Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: /4Qo6mv9cJnISqymXbPmyZ7l39UviTqxjq4IvmAw3mQ=
Subject key identifier: 7F:AB:2E:13:DF:85:79:8D:30:6C:03:28:59:89:90:A2:E8:49:F0:FF
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 01988B7CC98C1A4FE48DE2E3CE20CC0CA9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 21:01:07 +0000
Manifest this update: Fri 08 Aug 2025 21:01:07 +0000
Manifest next update: Sat 09 Aug 2025 21:01:07 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: TP+ar8p+cKpEzu3TbRty5KjqplKhjIBI97pyuNwR5Tg=)
2: GriK4KCJf_pD-27uHbjP7oEGNcE.roa (hash: ZFT+MzdQyFzyxpSKYu1uYqlJsuD4hjBAizP1SCZZEkg=)
3: e59o4nflKfkRbUwhU4WwMTxJI_Y.roa (hash: qghzj0Mw1zkJvf6+G2QT/sr1eaEcjZizZylknw1LbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:c9:8c:1a:4f:e4:8d:e2:e3:ce:20:cc:0c:a9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Aug 8 21:01:07 2025 GMT
Not After : Aug 9 21:01:07 2025 GMT
Subject: CN=7fab2e13df85798d306c0328598990a2e849f0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:58:76:a3:00:2a:ac:01:07:4f:86:a7:f1:
88:db:61:52:b0:08:50:ce:e9:2b:21:08:a0:cf:db:
1f:46:f9:2b:b1:f5:9a:47:a7:f0:7f:d8:48:0c:35:
7c:00:10:f0:e9:48:bd:98:eb:39:81:f4:17:0a:7a:
6c:1a:7d:49:69:c4:2f:bb:41:50:ca:dd:f0:51:04:
d8:d2:06:f5:28:1d:5a:36:d0:de:b5:23:48:78:b9:
c7:70:73:b7:97:f3:e3:f0:ad:c7:19:46:f4:d2:e1:
e2:82:56:9c:0f:ae:17:44:c7:7d:cf:8d:5e:b9:9d:
c7:7b:db:3e:2f:ed:15:8d:0b:7a:2f:cb:50:c3:f7:
c4:89:9b:1c:28:fe:de:7e:01:0e:d7:d5:04:3c:73:
18:27:61:b4:23:f8:3d:db:1f:b0:80:27:a3:c6:e0:
28:5e:2b:94:25:35:68:df:ff:76:5a:9e:56:cb:c9:
fe:6f:3a:6e:c8:71:68:c4:7c:6a:cd:a4:d0:b4:f0:
a3:58:2d:70:23:94:7d:90:e2:64:21:75:6b:57:c6:
40:bd:7f:a5:9e:10:b5:77:71:23:6b:bb:ee:43:27:
24:da:f0:27:0d:c2:a7:09:34:50:0b:50:16:e3:70:
23:da:e1:80:75:c7:99:8f:05:ab:bf:d4:0b:0f:27:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:2E:13:DF:85:79:8D:30:6C:03:28:59:89:90:A2:E8:49:F0:FF
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:83:55:5d:01:c3:b1:05:59:9e:c6:2f:07:f9:4e:13:d3:83:
3f:16:1c:0a:15:f9:ce:34:6f:ca:5c:cb:3f:8f:48:c4:0d:5b:
39:f0:d6:2c:53:c9:58:3f:d2:22:66:44:4b:7b:2d:5b:7e:ea:
bb:60:a4:33:d8:5f:b0:fc:c4:08:9a:d1:62:e8:6f:72:5d:5d:
21:e4:fc:f3:4b:54:01:54:b9:62:b6:91:c2:a0:ee:70:56:5b:
27:27:83:4e:6d:7a:1e:2a:0f:ca:e0:d0:65:68:85:4f:59:12:
c4:fa:13:83:58:5a:76:00:fe:97:38:de:5a:49:4c:16:9f:68:
ad:14:96:d3:4d:5c:da:39:fb:fd:2b:c2:e0:eb:13:27:59:99:
6f:67:2b:1b:38:1f:90:6c:d8:76:67:53:dc:df:fa:e8:04:ed:
43:51:58:c3:89:50:a2:a0:48:54:95:08:f6:05:21:33:ab:dd:
83:12:6d:41:0d:6c:10:c5:d0:9c:87:37:d7:c5:fc:75:6c:88:
02:ed:27:bf:4f:6c:15:fc:7a:33:b9:60:7e:85:a7:4a:15:58:
6b:1e:4b:78:db:0d:78:d3:82:5d:18:8c:26:5f:7f:b4:1d:bb:
2f:c0:89:75:15:b9:c6:0a:c3:56:5b:ce:07:e6:7d:2d:8c:ea:
33:ae:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:07 2025 by rpki-client