Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: zLkg5xLAQHc7sN8OErCc1F81VYYyw7rQ+OzuTz/0alY=
Subject key identifier: 71:E4:7B:85:62:2D:4B:0A:F3:41:7C:26:DB:B2:12:F6:B7:64:D6:71
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 01991E78A054C7EE1E63982C452EEA86DA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 24
Signing time: Sat 06 Sep 2025 10:00:45 +0000
Manifest this update: Sat 06 Sep 2025 10:00:45 +0000
Manifest next update: Sun 07 Sep 2025 10:00:45 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: VBHO8Q6GfMLx1dCULoWQh5B1Gg2ezOznxiZcJVkx1Y0=)
2: ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa (hash: dioBOx3h8ph3ofANtrh34SCoANsWuT4s9fkC5DmIrUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:a0:54:c7:ee:1e:63:98:2c:45:2e:ea:86:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Sep 6 10:00:45 2025 GMT
Not After : Sep 7 10:00:45 2025 GMT
Subject: CN=71e47b85622d4b0af3417c26dbb212f6b764d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:62:9b:f1:26:8d:b1:b9:6d:4c:2f:9c:41:
e1:cf:b4:9d:75:0d:c2:d3:96:13:d4:01:9a:d0:b9:
c4:94:08:4c:4d:ad:48:a0:ab:e7:a8:5f:c8:31:03:
67:07:42:12:38:80:31:c8:b1:1c:0e:dc:06:c4:dc:
57:6f:d8:ab:ca:08:ba:70:76:90:73:14:41:05:b4:
28:41:2d:28:b9:c0:d8:e0:be:b5:e7:00:c9:a9:30:
5f:eb:0b:a3:37:29:d1:27:e6:49:48:5c:b5:bd:66:
79:43:a4:bf:f5:9a:30:bc:c0:4b:8f:48:85:65:51:
4b:6e:07:af:ce:03:e9:1e:41:0d:62:fc:58:13:ff:
46:44:cd:dd:ba:d4:80:22:90:d1:03:3e:f2:4c:1f:
1f:87:14:a5:3d:9d:1c:02:83:c9:0c:9a:35:6b:f2:
c5:ae:05:2f:53:b1:d2:41:e8:ef:35:f1:b1:e3:05:
58:25:cc:00:6c:83:ac:76:63:91:d2:53:5f:fb:43:
e3:e0:cc:bd:20:3c:6b:e1:d7:4f:a0:d4:a1:3f:ea:
fd:42:91:73:a5:0a:24:99:09:67:a5:c3:c3:fa:57:
15:6c:89:ec:84:04:24:00:a7:26:4b:65:fe:7c:79:
fb:cb:cb:32:a6:ad:35:c9:d4:4e:c7:23:7e:16:69:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E4:7B:85:62:2D:4B:0A:F3:41:7C:26:DB:B2:12:F6:B7:64:D6:71
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fe:ff:33:a0:64:f7:6b:f4:35:f2:9a:06:bb:0e:d2:cd:b9:
ed:1e:0b:94:cd:9a:db:eb:5f:0c:74:d0:0b:78:eb:9e:94:04:
af:df:3d:78:cc:c8:9d:13:ba:86:b9:99:a9:81:9e:90:d3:bb:
fb:e8:06:64:a1:a0:db:7b:f6:a4:9b:e1:da:6c:4a:8c:e7:b2:
2a:d7:1f:0b:c4:53:e6:15:23:75:ef:ce:bb:01:e5:d1:dd:c9:
46:d4:49:b3:f4:cb:6e:9b:fe:be:1b:da:99:15:2c:42:f3:f3:
ca:fe:ad:65:86:9c:5b:c7:79:fb:0b:15:d8:0a:d9:22:fb:06:
40:ea:cd:26:ac:63:83:6a:da:70:71:f2:12:e9:9d:72:1e:5c:
c0:a9:9f:d0:58:e0:35:52:02:60:f7:7b:d7:4a:1d:83:2c:65:
a3:18:68:e5:ea:14:21:00:b3:b7:5f:cf:0e:1a:bb:6f:c3:7a:
51:09:99:87:cd:10:af:a6:f6:57:7b:a0:dc:4d:41:43:0f:76:
c5:fd:b3:61:17:6f:12:f1:3f:23:40:e2:3a:3f:d2:25:28:65:
28:9b:83:5c:2f:03:b8:bb:c0:8f:9d:8c:ad:51:26:87:0b:cd:
dc:87:9b:67:d3:b6:75:b2:89:b8:bc:53:3f:57:e2:ed:b9:d6:
27:ab:f9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:47:51 2025 by rpki-client