Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: Nj0rlsMez5Sgb+HvfZJ4XkYiN6VqXUuMi/HUaXXc0xo=
Subject key identifier: 2C:AE:16:A2:AE:11:88:47:F4:89:74:10:FF:E9:2C:95:84:2A:14:99
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 0198FD6DB46C81BB11D9D20FD1E94215DD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: CC
Signing time: Sun 31 Aug 2025 00:01:21 +0000
Manifest this update: Sun 31 Aug 2025 00:01:21 +0000
Manifest next update: Mon 01 Sep 2025 00:01:21 +0000
Files and hashes: 1: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (hash: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: fcFYwkACh/OC4dB9LT3i917Gj21xxPaMpp5oQn1RVzA=)
3: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (hash: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 Aug 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fd:6d:b4:6c:81:bb:11:d9:d2:0f:d1:e9:42:15:dd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Aug 31 00:01:21 2025 GMT
Not After : Sep 1 00:01:21 2025 GMT
Subject: CN=2cae16a2ae118847f4897410ffe92c95842a1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:f2:9e:57:98:dd:33:67:4a:1f:da:c0:f0:
08:5f:b3:69:f2:6d:7f:15:28:c3:a8:69:20:a6:80:
0a:8a:f9:09:3e:ad:b3:49:e5:d4:9a:bd:ce:e0:7b:
20:21:b2:0f:b3:bd:35:9e:0f:84:5a:07:e4:34:18:
e8:cc:60:6a:eb:8f:65:c2:25:c7:79:4b:70:28:f5:
2f:85:c9:1f:fd:27:13:1d:0c:6d:4d:1a:b4:f3:f8:
25:28:d3:0f:d2:7e:68:4c:2d:4d:36:05:10:b0:bd:
55:45:78:59:0c:12:49:12:49:eb:f2:61:52:69:c2:
3a:a7:99:ca:90:5b:5d:b4:44:7f:b5:69:f9:fd:17:
b8:60:fb:48:0c:37:26:6b:49:2b:aa:47:53:62:7f:
39:a3:83:98:ea:79:c8:e5:fd:d1:74:87:15:d2:11:
5a:d8:31:18:80:cc:c0:16:60:0b:9f:de:04:e9:42:
5d:bc:3b:01:e8:f2:ac:98:fd:b6:25:49:2f:63:57:
dc:d7:ca:37:bf:e8:a6:97:72:d7:15:b2:65:53:35:
ee:6d:af:27:3c:34:44:51:f6:f2:29:d1:64:7f:85:
21:78:a8:45:50:3b:66:2b:c8:29:4d:5f:da:14:55:
33:2f:1b:2e:8b:4e:1c:d0:d5:d5:c6:84:6f:d1:27:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AE:16:A2:AE:11:88:47:F4:89:74:10:FF:E9:2C:95:84:2A:14:99
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:61:ae:31:c9:50:d7:59:e7:a4:0c:48:d1:3c:f6:c6:75:8b:
8d:61:30:6a:8c:6d:93:57:8e:f7:ae:1a:2e:0d:f3:dd:17:18:
f6:cb:a5:a9:cf:65:55:d0:f2:f6:29:56:bb:a8:14:0e:2c:fa:
fa:cf:00:87:12:bd:78:6b:4d:67:6a:a2:b4:e9:1d:9d:43:ba:
bf:67:6c:5c:b6:b3:90:83:9d:f6:71:be:85:10:ee:b5:77:b3:
e3:6c:0a:3e:87:eb:17:62:a3:a8:75:65:ce:21:75:3c:bf:dc:
ce:44:c8:a3:8e:10:72:98:c8:01:ad:d1:ac:ef:64:78:b0:0c:
41:04:52:9b:b4:6e:18:39:ce:7c:2f:e2:a3:60:d2:ec:80:cf:
24:e8:22:c1:3b:14:16:fa:99:2f:48:da:48:a4:55:f1:f9:44:
dd:25:f1:bb:74:64:74:c7:98:fc:c1:27:4f:31:a3:4d:3b:ac:
d4:26:1c:ee:3b:1b:11:3f:81:b0:71:0c:f3:f8:26:ef:24:39:
74:54:ab:2a:8a:b4:52:10:a8:16:9e:60:39:5f:0c:51:fd:1c:
ef:f8:f3:b0:4f:c7:d4:24:c4:78:b3:73:ad:ca:17:2c:3c:7c:
32:a9:54:06:33:a1:da:9e:1a:1b:1b:67:3b:55:3a:78:57:3d:
29:09:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 01:27:51 2025 by rpki-client