Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: NSJLOaA++nYEVyzx21i2nodrkZZsrhv/aH9a3vU8AS8=
Subject key identifier: 53:2F:42:F4:08:B2:C7:5E:0C:2E:F2:38:78:C2:CB:C2:05:0F:DC:53
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01987CE51461B802CFF7202A1065C11DF0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 01:00:44 +0000
Manifest this update: Wed 06 Aug 2025 01:00:44 +0000
Manifest next update: Thu 07 Aug 2025 01:00:44 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: PWFLrjUw0yEsAMRa8z+gBaZaOC2P6HcGlk0k5oz7NIc=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:14:61:b8:02:cf:f7:20:2a:10:65:c1:1d:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Aug 6 01:00:44 2025 GMT
Not After : Aug 7 01:00:44 2025 GMT
Subject: CN=532f42f408b2c75e0c2ef23878c2cbc2050fdc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:cd:bd:3b:b5:ef:a1:98:55:39:cf:94:47:
2b:8c:43:80:25:6e:af:ce:71:18:17:1e:8b:16:1d:
61:91:f6:08:2a:a3:8a:a4:0f:e5:70:10:76:43:fb:
b8:cf:74:8a:00:40:3b:3e:b0:38:0f:d9:d8:b9:d2:
9f:33:6b:ea:5d:4a:1a:61:7f:be:68:d5:f9:b4:0a:
ef:0e:4f:5a:b4:6c:3c:6f:bd:a4:b4:c6:17:a9:e7:
68:99:8b:7e:8e:8e:7e:47:3d:4e:cb:e5:9f:d0:14:
cf:46:fc:07:ae:ad:61:0d:22:0d:d5:3e:b9:d1:9f:
d2:61:28:4f:aa:c0:60:2e:37:2e:94:5d:c8:b0:e4:
74:7e:e9:07:48:3e:eb:29:cb:f3:02:e1:b3:10:54:
ac:87:27:58:fc:34:58:be:3f:ff:ef:69:f4:47:f3:
07:d9:45:f2:fc:f7:2c:b4:16:c9:90:30:bd:53:29:
f6:5b:86:25:85:6c:25:be:0d:d8:76:cf:09:11:d4:
2d:ea:cb:8d:d9:db:19:76:3d:e0:cf:3d:a6:d7:c4:
0a:ad:bb:0f:a8:23:fa:e7:61:f8:41:8a:d0:25:3d:
05:25:46:08:ed:07:3b:aa:d7:d7:f3:bc:d3:fd:36:
d3:df:ce:e6:38:01:1e:12:78:3d:ef:60:ae:0e:6c:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:42:F4:08:B2:C7:5E:0C:2E:F2:38:78:C2:CB:C2:05:0F:DC:53
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e9:4f:82:ed:ac:b2:f8:7a:7b:f3:cd:ca:c1:0f:be:49:ee:
19:d4:3d:bc:7d:0f:e0:e1:95:80:55:4c:8c:e2:65:c1:29:2b:
3d:cc:47:32:0a:aa:f1:52:cf:1b:3c:ab:2f:54:b4:a4:86:83:
dc:7c:93:47:12:7c:e7:ba:1e:e4:fa:8d:8b:76:a8:45:cb:ff:
85:af:3b:84:9b:9e:1f:24:01:f2:0e:ce:bf:b3:a8:1c:1d:77:
f0:c2:74:2a:87:31:a9:a8:35:74:67:9d:3e:4c:80:16:bc:3e:
28:98:aa:91:82:22:9d:5a:c3:d7:9f:0b:08:fc:43:6d:30:6a:
51:3f:f0:5f:78:ce:f8:7e:01:bf:2a:c7:ad:d7:81:31:12:4c:
eb:01:25:58:0f:f1:d1:29:a9:d1:2b:1d:39:0b:64:c8:9e:5d:
58:a8:ba:b4:7d:4b:9a:cf:d9:f4:16:61:fc:ae:14:be:a3:97:
ca:81:85:a0:5e:57:4c:58:af:89:8f:6b:65:94:21:08:71:d2:
80:8d:44:21:4f:0c:82:0f:d1:68:d6:af:d8:b4:a4:ef:cb:7d:
54:01:1b:c7:c7:a6:82:69:19:09:db:e9:18:07:94:76:ae:36:
02:51:db:79:54:c0:10:47:7c:f8:45:3c:ea:d9:76:8e:98:65:
49:b8:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:04:29 2025 by rpki-client