Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: P0SjmIkN44ysxwZRAvHjz9gVimXdWW3cEVVhswlMHBs=
Subject key identifier: 58:74:53:F3:7A:3C:AA:2E:00:72:DD:41:95:87:96:1A:28:EB:41:CE
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019892C9461B8BF4175764DA6966757CFC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 07:02:00 +0000
Manifest this update: Sun 10 Aug 2025 07:02:00 +0000
Manifest next update: Mon 11 Aug 2025 07:02:00 +0000
Files and hashes: 1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: hpnDMfQrnRQGMkCcAQr6tZK20vxTG2lPhWmY4p1D1xg=)
3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:46:1b:8b:f4:17:57:64:da:69:66:75:7c:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Aug 10 07:02:00 2025 GMT
Not After : Aug 11 07:02:00 2025 GMT
Subject: CN=587453f37a3caa2e0072dd419587961a28eb41ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b4:4c:c6:fd:d3:74:f1:bd:17:88:42:0c:de:
fb:b0:e6:87:31:9e:32:45:42:9d:20:72:76:c9:7e:
ed:a6:45:c0:a0:d4:46:00:e1:87:4a:59:24:99:bb:
bc:e3:da:2f:20:7d:f6:7f:bb:33:71:20:42:a7:d2:
0d:cd:9c:4c:1e:6a:c4:84:f2:b5:da:68:c4:05:95:
fd:6b:ef:a8:9f:67:dd:3c:a7:6d:6b:1e:46:4f:4d:
89:9e:fe:1e:96:3d:f4:f7:19:19:55:ed:d2:55:7a:
41:2c:83:70:d2:31:bf:b0:b7:1e:f4:e5:3d:93:69:
7c:e3:85:31:48:60:34:77:19:9e:75:ca:a4:bb:dd:
e6:33:2e:99:ee:2e:ef:3c:14:54:99:a6:e8:24:14:
d4:ac:86:db:8a:c9:6d:84:5f:ce:de:2e:95:43:b9:
4c:e5:9d:58:55:06:81:eb:0a:d2:af:84:97:d2:eb:
dd:53:3f:29:9e:4a:d4:79:66:9a:d5:e2:c6:16:d1:
5c:3b:d8:6a:29:e9:82:1f:43:c3:74:6b:74:57:d2:
e9:d2:43:5b:80:4e:93:9d:23:33:66:9c:9c:80:15:
ab:d7:48:fa:ef:ed:9d:9e:87:56:88:8e:be:fe:54:
ab:3a:41:64:de:25:10:fe:94:64:44:36:20:09:0f:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:74:53:F3:7A:3C:AA:2E:00:72:DD:41:95:87:96:1A:28:EB:41:CE
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:01:df:c2:c9:ca:7e:2f:19:c1:01:68:b6:0d:bf:59:9f:21:
c2:d8:7e:13:bc:22:73:a5:0c:fe:1c:e2:bc:7b:a2:87:a8:c5:
3f:0c:9a:3b:f8:e5:56:84:28:88:fa:f5:59:e6:db:a2:8e:96:
ed:b2:68:7e:47:bc:9d:68:88:27:a6:93:2c:9a:91:95:77:54:
ff:48:9b:11:de:42:69:4c:9a:1c:10:41:04:cc:a8:48:1e:ac:
a1:55:0c:45:2d:e1:14:bd:fc:c6:7e:17:03:d3:07:99:cf:cb:
ad:5a:5b:b8:f1:35:b1:fd:a3:09:1c:c2:01:44:82:34:6b:d0:
2c:52:b6:42:77:48:85:58:0d:af:7c:9a:e0:16:15:8c:20:db:
0b:1d:78:86:56:96:6f:0a:4b:2d:65:65:32:95:f5:31:ea:1e:
64:b0:00:e8:fe:df:94:6b:f3:d1:89:a4:59:02:1f:44:51:fb:
2e:e2:87:3c:56:ca:46:d2:df:87:8f:d6:d6:03:91:c9:a9:23:
a9:a1:b3:75:2a:3c:d9:3c:ca:24:b7:3c:f5:3b:12:7f:5f:83:
ca:45:5b:42:9e:1e:b5:fb:b0:29:1f:61:26:a5:73:8d:23:8c:
ac:5e:29:55:e3:64:80:3f:6c:fd:38:07:46:2d:64:c7:9d:8a:
a3:fc:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:04 2025 by rpki-client