Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: tefDZ47AEPQ4QQ8mH33qSbESoXbac/ZISaG3UID0rTQ=
Subject key identifier: E5:25:D8:83:EE:F7:5E:76:B2:70:A2:0A:E4:7B:2A:73:0D:15:C4:50
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 01994360F46BF092D6782043DF258BEA9205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 04AA
Signing time: Sat 13 Sep 2025 14:00:51 +0000
Manifest this update: Sat 13 Sep 2025 14:00:51 +0000
Manifest next update: Sun 14 Sep 2025 14:00:51 +0000
Files and hashes: 1: 8tq6vUxikXVafkdQNOumeQjFfpc.roa (hash: UpmsMokgr2OHdk8MVVsUZdaiVZYh5g21JKYfdCc4ZA8=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: onH3IDxocmzf+48uOPy1mlihZJWpvHJRuuR21smI/N8=)
3: j89ASOslTb0sA8qPaNCnvdarbHI.roa (hash: pTH6+0WVaBMdNBqgh83yrPXmlHTEaPDbAotvSzt0CT4=)
4: vSrVfCiFhwuThaFge_HlQGTrHjk.roa (hash: Bc63krCzWLaf7LOD/k916HgQOiH2H7M6asbeefYBGos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:43:60:f4:6b:f0:92:d6:78:20:43:df:25:8b:ea:92:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Sep 13 14:00:51 2025 GMT
Not After : Sep 14 14:00:51 2025 GMT
Subject: CN=e525d883eef75e76b270a20ae47b2a730d15c450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:93:b4:4b:50:22:79:39:39:ba:d9:5f:aa:
38:31:04:7f:a6:5b:c7:37:d3:69:bb:14:48:35:ce:
b2:49:6c:d8:87:f8:f7:49:3e:25:6d:d8:a8:28:8b:
89:e7:7c:89:b6:4e:c6:fb:93:d1:52:82:a2:30:54:
29:80:af:a2:98:f7:bd:df:6c:a2:b3:6e:be:87:81:
6e:2f:cf:51:62:55:00:55:54:25:d7:92:96:30:30:
90:12:e1:d9:e1:ab:0a:70:6a:21:94:3c:41:10:95:
08:ad:ca:75:56:5f:af:18:6e:f9:bb:29:b3:da:0b:
44:96:c6:26:db:b3:2a:d0:80:47:59:c2:93:30:5b:
db:4e:17:86:9b:fc:bb:35:fd:e3:d4:28:6b:cb:ac:
a5:9d:85:70:fc:0a:60:49:f7:8d:ac:5a:e1:38:8b:
4b:5e:1c:59:94:1f:ce:82:cf:14:29:4d:2b:49:ed:
e4:ab:2d:df:7f:15:7c:57:29:08:9e:0c:b3:05:48:
0d:42:58:23:cf:b7:f1:ea:f9:0a:73:75:dd:75:2a:
11:a9:f7:0e:c7:03:a9:50:0d:bf:83:8f:51:f9:e4:
84:83:0a:48:f2:de:38:53:01:dd:62:df:43:c1:66:
4a:5f:59:54:25:eb:45:73:88:89:03:77:6b:45:d4:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:D8:83:EE:F7:5E:76:B2:70:A2:0A:E4:7B:2A:73:0D:15:C4:50
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a6:8d:1d:27:f0:2f:46:6a:bd:04:30:b6:f9:39:9a:d2:a5:
3b:b2:3a:fe:39:37:30:ad:2d:ed:59:73:ed:31:9c:a1:20:5a:
e2:f2:9e:c6:a8:79:cf:fe:7a:c6:19:30:6f:d1:ec:19:e4:0b:
00:de:eb:4e:93:1f:69:02:a3:65:5d:1e:fc:4c:8c:2f:97:38:
84:8a:df:61:92:ec:a6:c6:05:01:e0:98:26:bf:8d:0b:76:06:
5b:e6:99:d6:16:d4:b5:2a:ad:f9:0f:34:94:11:50:ea:48:d1:
ef:e2:5c:9a:24:e7:0b:6d:2c:b6:6d:05:6b:21:e6:71:69:cb:
34:a6:d2:a1:84:a3:6b:a5:ca:52:df:19:2b:bd:ff:26:89:11:
e7:1f:88:83:b6:c2:a2:b4:da:80:bd:dc:7a:d9:08:7f:9d:df:
7e:81:88:7a:27:cb:1c:f7:e4:aa:99:80:50:09:7c:9f:63:cc:
6a:77:90:71:cb:7e:17:1d:bb:a8:08:cb:33:0e:23:c2:5a:81:
63:47:8f:57:77:a9:39:be:99:71:0a:4d:a6:f1:1e:d6:e9:31:
2a:d5:45:f6:fe:8b:03:66:61:aa:78:a2:b7:b0:47:f3:eb:2b:
a2:09:43:d3:8b:96:93:0a:ee:a5:75:36:74:0a:60:b3:69:ff:
75:62:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 21:27:00 2025 by rpki-client