Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: ozNO7oUN2TWmvFr1sILo5hcrVTPVHvG3B/8E/qUPCO0=
Subject key identifier: F8:1B:49:C7:7A:58:51:78:CF:DC:46:B6:85:CD:2A:F1:D1:51:C6:78
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 0198819E35BE5B0E73701B80ABB934DF1AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 04F7
Signing time: Wed 06 Aug 2025 23:01:25 +0000
Manifest this update: Wed 06 Aug 2025 23:01:25 +0000
Manifest next update: Thu 07 Aug 2025 23:01:25 +0000
Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 8TOTGvs+zHdoY0GGFD0xBJ44cF/lxwAl5L6rrD6gXuk=)
3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:35:be:5b:0e:73:70:1b:80:ab:b9:34:df:1a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Aug 6 23:01:25 2025 GMT
Not After : Aug 7 23:01:25 2025 GMT
Subject: CN=f81b49c77a585178cfdc46b685cd2af1d151c678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:8e:fd:68:e4:8c:0e:20:26:33:7b:26:ee:
7c:bc:be:85:dc:24:ba:77:88:25:17:7a:6e:d3:b2:
c2:a3:ed:d2:d3:db:af:46:f7:87:62:e0:a3:ba:f4:
21:da:eb:09:21:38:01:f1:b5:f7:b1:18:d2:12:3b:
e7:78:c2:46:e0:78:18:94:0b:83:ce:06:54:24:a1:
02:4a:39:13:16:0e:15:ce:1e:45:f8:a6:1e:b9:df:
4d:33:f3:80:75:13:17:b2:ec:77:f8:e6:da:62:aa:
0e:6d:62:c8:44:d9:91:f1:8c:e7:ca:14:ca:4c:92:
ab:dc:cf:03:bc:d8:a6:78:92:9d:ba:ad:c4:2f:38:
c1:8e:ff:6e:05:7c:0e:57:e9:f8:0a:c6:fd:21:96:
0c:e1:de:69:d5:28:31:bb:96:9f:16:11:c8:61:de:
37:20:d4:e6:31:96:26:d1:fe:cb:d1:67:c5:31:a0:
b8:1f:f8:e5:bc:26:e4:1d:74:ac:6a:96:6c:88:9b:
e2:e3:38:29:6a:43:19:0b:51:70:6c:01:28:78:00:
23:e2:7b:c0:41:7e:1e:fb:08:42:87:72:74:4d:31:
dd:4c:a4:25:d4:8f:0b:0b:02:51:d5:a3:ac:ab:b0:
0d:98:15:84:4c:84:a5:45:23:f4:c3:bb:4f:a7:fe:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1B:49:C7:7A:58:51:78:CF:DC:46:B6:85:CD:2A:F1:D1:51:C6:78
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:eb:f0:14:03:34:c8:ca:f4:5a:0a:5c:61:1f:57:d7:69:ca:
b5:a6:cd:cd:69:92:71:be:eb:e0:78:09:e6:1f:3e:80:1c:96:
a0:69:e2:2b:34:ee:7c:6f:65:30:e7:17:c1:ab:41:cb:d5:15:
49:2c:d9:ff:78:15:90:e7:3c:58:14:dc:1a:44:aa:f0:c6:2c:
9d:72:ee:8f:33:67:0a:5d:2c:21:4b:ce:d8:1e:e1:91:b9:3a:
29:60:94:d0:41:28:52:55:44:e0:44:10:e5:91:0d:fe:77:14:
5e:17:a2:e7:42:15:f9:11:19:4d:22:93:58:52:e1:4a:de:8a:
71:ed:9e:bb:a8:58:04:fb:4b:92:1d:ce:36:68:8d:6d:39:22:
2f:6f:6b:34:a7:a2:87:cd:25:ef:ba:35:24:03:34:4d:c6:b9:
4f:9b:21:e2:fc:dd:0b:e7:02:8d:8e:fd:f5:c3:f9:56:3e:ff:
bb:a1:18:a5:84:e6:c9:0c:c2:54:b8:3b:d8:dc:fc:1e:c8:66:
1d:36:c4:f3:00:05:ac:1f:6f:b7:b6:cc:de:aa:56:9f:33:bb:
16:c4:e6:43:a5:4f:7a:95:b0:df:57:ca:9b:51:d2:5a:7b:a8:
ee:0c:f0:1d:50:3f:ca:16:4f:a2:63:48:00:87:8e:5b:ca:f3:
ae:dc:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:49 2025 by rpki-client