Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: miffJvR3gQG5V/m3Gf2wQrPeUiQPbbPvtFKvAsmcU/U=
Subject key identifier: 15:AF:F2:84:70:E7:CB:91:DE:19:7E:45:21:17:C2:37:DE:03:FC:33
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019882E77D56E3191DEBF6671218C0A0CA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 05:01:05 +0000
Manifest this update: Thu 07 Aug 2025 05:01:05 +0000
Manifest next update: Fri 08 Aug 2025 05:01:05 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: d+j/I8OqHZ8f8IPrusS0AU2ktJdFB+izPChBv2VpUk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:7d:56:e3:19:1d:eb:f6:67:12:18:c0:a0:ca:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Aug 7 05:01:05 2025 GMT
Not After : Aug 8 05:01:05 2025 GMT
Subject: CN=15aff28470e7cb91de197e452117c237de03fc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:95:b5:a5:cd:f1:21:e7:8c:e9:0d:fb:5b:
c8:c9:6a:29:52:c7:b7:96:04:27:7b:04:9a:74:80:
0d:28:dc:c4:99:75:b3:2f:6b:40:a7:d3:96:a0:3e:
41:61:4e:7e:37:56:e8:a2:46:cb:b0:89:96:d5:dd:
15:8e:66:46:7e:ce:ab:69:ac:2d:00:f5:57:c8:5f:
39:67:a4:94:6d:78:c8:97:19:10:63:eb:46:14:f2:
35:ef:9b:93:80:59:48:6a:01:26:c4:8d:87:b1:7b:
23:79:15:37:54:61:b1:8c:78:12:6c:4a:b6:34:45:
09:1a:de:1b:e5:f3:88:33:f4:73:4e:a0:23:ca:61:
15:37:ec:14:55:45:e9:e3:68:d1:0e:ba:f4:8b:67:
1b:ed:89:4f:af:ac:ad:d1:d7:a7:21:80:6f:d4:c7:
0c:42:81:db:28:4b:63:7c:0e:6e:2f:09:27:73:c6:
7f:fb:47:0e:d7:12:3c:6a:6f:5f:d6:0f:dc:04:37:
26:e7:a5:c2:68:31:0a:06:e1:42:4c:11:3e:29:7e:
5e:8a:69:72:92:1f:64:df:fd:70:04:bc:d4:21:a4:
f2:ab:78:65:1b:8b:f3:e7:f9:f1:ed:8b:88:8c:62:
0d:c2:10:36:d7:6f:8c:2b:4d:93:8c:0a:f7:2b:0e:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:F2:84:70:E7:CB:91:DE:19:7E:45:21:17:C2:37:DE:03:FC:33
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d6:e8:e6:f9:3d:14:11:dc:f8:e4:fe:90:bc:00:be:48:a6:
37:11:e0:ce:7c:63:8b:48:56:55:89:bc:ac:35:46:18:ab:3c:
c5:12:48:71:69:71:c6:bc:a0:ed:da:c4:06:0c:48:f1:65:b6:
db:09:e0:5a:b7:f0:4e:50:7e:a7:05:04:87:d3:ac:69:f6:27:
99:be:5a:11:2a:34:43:11:ba:59:4b:df:1e:19:68:81:a5:8b:
05:1a:7b:f2:43:5d:72:44:d3:07:64:ad:97:a8:2a:44:eb:c2:
c5:15:ca:3b:50:d9:a2:7f:ce:4c:96:f2:93:ff:b7:30:ff:44:
c5:ee:83:ed:b8:6b:7e:fc:08:f0:dd:4b:a0:93:b7:9c:bc:c9:
88:4b:51:a2:6e:60:26:1d:ac:e0:95:d3:dc:9f:6e:2a:2c:6d:
a8:c8:eb:32:30:86:05:2a:97:cd:89:c8:92:08:49:de:5e:16:
c2:6c:20:1c:d4:c2:22:9f:2b:f4:15:d4:83:5d:c0:b4:78:2a:
0b:17:fa:04:b5:68:61:3e:f2:67:38:26:b8:cb:f9:fb:53:a0:
8e:2a:b1:e1:ca:ec:59:89:24:8e:1d:f4:0b:1e:bb:af:fc:a1:
ad:07:11:11:13:8d:31:d4:fd:1a:aa:83:b9:de:0a:0d:bd:af:
64:62:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:23:12 2025 by rpki-client