Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: pPwO7V91pubJMwDqSKVwqICQiWb00FjOXOeGU7zfGDY=
Subject key identifier: CD:B5:23:1C:BB:20:84:4D:F1:AD:21:7A:D3:F5:30:6F:0B:48:65:0D
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 019921B25A963E41466DC9D56C6DDB2AD9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 0A96
Signing time: Sun 07 Sep 2025 01:02:40 +0000
Manifest this update: Sun 07 Sep 2025 01:02:40 +0000
Manifest next update: Mon 08 Sep 2025 01:02:40 +0000
Files and hashes: 1: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
2: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: COSysE7NHW4U0/M7pODnflfpG6lBN5G7SL5TcDNnIv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:5a:96:3e:41:46:6d:c9:d5:6c:6d:db:2a:d9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Sep 7 01:02:40 2025 GMT
Not After : Sep 8 01:02:40 2025 GMT
Subject: CN=cdb5231cbb20844df1ad217ad3f5306f0b48650d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:7e:1d:14:1d:18:40:35:6e:85:10:dc:91:
61:26:dd:ad:c9:91:a8:e5:b0:bb:4c:cb:88:df:d2:
d0:84:88:29:8f:7f:3a:83:e9:d2:e0:58:1a:14:8c:
60:8e:af:f8:08:94:9a:f9:c4:6c:ed:58:87:94:f5:
fb:0a:21:4c:3b:70:3d:e7:b3:8c:8e:81:47:c0:b2:
e5:c4:9c:01:52:64:94:bc:0f:71:1b:c7:d7:d7:a9:
24:0d:b1:8e:49:57:a8:13:f3:2a:56:1b:41:d4:bc:
87:c3:0b:75:e4:a3:e5:66:d9:a3:34:0f:71:a0:da:
42:50:17:19:09:44:af:20:4f:57:a5:2b:08:0a:83:
87:e2:0b:e1:f9:23:bc:d8:a2:c3:8a:25:56:d7:ec:
5b:26:31:10:aa:dd:b4:ce:4b:bd:68:e6:d8:26:46:
a0:30:f5:44:95:bc:7b:1b:f3:e5:29:8d:7d:8b:81:
2f:c0:72:0c:e8:d7:1d:47:f8:e7:32:9a:fc:8d:6e:
6c:b6:b6:2f:ac:e2:33:57:81:60:3e:0c:48:be:82:
41:32:fb:90:70:a4:4b:15:f6:f5:04:8a:67:a9:01:
b6:f1:5b:d7:28:a6:99:23:80:95:88:58:a4:ae:0d:
7b:90:49:75:bf:33:8e:b9:9c:07:6e:1e:81:89:cb:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B5:23:1C:BB:20:84:4D:F1:AD:21:7A:D3:F5:30:6F:0B:48:65:0D
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cb:77:42:77:80:cb:33:4d:54:e5:76:a4:35:b2:f0:72:ea:
7a:f5:4f:98:e4:ff:28:c6:b9:79:0a:59:5f:a5:3a:88:cf:15:
85:74:ba:7b:56:e6:44:1c:bb:f3:0a:29:33:5d:c0:b2:2a:ac:
27:33:28:b9:49:6a:6f:b4:09:e4:23:90:e4:dd:db:18:fa:2c:
f4:41:9f:40:6b:43:38:17:34:ae:54:8f:2e:78:61:61:d9:d7:
93:bc:f2:36:e2:bf:85:40:29:89:95:54:86:bc:6a:18:bb:ba:
e7:d0:f9:d5:0c:49:cd:8d:e0:ea:d4:33:09:e5:be:20:a2:74:
41:6e:6b:ac:dd:6e:3e:14:97:fc:9b:ef:fc:c0:b1:be:b3:7a:
49:a8:e1:4c:56:e4:09:8b:4b:aa:58:d4:6e:81:de:ba:f3:03:
70:ed:5f:85:c9:9c:f3:3c:aa:d8:d2:52:a6:d4:36:05:f9:88:
6c:f3:bb:b4:31:79:4e:f0:b3:e0:bb:a4:d2:6a:3d:5b:b4:cf:
1f:e5:51:9e:36:6e:fa:d9:07:d3:53:1e:73:bc:63:59:90:b8:
29:48:b7:46:ce:73:c9:a5:29:4c:36:2a:66:2a:65:1e:cc:da:
ba:74:cf:46:c7:62:19:ff:27:84:4b:26:a6:25:77:9c:09:c9:
39:6d:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:41 2025 by rpki-client