Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: npoQF50qlukUnCR57V4wCXw2RlQ9DREs+tg+KgU6CZM=
Subject key identifier: 86:A2:4C:05:E2:7A:D4:48:20:8E:E9:67:89:23:45:16:C0:EA:6C:11
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 01989335F16950592C0E9F983D5B86DC956A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 1588
Signing time: Sun 10 Aug 2025 09:00:42 +0000
Manifest this update: Sun 10 Aug 2025 09:00:42 +0000
Manifest next update: Mon 11 Aug 2025 09:00:42 +0000
Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=)
2: BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa (hash: +wyGsgZf3mkT04YYiaLjKGX/U5oOsHBvxk3RajkpCvY=)
3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: L6z9OnP481v8e5Nsl5ZkqLiigOHHLs2D5DKShakYqws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:f1:69:50:59:2c:0e:9f:98:3d:5b:86:dc:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Aug 10 09:00:42 2025 GMT
Not After : Aug 11 09:00:42 2025 GMT
Subject: CN=86a24c05e27ad448208ee96789234516c0ea6c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:60:df:95:7d:92:c5:e8:18:23:9e:a3:2d:
26:60:29:b2:02:29:d4:91:fe:8f:c8:c4:04:c2:a4:
77:e0:92:24:4b:a4:c7:3b:26:6e:98:f5:db:57:e7:
23:38:9d:8e:c8:0d:09:f7:de:c4:77:40:e9:ad:c3:
44:4d:08:84:4a:2d:b7:b2:1f:a2:0b:ae:96:24:1f:
db:3a:fc:a5:45:39:bd:9f:54:04:6f:12:6e:54:cd:
b1:5e:d3:27:e4:30:a7:78:f1:d9:1c:e3:57:01:29:
ca:ba:dc:47:57:82:eb:43:54:96:7e:ce:31:10:2b:
7f:3f:ef:e0:5f:d5:42:1a:f8:45:d1:5c:b7:70:80:
cf:3c:59:e0:71:aa:67:a3:5c:c5:07:3b:fa:96:d7:
67:85:5e:80:6d:b0:dd:7a:36:b9:16:89:f0:e1:6b:
51:15:40:d2:f2:a7:7b:d5:09:79:4c:02:5d:3c:0b:
59:b4:91:73:4d:96:4d:15:04:a8:e4:87:7f:74:74:
7c:f9:58:72:de:15:64:ad:c6:79:e4:61:31:1a:cc:
87:1c:3f:35:48:d1:4b:08:27:12:71:23:f6:db:28:
de:cc:5d:74:61:1d:67:04:7b:e0:a7:ae:ab:54:1d:
a6:58:ed:d0:91:0b:95:f4:26:b7:ac:3a:cd:fe:05:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A2:4C:05:E2:7A:D4:48:20:8E:E9:67:89:23:45:16:C0:EA:6C:11
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:3b:e3:2b:09:ac:79:62:96:c1:43:99:19:99:f1:8d:c6:
a4:6d:9a:ef:ea:b3:51:6a:d3:2a:b0:0f:dd:22:3f:be:8c:2d:
4c:d8:a4:c4:65:78:83:54:48:f6:88:1d:b8:c7:51:7a:16:f1:
3c:87:3c:ce:b4:9c:2e:35:5e:cf:3a:05:0a:76:32:45:03:dd:
99:a9:07:16:62:c9:4f:19:67:22:4c:0c:f9:93:7b:12:e1:ab:
22:ea:3c:80:81:6e:f8:e3:58:ee:f1:c5:5b:b9:70:9d:31:16:
07:48:2d:e1:88:f3:a1:ed:30:d2:09:c7:fa:9b:9a:a4:87:2d:
f9:60:5d:c8:cc:30:de:c5:6e:3b:b2:8e:15:85:8c:ea:d8:b9:
d1:50:12:12:24:be:02:b1:b3:39:f1:7b:5c:66:b3:f9:be:3a:
c5:61:9f:46:39:07:27:f0:a3:47:1d:b9:a7:5a:7d:76:bc:ab:
5f:7f:90:e7:43:9c:d2:73:d2:3d:b7:bb:c0:a1:67:21:7d:31:
49:f5:8f:69:14:29:a7:9a:03:15:c9:bd:70:ce:b3:d3:07:98:
01:36:9d:da:35:9a:54:aa:47:39:de:ee:b2:23:02:13:ea:7a:
63:c8:2e:c0:41:d1:59:3f:cd:fe:a9:91:d3:f8:fe:f8:8a:1d:
a3:18:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:35 2025 by rpki-client