
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
File: YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json)
Hash identifier: 78NugaGWySvqQ5ww3FLnjg/B6tu5deXmnFEcBVxbCYA=
Subject key identifier: 3F:CC:D6:52:BE:E8:B1:FE:CD:D6:0F:32:1D:B8:2B:2B:B2:D9:59:B8
Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Certificate issuer: /CN=60026525fd44a4fc75b2244f80d022634f5f7635
Certificate serial: 019922C369A59B59F04A1F8E51CB28827D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
Manifest number: 69
Signing time: Sun 07 Sep 2025 06:00:55 +0000
Manifest this update: Sun 07 Sep 2025 06:00:55 +0000
Manifest next update: Mon 08 Sep 2025 06:00:55 +0000
Files and hashes: 1: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: mB5wmAbF/8OCTfMLz+nFV01iDERvOVRK859rRRMcOdk=)
2: g9nWnsJ4s0Q4AdnedyFGxQkezGU.roa (hash: BaThYpCk19U9MWT3c8G8+GXTTA8NVbJPkga6Sb96+1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:69:a5:9b:59:f0:4a:1f:8e:51:cb:28:82:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635
Validity
Not Before: Sep 7 06:00:55 2025 GMT
Not After : Sep 8 06:00:55 2025 GMT
Subject: CN=3fccd652bee8b1fecdd60f321db82b2bb2d959b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:b6:ff:99:29:a9:f1:8f:1d:fe:79:39:22:
ba:39:bd:93:0f:c0:d0:4d:cc:59:cb:f2:15:c8:91:
55:d0:78:f6:6c:af:30:96:ba:a9:eb:bd:a3:5a:f1:
19:c6:0f:df:14:e3:4e:e0:86:e2:ae:69:39:5f:36:
33:18:da:43:e1:b0:66:51:4b:e1:1d:20:ca:84:61:
7e:99:54:80:fa:90:2d:87:bc:cc:67:64:10:c8:4d:
10:b2:b8:df:a4:83:39:65:d7:a7:c3:03:6d:b6:f3:
4d:b2:e7:c2:0a:78:9a:e8:d9:97:53:15:57:76:f0:
4c:ff:82:03:26:63:9f:b1:65:e7:c2:99:e9:5b:c2:
5b:01:7a:cf:16:4e:10:46:42:4a:68:7c:d9:7a:56:
d3:16:6c:3b:af:39:ba:9f:b9:8a:9d:90:c5:9a:6f:
8d:98:5b:f5:e8:98:cf:06:0e:ac:c7:4d:40:50:ed:
28:d5:ec:aa:92:5a:17:94:43:25:e1:93:e8:e6:39:
1b:43:69:d2:3b:1f:7a:32:c1:24:e9:22:c2:2b:48:
04:4a:fd:a8:e2:c7:17:4b:b0:1e:95:48:ed:4c:81:
fa:d9:66:0d:59:28:28:2a:3d:3e:4d:fa:6b:ec:3f:
ac:44:98:fa:88:8b:b4:58:71:f2:d4:0b:e2:59:44:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CC:D6:52:BE:E8:B1:FE:CD:D6:0F:32:1D:B8:2B:2B:B2:D9:59:B8
X509v3 Authority Key Identifier:
keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1b:87:6b:e3:23:a5:9d:80:39:44:41:61:b2:e4:db:51:4a:
79:0c:72:12:8b:92:a4:6e:cf:0c:d8:a1:d0:c9:2a:75:dd:8a:
eb:cb:15:69:fd:59:12:c7:c7:75:db:1c:5f:f0:1e:44:be:99:
01:44:b3:a7:8f:d8:7a:be:4a:45:30:bf:e6:1d:66:f4:d8:73:
2d:3c:7d:f5:d7:c2:92:10:1a:a6:a6:a9:0f:df:0b:43:7c:53:
81:e9:2e:78:1f:78:14:92:2e:34:97:38:2b:1a:34:f6:03:f9:
33:36:c1:29:3b:d9:80:7e:2a:7d:66:1b:a4:60:01:fc:72:cb:
2b:1f:eb:36:8a:9e:6e:bf:a5:af:94:c6:70:6f:1f:20:bd:b7:
fe:a0:5a:56:2f:96:d4:ac:30:fc:a9:22:e4:ec:ac:0e:d5:66:
60:a5:78:9f:b5:82:83:bc:c6:d0:35:0c:ab:3d:52:05:e0:9e:
a9:92:96:1d:03:13:03:d7:70:27:92:ec:b4:5b:32:6e:55:ff:
3e:f2:55:4e:4d:3f:85:10:0f:a6:74:05:15:a1:5c:b0:42:20:
26:51:49:aa:c3:14:6f:6c:95:17:1a:6e:60:2e:21:3b:0d:69:
f2:9a:c6:c1:9a:db:03:22:be:7a:db:e0:f4:95:41:b5:ba:a4:
c6:7e:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:51 2025 by rpki-client