Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: BJBCkebOT8mK3sWX6xDybEcL1EY+YXSQdftyHZPeK3g=
Subject key identifier: 2F:68:4E:FF:7D:17:10:21:5B:C1:C8:C8:45:78:0A:FD:99:95:EF:6E
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 01987D1C888222CA312651801F3E6E77BAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 1081
Signing time: Wed 06 Aug 2025 02:01:18 +0000
Manifest this update: Wed 06 Aug 2025 02:01:18 +0000
Manifest next update: Thu 07 Aug 2025 02:01:18 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: 3uoGFxtbMPqN/uFkqa3wmiR9/29Fz0EWSzy88Dkr16s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:88:82:22:ca:31:26:51:80:1f:3e:6e:77:ba:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Aug 6 02:01:18 2025 GMT
Not After : Aug 7 02:01:18 2025 GMT
Subject: CN=2f684eff7d1710215bc1c8c845780afd9995ef6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:fa:f1:68:13:6d:23:d6:f1:8a:5e:2a:06:
54:22:ea:43:b4:5b:77:08:3d:01:1e:1e:96:65:d2:
48:e8:99:a6:60:a0:a1:e3:84:80:9c:e9:fb:ae:3f:
2d:02:57:c9:e3:a1:92:bd:29:c3:7a:31:a6:73:3f:
24:52:dc:ab:91:ad:75:04:87:09:d8:1b:3c:c6:e8:
87:19:fa:a6:e3:2a:6c:4a:24:87:5f:79:26:d6:24:
0c:2b:1a:23:91:f5:6f:51:46:b3:6e:ff:02:96:2a:
ef:f7:df:69:58:c7:cc:3f:82:b8:6b:02:64:05:6a:
ff:6c:5f:f1:fd:4a:40:fe:ef:3d:8c:11:ce:44:e6:
3d:ca:eb:40:ad:da:01:77:a5:9e:57:68:c6:fb:16:
48:63:43:a5:e3:14:0c:d1:d4:4d:a2:e2:f7:ea:aa:
23:ae:43:3f:b4:e6:20:4b:5e:f3:aa:2c:8b:14:28:
1a:8d:5f:38:e4:e0:f6:c3:ec:a3:2c:c8:44:12:6b:
86:9e:7f:36:64:4b:bf:2a:cb:5d:9f:3b:99:c7:65:
98:72:df:9c:fd:04:b7:5c:2d:cd:a5:a1:bc:21:ee:
34:da:db:4e:2a:c6:42:c6:db:08:2e:47:02:13:78:
b9:e3:23:83:92:6a:b0:2a:36:06:40:f2:8f:2a:75:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:4E:FF:7D:17:10:21:5B:C1:C8:C8:45:78:0A:FD:99:95:EF:6E
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:56:7d:ed:df:cc:81:77:ea:4a:d5:ab:68:ee:15:a5:19:48:
d6:c5:74:eb:d5:16:17:da:30:36:38:7e:7b:30:a0:f5:b0:09:
96:5e:fc:71:df:42:09:4f:46:78:c2:95:c0:7a:7c:eb:c3:07:
92:11:42:c3:e0:37:9a:42:bf:0a:db:1e:61:b7:5d:86:5f:4a:
e3:6a:28:c3:3d:1d:80:c9:57:b4:b4:f1:a5:5d:75:e5:6a:bd:
79:a4:65:0d:84:27:63:fb:77:d5:bf:43:df:04:54:2a:f7:54:
f1:de:51:8d:5b:90:5b:33:bf:c9:2f:72:ff:e0:68:40:f4:a6:
a2:94:a0:f5:e9:f4:07:df:39:7d:4c:69:3c:97:8d:c2:6b:38:
7e:ce:fc:d4:b4:cd:66:b6:d1:8f:be:bd:91:f6:ed:cb:c6:b2:
be:ae:06:8a:fc:1f:fd:89:04:e4:5f:3f:b2:ac:00:40:7c:16:
ef:f6:69:15:e2:45:4c:8a:f3:89:c4:b7:6b:77:7a:ad:ef:77:
31:ac:98:20:6d:ea:c8:b4:97:8a:d1:2e:7a:77:1a:bf:bb:56:
ea:e8:da:71:7a:5e:b6:2e:1a:12:72:47:45:90:94:db:be:40:
6d:17:5a:c4:50:86:1b:3f:aa:74:4c:e3:41:ad:6f:88:8a:4b:
28:28:7c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HIiCIsoxJlGAHz5ud7qlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5
MDExZWQwHhcNMjUwODA2MDIwMTE4WhcNMjUwODA3MDIwMTE4WjAzMTEwLwYDVQQD
EygyZjY4NGVmZjdkMTcxMDIxNWJjMWM4Yzg0NTc4MGFmZDk5OTVlZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiij68WgTbSPW8YpeKgZUIupDtFt3
CD0BHh6WZdJI6JmmYKCh44SAnOn7rj8tAlfJ46GSvSnDejGmcz8kUtyrka11BIcJ
2Bs8xuiHGfqm4ypsSiSHX3km1iQMKxojkfVvUUazbv8Clirv999pWMfMP4K4awJk
BWr/bF/x/UpA/u89jBHOROY9yutArdoBd6WeV2jG+xZIY0Ol4xQM0dRNouL36qoj
rkM/tOYgS17zqiyLFCgajV845OD2w+yjLMhEEmuGnn82ZEu/KstdnzuZx2WYct+c
/QS3XC3NpaG8Ie402ttOKsZCxtsILkcCE3i54yODkmqwKjYGQPKPKnVVfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9oTv99FxAhW8HIyEV4Cv2Zle9uMB8GA1UdIwQY
MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct
Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2
LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlZ97d/M
gXfqStWraO4VpRlI1sV069UWF9owNjh+ezCg9bAJll78cd9CCU9GeMKVwHp868MH
khFCw+A3mkK/CtseYbddhl9K42oowz0dgMlXtLTxpV115Wq9eaRlDYQnY/t31b9D
3wRUKvdU8d5RjVuQWzO/yS9y/+BoQPSmopSg9en0B985fUxpPJeNwms4fs781LTN
ZrbRj769kfbty8ayvq4Givwf/YkE5F8/sqwAQHwW7/ZpFeJFTIrzicS3a3d6re93
MayYIG3qyLSXitEuencav7tW6ujacXpeti4aEnJHRZCU275AbRdaxFCGGz+qdEzj
Qa1viIpLKCh8EQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:16:51 2025 by rpki-client