Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: lM+6wJvMJVT3AblL/nZYtAhK6K/qDAIQmFbBpbOrjUM=
Subject key identifier: 51:94:A8:0C:C1:78:9F:FB:A0:D6:88:8E:8F:11:E0:4C:CB:A2:39:D1
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 01988768AB20ECA3BF0E3789BBECA1C6140A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 02:00:40 +0000
Manifest this update: Fri 08 Aug 2025 02:00:40 +0000
Manifest next update: Sat 09 Aug 2025 02:00:40 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: sKarxrcp3TYbOa1lj25cFgvPm1M.roa (hash: hzIQC+6QcM0KejfwF/J95Pb7an1/Oimflf+mKhKCBQI=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: S7jlz1DGuZ3TaDVrJO4UTgEnruNmcTSvFiZpxAliVgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:68:ab:20:ec:a3:bf:0e:37:89:bb:ec:a1:c6:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Aug 8 02:00:40 2025 GMT
Not After : Aug 9 02:00:40 2025 GMT
Subject: CN=5194a80cc1789ffba0d6888e8f11e04ccba239d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:28:43:6a:31:d0:ad:55:75:ab:95:19:bf:
a2:d9:22:3d:0b:30:22:58:e5:d2:70:45:61:ab:5a:
f0:f4:97:e5:5f:43:bf:14:fb:49:28:3d:96:95:72:
13:18:43:d1:36:6e:a2:cd:5c:1f:25:f9:b3:7d:d2:
48:f4:67:a7:78:6a:c9:7a:74:98:25:48:60:71:85:
99:ec:83:29:59:02:09:61:36:37:62:7a:e9:a1:29:
33:8b:59:c8:f2:8a:91:a6:99:83:7e:79:70:c0:6f:
02:af:b1:2d:21:a3:59:7a:0f:b6:11:26:38:65:e2:
75:05:5a:00:e1:9c:92:3e:1e:78:91:16:0f:77:ea:
e2:b4:8e:08:e3:9a:23:00:52:ef:01:6d:02:cc:87:
a2:27:89:45:f1:d3:0d:fc:f4:a3:ac:9e:98:06:f4:
55:d3:a6:69:93:d2:cf:44:95:a8:0d:20:4d:f4:84:
e7:7e:ce:5b:f4:98:ac:99:72:4a:64:c0:e2:1f:be:
8e:d9:c5:4c:09:dc:42:5a:0b:4b:e0:7c:72:f3:db:
e8:34:43:12:9b:53:e5:d1:81:54:74:d6:ee:12:8d:
95:6d:17:27:e9:52:a2:29:60:d3:0b:67:7c:29:e4:
bc:f9:cc:e9:a5:23:71:a7:ed:13:a6:82:5b:61:96:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:A8:0C:C1:78:9F:FB:A0:D6:88:8E:8F:11:E0:4C:CB:A2:39:D1
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6c:58:95:e4:58:e5:e0:f5:ef:5f:d7:58:bf:3b:cf:a8:95:
6f:3c:36:e4:28:f9:95:d0:89:c1:da:57:26:39:5c:90:30:fe:
35:3d:ff:ac:9b:96:68:81:04:e3:12:08:1f:fa:f8:ef:a0:a0:
38:b1:67:41:e8:33:7c:f9:59:92:c6:c4:c9:58:de:ca:a4:aa:
98:c1:9e:d2:04:eb:6e:47:90:87:c3:74:fe:d8:1b:46:2c:ee:
c5:73:56:ec:22:f2:48:c3:f1:b8:57:3e:a8:fa:19:d9:ec:a9:
6a:ae:1c:05:ec:3b:fc:9d:75:24:65:7c:d4:57:e3:11:a5:49:
94:24:91:0e:81:73:42:6e:d2:54:ac:ed:a3:d2:f6:2f:85:4e:
b5:bb:5b:59:ee:56:32:6b:02:69:22:c2:96:33:d2:c3:3e:92:
a6:70:8a:94:8c:5f:52:19:ce:08:f9:c1:d3:85:7f:18:e9:14:
4b:51:fe:54:93:24:dd:7d:0a:4c:88:b2:71:9f:d4:56:7d:ed:
0a:52:a7:95:d2:e3:07:74:d7:02:c3:59:59:80:2c:a9:62:a0:
94:c9:ad:07:68:97:25:db:8c:2b:09:cc:dd:90:d1:c0:d3:d1:
0f:da:66:b4:33:db:6b:b5:b0:66:c0:1e:11:ab:df:74:4f:73:
27:0a:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:15:39 2025 by rpki-client