Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: hYoPQWE4c3sCw7nuBVDNmKp0mxOTg/IWgMrrUvBUCJI=
Subject key identifier: FA:AC:70:F0:73:5A:1F:8B:81:8A:A3:81:39:56:DD:6B:17:F5:46:2D
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 01996210693F2520A99E830A82F26E2B7F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 1698
Signing time: Fri 19 Sep 2025 13:01:06 +0000
Manifest this update: Fri 19 Sep 2025 13:01:06 +0000
Manifest next update: Sat 20 Sep 2025 13:01:06 +0000
Files and hashes: 1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: d8pOgVI/Rzvr2x5kksF3U1nfXxsILA+X2fC5yXPBmb8=)
3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:10:69:3f:25:20:a9:9e:83:0a:82:f2:6e:2b:7f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Sep 19 13:01:06 2025 GMT
Not After : Sep 20 13:01:06 2025 GMT
Subject: CN=faac70f0735a1f8b818aa3813956dd6b17f5462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:4e:4c:85:4e:75:15:f0:92:64:65:87:1c:
4f:00:1e:0c:36:a4:da:c9:6f:19:c1:f8:fa:f3:09:
08:ef:45:5b:53:f3:b7:5b:40:02:d2:43:4f:b0:ce:
78:03:8c:1b:f5:e6:00:5c:9c:d9:e8:89:65:d9:eb:
ef:bd:87:8c:f7:5d:53:b4:98:2d:b1:66:aa:ee:f9:
56:87:0c:7b:1d:6d:f2:db:a4:56:55:8f:fd:9b:97:
51:0a:25:4f:f7:80:b8:77:0b:83:b7:4c:66:f2:73:
cb:c4:30:bd:97:6c:76:0d:dd:33:23:f2:37:ec:96:
83:7c:ad:f0:36:fd:b9:3f:f5:88:32:c4:a7:1b:ce:
d8:6d:9a:ff:19:7d:1d:4c:ad:64:47:24:e5:84:8b:
23:ff:7a:41:a3:d8:92:a5:3e:d5:74:78:d0:c9:dc:
f4:08:5a:8a:5f:c1:2f:5b:1b:95:02:ac:d9:2d:98:
d2:7c:3c:ef:09:b2:74:f6:fa:53:72:6e:67:fe:33:
e9:a5:89:3c:3e:74:09:dc:2d:90:bd:56:3a:da:31:
af:8a:8a:8f:86:37:8c:26:a0:f8:83:4c:b8:71:e3:
fe:78:20:74:1f:18:f0:44:bd:1c:ff:ab:3c:5d:65:
c2:59:17:6d:c7:62:fd:01:a7:b4:9c:28:9c:8a:03:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:70:F0:73:5A:1F:8B:81:8A:A3:81:39:56:DD:6B:17:F5:46:2D
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4c:a8:fb:6c:7e:a0:86:27:34:2a:8f:64:5c:6c:b0:71:5a:
e0:57:f7:1b:1d:ca:ff:a1:89:75:6c:08:4a:06:6c:5b:ba:4b:
cd:35:0e:67:37:a9:81:31:67:ed:90:04:e6:e4:1f:5f:7a:77:
14:9e:65:92:b7:4c:12:8c:cd:c6:a3:0a:58:79:0d:f9:18:85:
1e:83:7f:5c:40:77:6a:6e:61:09:bb:51:05:ea:b9:68:8d:71:
6f:40:a7:58:de:52:bb:85:69:e1:77:30:36:81:c7:cb:14:54:
4b:eb:82:ed:5b:7d:0e:0b:01:8a:7d:96:5f:4b:70:3c:41:6d:
fb:60:88:63:61:c1:ad:48:4e:ae:c7:77:1b:fe:15:a9:5d:ef:
45:c1:3f:c0:b7:da:83:7f:9d:95:28:33:44:c3:6f:73:d3:bb:
e1:c3:56:c5:ea:f6:f2:9b:12:8c:1f:54:ba:71:89:92:fe:59:
7a:b8:2c:b9:85:a2:02:9c:e9:f8:f1:5e:bc:fe:86:f4:2d:26:
1a:76:b3:4e:0f:97:f3:b2:52:5c:2e:3f:7f:40:c9:e1:dc:9a:
be:25:e2:72:bf:a6:b5:01:ec:df:13:c3:12:98:23:5e:fe:63:
56:65:e7:84:0e:ee:20:f2:83:f1:d6:71:96:4c:57:1d:12:f1:
12:ac:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:01:40 2025 by rpki-client