Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: klGLFgA6Hg0SCNAIpDIIRB71wQlOFM99cu1wMIhtKac=
Subject key identifier: 48:8A:39:21:AB:22:FC:AF:9C:30:1E:44:0D:2C:9A:52:2D:93:38:E4
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 0199221EF2DF4E8A1FDE93C3E44EE27A17E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 025C
Signing time: Sun 07 Sep 2025 03:01:17 +0000
Manifest this update: Sun 07 Sep 2025 03:01:17 +0000
Manifest next update: Mon 08 Sep 2025 03:01:17 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: HvQS8Ne/Y1/DuEak0icLG2RW46UqM838bPsmffuNlXw=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f2:df:4e:8a:1f:de:93:c3:e4:4e:e2:7a:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Sep 7 03:01:17 2025 GMT
Not After : Sep 8 03:01:17 2025 GMT
Subject: CN=488a3921ab22fcaf9c301e440d2c9a522d9338e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:3a:30:70:bc:3d:3a:c7:61:8b:1d:0b:8a:
82:cc:ed:b0:b2:e3:2c:50:81:ed:e7:82:3f:0a:ff:
b9:7b:85:26:8d:01:90:92:3c:22:12:d9:dc:14:0c:
80:09:a8:48:68:a6:43:15:6b:2c:26:c0:d7:5f:56:
32:d0:af:42:31:d6:af:e2:8e:9c:7d:90:dc:d5:63:
85:6a:87:fd:d1:20:4b:4b:08:2b:4a:4b:54:a5:0d:
eb:36:9b:62:8e:0c:66:e4:da:bc:8c:5e:e9:7a:88:
bd:f5:6b:de:0a:0e:20:57:19:bf:16:5b:ea:d6:2b:
00:5e:8c:58:5b:46:3e:ae:08:7e:3c:df:92:15:39:
03:b7:6d:c4:90:d4:57:c5:25:5f:6d:1f:3e:99:4f:
7b:41:e4:74:90:6c:ab:84:07:9f:85:29:8f:19:5b:
0a:dc:57:72:fc:d3:e6:71:30:e5:c3:f2:c0:60:a9:
07:9f:63:31:49:1f:5d:6f:20:c9:eb:03:7c:7d:9c:
70:8b:44:42:02:9e:2a:36:a5:b8:b5:d8:54:16:0b:
54:9b:1d:4b:9a:58:16:43:26:55:8f:5e:73:f4:3e:
e4:24:04:7e:92:4a:07:2e:5e:5e:c2:5d:2d:c1:3f:
36:20:2e:28:cc:fa:64:0a:fb:33:19:15:f2:dd:d4:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:39:21:AB:22:FC:AF:9C:30:1E:44:0D:2C:9A:52:2D:93:38:E4
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:30:76:9d:b5:ae:99:08:40:88:55:72:38:09:6e:0e:f0:70:
b5:7c:f5:d4:98:06:b0:e7:ad:c3:ba:65:71:ea:27:dd:36:8f:
5d:13:ce:8e:e1:b9:9b:2d:99:4d:f0:19:60:8b:e5:4f:d1:83:
7f:13:20:b9:9f:ad:40:e3:20:e9:53:d7:bc:7c:49:fd:29:ab:
23:e8:51:c9:a4:08:42:31:44:29:ad:3d:c4:bf:af:1b:34:60:
1e:4a:00:a7:1d:16:a7:8c:94:37:00:00:e8:65:ce:4b:a6:ed:
ed:57:c0:dd:39:52:ea:7d:bf:73:2b:89:5d:f0:80:19:b0:ca:
f2:4c:aa:46:e1:56:96:35:b8:1b:75:d0:f2:ec:e7:48:12:71:
e9:27:c9:50:8b:1c:73:3e:53:5e:04:1d:c0:fc:61:fa:3c:e4:
de:de:b9:de:ed:68:ee:d1:2b:8f:fb:8e:97:04:13:cb:df:ef:
be:db:58:62:99:d2:52:d5:91:e6:0b:47:73:eb:00:96:af:84:
bd:98:70:5f:e5:a3:1d:38:fd:08:69:0c:d7:48:7f:a9:72:43:
fe:b3:7e:19:f9:5e:50:ff:64:fe:0a:7c:29:8f:8f:28:75:6f:
3a:5a:0a:de:cc:9e:f6:f9:fa:69:a6:5b:7a:2e:f6:2f:ee:49:
90:37:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:28 2025 by rpki-client