025 09:00:52 +0000
Manifest next update: Thu 03 Jul 2025 09:00:52 +0000
Files and hashes: 1: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (hash: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: nZFYebZx1yHV0ouuyx4HItkGYci3KZGrcwkTX/EZzg4=)
3: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (hash: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:15:44:f6:5c:9e:85:64:f9:4c:3d:20:b8:c4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Jul 2 09:00:52 2025 GMT
Not After : Jul 3 09:00:52 2025 GMT
Subject: CN=887b25e71e1c79a6989225d1d06bb8265656977d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:c6:60:da:56:62:25:c7:42:45:92:cc:ed:
68:47:5c:86:6f:b9:26:a7:ea:9c:df:2d:5a:e2:2f:
30:71:9d:f3:79:cf:33:ee:fc:b9:a8:d4:ba:cf:3b:
c5:46:d6:b8:72:26:62:03:3f:46:63:17:bc:0d:71:
28:e1:c0:c1:e2:cc:09:0a:c3:f8:57:09:52:8d:7e:
45:8e:04:72:e5:46:7f:a7:60:cc:7b:ca:11:a0:88:
1a:ff:d4:23:5b:07:1a:e5:eb:00:33:2b:f5:87:b4:
7e:c4:20:2a:ed:ff:4c:55:02:e1:c1:ff:a6:1e:bf:
5c:91:1f:56:4e:a8:66:af:7d:14:06:ba:41:42:30:
7b:e6:cb:9c:a8:71:82:d0:b5:d6:87:ca:04:8c:c3:
00:87:c9:f2:7e:8a:9b:0f:f2:80:b3:f7:ef:58:5c:
26:92:95:bd:aa:9b:23:4f:d8:5c:d6:6b:3e:50:91:
51:06:4c:a0:e2:53:06:cc:6a:d8:6a:dc:0a:11:c9:
59:cc:ef:62:31:e0:94:97:33:4e:6e:a4:f2:4f:ee:
93:63:ff:25:ac:dd:24:99:62:01:48:b7:43:64:c5:
f2:b1:ed:78:15:37:90:8d:46:e1:d3:4c:b9:44:44:
83:f4:89:f6:3a:c0:d7:16:d8:8e:03:93:95:8f:18:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:25:E7:1E:1C:79:A6:98:92:25:D1:D0:6B:B8:26:56:56:97:7D
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:50:0e:08:84:81:a0:49:84:b6:01:7d:c1:fc:ab:5f:9c:a6:
e3:4c:14:88:00:0d:bd:1a:98:2d:44:e5:34:3f:89:92:0e:bb:
ac:1e:f4:93:c8:2b:63:29:f8:30:66:ae:5a:9e:21:39:22:28:
a3:b2:7d:17:53:cf:fd:de:3e:5a:da:25:0f:da:f0:b2:e3:97:
4a:e7:b8:20:dd:2c:c4:31:65:93:0d:b4:13:f7:ae:e0:ff:f2:
f8:e4:63:26:51:f7:96:54:17:ed:86:b6:d4:54:87:04:4c:0b:
98:93:05:46:77:71:3a:e4:a0:cc:e3:40:3c:61:71:1f:ec:57:
b4:04:a4:1b:3e:67:71:b8:ba:39:da:fe:f9:5b:c3:11:67:00:
39:a8:37:5a:65:94:3d:28:8f:11:52:a1:7f:1a:76:28:27:40:
ec:cd:7e:19:b2:c4:85:d4:c0:fd:b5:33:4a:a6:d1:d6:83:85:
d7:99:c6:1c:b6:b8:bd:c3:fb:51:0b:6b:a4:e1:59:43:6b:90:
87:3e:98:81:d9:0f:fb:73:e5:88:34:0e:82:85:3a:cf:9a:07:
a6:a1:47:6f:2b:8e:a0:f3:5c:91:ae:e9:ca:8b:84:ab:5f:d9:
90:ae:43:3a:cd:32:b8:48:7e:69:cd:58:61:61:ca:e2:aa:45:
c5:3f:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:41:08 2025 by rpki-client