Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: w24XJx97z2vOjEQxiBJIoWHPiXO6eU3fesHbLkn20jg=
Subject key identifier: 4E:D5:6C:09:B1:1E:BD:EE:2B:81:4F:D6:C1:EF:F3:0B:C2:CC:96:1C
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 019874F5111F6C7665C5C5FD044AB9F519D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0FB7
Signing time: Mon 04 Aug 2025 12:01:14 +0000
Manifest this update: Mon 04 Aug 2025 12:01:14 +0000
Manifest next update: Tue 05 Aug 2025 12:01:14 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: I8sl8m+j5XDCey6qyCjdP3zIBU6KfHroZbu1TOW6A3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:11:1f:6c:76:65:c5:c5:fd:04:4a:b9:f5:19:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Aug 4 12:01:14 2025 GMT
Not After : Aug 5 12:01:14 2025 GMT
Subject: CN=4ed56c09b11ebdee2b814fd6c1eff30bc2cc961c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:62:d0:33:a3:64:15:29:be:6f:cd:ca:75:
c7:58:95:15:14:d3:d7:3a:1b:eb:42:f0:34:fd:7a:
d4:3d:71:fe:e1:02:ac:81:80:87:8a:bb:3f:18:d0:
57:3d:f0:bb:36:ab:e7:4f:48:80:58:bb:4a:c5:30:
a4:2d:ed:67:51:4f:3f:3c:e2:e8:22:7f:a0:5e:cf:
44:4a:bb:ec:d3:16:31:87:5f:8d:29:bd:50:4d:af:
f0:16:a2:d7:f4:09:f4:22:38:94:dd:b6:d7:e1:3d:
cc:bd:77:0b:e9:8a:7c:b1:2f:1d:f9:92:fa:4a:97:
40:32:f6:da:eb:5d:d8:f8:ae:fb:4b:db:90:04:f5:
0d:27:19:82:15:05:e3:60:84:1c:55:6d:97:4f:e2:
15:61:d3:25:04:0a:3e:fc:d2:71:7f:b8:71:52:02:
1c:ca:23:d7:ca:db:38:f0:67:50:3a:4b:7b:33:9c:
42:da:1d:35:26:8c:54:95:d9:47:84:af:f1:db:84:
37:d3:4c:e7:bc:42:aa:0f:f3:34:43:5f:eb:2d:03:
e2:64:83:78:51:2f:d7:43:d7:f4:ef:98:47:b5:3b:
19:f6:c2:53:b8:c5:bd:39:1a:ba:b8:a4:51:e0:b9:
a5:2d:91:f6:c6:a9:fd:f1:8d:ba:29:09:d5:7b:ee:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D5:6C:09:B1:1E:BD:EE:2B:81:4F:D6:C1:EF:F3:0B:C2:CC:96:1C
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1b:92:65:11:6c:ef:76:a1:b3:d5:f9:d7:8d:39:ed:a1:e0:
d3:c8:c2:62:40:f8:ae:e5:b7:59:5b:32:e8:85:f1:81:2d:86:
d7:de:c8:e7:bc:e0:d9:7f:f3:e9:ab:08:55:e9:3e:8f:a5:06:
ef:c2:08:6c:68:9a:f9:a3:44:f2:4e:7b:fe:e7:42:ec:0b:6e:
7a:f1:82:27:69:f9:93:e2:92:4d:b4:54:4d:c2:cf:02:83:bb:
67:fd:ad:e6:41:fb:b1:ba:11:4e:75:11:71:5e:c9:ae:89:62:
f4:e4:3b:db:7a:93:76:6b:a1:91:45:6b:c8:9c:34:14:e2:34:
97:11:36:cd:3d:85:b7:ff:1d:41:47:f5:23:fd:b3:88:ac:83:
b4:4c:5c:c6:ce:35:69:21:ab:9c:49:b0:02:fb:be:5d:57:1b:
1f:43:8a:d5:91:44:95:eb:b6:f9:a9:d3:2c:38:20:55:c3:a3:
e3:d7:4f:75:5a:61:98:f1:64:b0:d6:5d:1e:49:65:a5:a0:4d:
c6:62:75:95:fd:94:96:3b:62:71:76:6c:71:6e:6d:00:b1:39:
c7:1d:70:51:e6:c6:30:a1:50:5d:7d:a5:0e:bf:92:ac:de:b2:
7d:b6:69:b0:d1:5d:ac:1c:61:5d:b5:10:82:7c:9d:73:2d:bb:
b5:6c:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:12:07 2025 by rpki-client