Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: Pf1MQQr6c6k2adZJ6puv/sZ5QlFLC/X7tpyrQOeI8qs=
Subject key identifier: 47:9F:2C:00:C9:BD:30:A3:0B:DF:0F:FB:61:43:1A:CC:4C:4F:4F:D1
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 019872982B1C3B66CAE2E3D775D23AF2F57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 01:00:31 +0000
Manifest this update: Mon 04 Aug 2025 01:00:31 +0000
Manifest next update: Tue 05 Aug 2025 01:00:31 +0000
Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: 1tHvFA4ldGqaKoesLiCSZ3Y3TlXqtBpxooFC+Hd1F9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:2b:1c:3b:66:ca:e2:e3:d7:75:d2:3a:f2:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Aug 4 01:00:31 2025 GMT
Not After : Aug 5 01:00:31 2025 GMT
Subject: CN=479f2c00c9bd30a30bdf0ffb61431acc4c4f4fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:b8:1b:5a:92:56:94:cf:73:69:e8:9d:32:
0a:fe:83:a2:8d:40:ef:ce:4f:6f:d6:16:ac:03:e1:
5b:0a:11:d3:42:32:d5:fe:aa:26:c0:f0:5c:69:ae:
7a:9c:4f:5d:fa:b4:b5:1c:19:dd:d5:48:8f:35:af:
ad:dd:8d:f4:42:27:8a:e5:c0:68:b1:0d:19:07:e1:
ae:ec:fb:b1:4d:e7:95:68:75:1f:a1:91:7a:12:fd:
4d:ae:35:b7:0f:24:63:af:a4:21:04:28:73:bb:88:
ba:da:9b:25:10:e8:5b:2f:d3:1e:e0:fc:92:6b:ce:
2c:db:b6:a1:94:71:9c:71:af:7a:59:8e:23:6f:1b:
10:75:69:67:8a:cc:4c:9b:ba:ce:ef:0f:51:c7:b2:
9e:95:f1:c1:6b:89:07:06:56:52:9f:53:a8:3a:76:
f6:c9:d8:5e:8e:a6:20:92:85:43:88:7b:e0:b3:b0:
c3:78:40:d4:dd:41:16:64:f3:b6:6b:de:ab:1b:12:
f2:7d:e1:47:1c:ad:8a:6b:45:cd:79:1b:f5:0c:82:
ff:83:d5:08:7e:3b:46:59:d2:67:65:3e:14:c7:ce:
0b:56:b7:53:82:e2:c5:26:1b:b9:ba:4b:ee:ce:fe:
cd:ff:56:c3:e8:26:e4:f9:84:0f:c7:e4:77:9d:a0:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:2C:00:C9:BD:30:A3:0B:DF:0F:FB:61:43:1A:CC:4C:4F:4F:D1
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3e:1d:e9:ad:e7:ad:33:a9:d0:8d:9a:e2:7c:cd:48:39:d2:
5f:cf:d8:b7:0a:f8:50:09:39:91:39:ee:4d:e6:cf:b0:f3:2b:
14:fa:04:e2:d3:e2:5d:f3:84:65:c8:87:23:68:7d:01:05:d4:
ab:e5:a0:8b:48:5f:43:50:a4:2b:10:82:56:68:48:3f:b0:19:
7c:73:e1:51:db:a3:f9:cc:59:89:df:a6:95:50:0c:6f:89:8a:
09:8f:de:42:b4:af:cc:c6:90:a7:b5:09:98:38:5f:10:0b:14:
76:c6:81:57:86:e6:30:d6:3c:b6:d5:d5:ef:36:10:47:5f:46:
aa:95:c6:1a:bc:d2:21:92:15:d3:28:76:f0:54:33:e9:40:21:
ac:2d:b2:17:7f:5d:15:b5:5c:b1:80:ab:2c:56:a0:e3:6b:05:
45:eb:5c:06:51:2a:86:0c:7a:ab:9b:78:8c:b1:a3:2f:cf:64:
05:28:34:a9:2f:ac:8b:52:dc:3c:52:cf:65:9b:6a:f2:c4:55:
bd:f4:7d:47:24:69:83:ca:36:18:e2:9a:08:1c:07:13:a2:4b:
b8:53:c9:34:44:47:36:ff:e7:7f:b8:46:54:f9:da:bf:09:bb:
e8:83:c5:80:e3:47:b6:8e:5c:12:be:49:a4:a3:f9:44:94:1b:
89:71:9b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:46 2025 by rpki-client