Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: YIqH3wntiTI7bW2QQfYAr+dnxir3nBiZ13Ec3W2N+H0=
Subject key identifier: 6F:99:D7:61:DF:E2:C3:60:C5:C1:F0:12:5F:E9:BD:5D:46:7A:47:4C
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 019922FA30932597D6CA467609266F699B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: 0BbFW_BAMtuxhOMr7yakRiiM3nk.roa (hash: cNxaXLNhQqWeIbn1R3i1vPo3toGI8Ah5QnfkdRtrGsY=)
2: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: vQLaM2SZ1LbpjSahW04HHzfpEEIJJuvbZYQTFRk+xZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:30:93:25:97:d6:ca:46:76:09:26:6f:69:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=6f99d761dfe2c360c5c1f0125fe9bd5d467a474c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:ce:23:c0:6d:23:35:06:29:a2:b4:10:20:
02:4c:87:87:a0:a4:19:39:2d:e9:2b:35:d1:1d:a0:
02:93:bf:88:fb:a7:a1:8c:55:fc:7d:77:f5:5a:40:
1c:a5:a0:b0:40:5e:d5:07:5c:39:37:61:08:6e:3e:
15:bc:74:51:f3:23:98:69:d5:96:ce:13:7e:77:26:
90:e8:01:0a:c9:be:3c:47:5c:56:3d:a8:b0:93:2c:
33:31:b3:af:da:1c:d6:ea:4f:9d:c4:7e:5d:fa:b1:
3c:a7:cb:14:f3:48:6b:94:2f:96:4b:f6:a5:22:2f:
eb:f0:b5:36:89:c4:27:d7:3f:a3:9a:66:d8:7e:82:
ad:51:91:ce:4e:93:7c:53:07:8a:37:f1:4f:75:a3:
de:86:0a:35:6e:c2:9b:80:f0:0c:9f:85:3b:1b:03:
e9:c9:66:5e:82:69:29:03:79:3c:19:88:e0:12:48:
86:e9:d7:da:68:19:51:3f:9b:6f:06:72:db:f0:92:
d8:03:83:d8:b1:3f:13:79:9a:6c:4e:e9:3c:8b:e4:
59:b1:0a:a5:af:c0:c7:e3:e4:79:9d:6a:2d:00:40:
93:eb:99:76:17:2b:90:66:15:ad:be:27:e4:ab:6d:
38:57:64:41:32:ae:1f:56:60:ca:69:64:33:b3:06:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:D7:61:DF:E2:C3:60:C5:C1:F0:12:5F:E9:BD:5D:46:7A:47:4C
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:74:3c:1d:60:03:59:a1:72:09:a5:13:f2:9b:dc:cd:19:ab:
60:6b:5a:5e:ba:1f:8e:48:ef:84:9d:aa:06:74:14:16:7f:94:
9d:75:59:43:0c:03:30:37:02:79:7b:16:50:a0:71:a7:92:94:
58:25:e7:a2:2c:18:f8:3e:81:7d:70:59:a3:bc:7b:32:bf:c9:
89:21:f4:b0:3b:21:53:3f:c9:5f:3c:6e:00:23:c4:ed:10:86:
f0:55:5c:2c:27:91:c4:cd:9b:ed:70:ca:7b:46:59:54:bf:85:
22:3a:e9:84:43:f9:5e:c8:21:ef:cd:1d:c7:80:91:ab:e4:d8:
cd:82:0f:03:dd:ff:44:94:c5:de:a2:6e:d2:42:a9:82:45:11:
ae:cc:47:f2:a7:b3:ae:13:87:47:ac:24:ab:d1:2b:3d:bb:c8:
92:73:9c:ef:3f:f1:44:39:bf:ec:d8:5d:9a:9a:77:9e:8e:7b:
56:23:a6:cb:7d:64:ad:3d:59:10:11:c7:cd:52:6f:6c:87:5f:
e2:f3:ca:50:c6:e3:39:1e:fd:22:da:27:a8:73:5e:40:15:df:
23:83:60:3c:de:29:b5:46:5a:47:16:90:89:87:db:e6:1d:e5:
42:2b:35:fd:43:41:67:18:8d:aa:ae:be:31:53:55:51:9a:b9:
29:ad:25:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:03 2025 by rpki-client