Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: VC4TgblkanAzk0VtY6pkUhp+tEc9K51suiNrAANUl/Y=
Subject key identifier: FE:D9:56:98:52:96:2A:4C:27:B9:14:25:9A:68:45:98:F9:7D:F9:F6
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 019923A091EAF0375BAB22B0999ACBFA9E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:02:29 +0000
Manifest this update: Sun 07 Sep 2025 10:02:29 +0000
Manifest next update: Mon 08 Sep 2025 10:02:29 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: IYFZQuLO1htIUEEpsXyW495Q+SInpo7Yn2AVWbY+o6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:91:ea:f0:37:5b:ab:22:b0:99:9a:cb:fa:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Sep 7 10:02:29 2025 GMT
Not After : Sep 8 10:02:29 2025 GMT
Subject: CN=fed9569852962a4c27b914259a684598f97df9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:f2:e1:71:10:08:3c:ce:40:fa:cc:84:a3:
b1:63:9d:32:51:5e:4b:34:cc:cb:1e:9f:b8:e1:79:
82:0f:49:01:d4:f1:34:b4:58:b6:93:84:b7:f4:c1:
d5:4b:38:b0:53:be:aa:2b:7a:0b:c8:78:e5:66:68:
54:9e:31:d7:8b:8a:56:28:6d:53:dc:9d:9a:91:68:
2a:06:35:25:28:f8:60:4b:35:9c:21:d3:e4:63:ba:
ae:81:65:3d:54:7a:38:99:dd:82:aa:47:7c:c4:95:
a6:6b:d8:5d:45:13:d2:d6:35:d1:db:c0:cb:61:2f:
03:58:f1:f3:f4:20:d8:be:d8:a1:9a:00:17:b2:da:
29:64:a6:d2:80:00:1a:fa:da:69:20:7b:37:da:72:
94:5a:7d:0e:15:86:98:d3:cf:d6:b1:37:c1:14:f4:
81:d4:ef:a2:b5:69:bd:61:6f:26:1f:5d:8c:7b:34:
8f:84:64:01:ee:bb:70:5a:7c:6e:56:27:2a:2f:43:
61:5f:7d:11:c5:ba:12:ae:5e:b1:a8:1a:3f:09:ff:
b2:8a:e0:75:09:e7:e4:10:11:c2:4e:da:fa:c2:20:
c8:84:8b:db:b7:20:c0:bb:36:af:24:55:51:f5:6b:
d6:f1:ec:ce:05:95:23:1c:70:54:08:0e:30:e0:f0:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D9:56:98:52:96:2A:4C:27:B9:14:25:9A:68:45:98:F9:7D:F9:F6
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d3:2d:76:00:25:27:8d:01:c1:8c:3d:c6:8e:0c:c8:29:ea:
98:af:08:6e:ef:1d:ef:81:44:9a:18:0e:61:44:bc:ca:77:39:
24:b4:ad:f1:00:d0:7d:61:0a:9f:1d:35:13:b2:e0:32:92:ed:
60:37:fa:99:15:6c:d5:fc:d5:42:4c:f3:0f:e1:91:34:71:23:
3e:12:d9:09:f0:31:43:c8:a7:72:83:7f:c0:53:07:14:c2:0e:
5c:d2:67:c6:57:28:db:e5:65:de:3a:ca:38:6b:8e:38:ef:b0:
fd:ab:7d:04:cd:f4:6d:40:5b:f8:a6:46:6e:cc:ce:f4:cc:41:
44:fe:6b:1a:b1:0a:0d:1d:83:02:b2:43:f9:9f:84:a2:a7:e9:
40:93:92:ae:cb:3f:91:b1:7c:52:98:d9:52:43:75:fe:c7:66:
02:d2:90:87:db:21:f3:7d:9a:20:ba:13:d9:ab:9b:89:77:e6:
ed:b1:f7:ce:07:ee:2f:ac:73:ae:c4:ba:86:6d:14:7e:0b:19:
da:27:70:e2:2a:b3:32:49:19:72:17:a8:90:03:e0:b5:8e:0b:
bb:e3:19:c8:4c:ca:05:08:df:ce:fc:c5:c6:57:19:b4:ef:bd:
e3:35:51:3b:8b:5b:94:83:be:7f:08:c2:9c:aa:03:d9:29:df:
6f:14:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:08 2025 by rpki-client