Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: EUUuG825gcoEll9ppwy1uE1SCXxxzKE6+D92BRtEryw=
Subject key identifier: CF:A9:BE:2F:55:98:ED:E9:E0:8D:6A:3F:4B:86:92:27:26:F3:9E:2D
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 0198952492E9E97D3A616CDBBBCEDE09D034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 122E
Signing time: Sun 10 Aug 2025 18:00:58 +0000
Manifest this update: Sun 10 Aug 2025 18:00:58 +0000
Manifest next update: Mon 11 Aug 2025 18:00:58 +0000
Files and hashes: 1: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: 1+F+PmF6pkJnzXDjxZYI1IPuP87jjq2eJ+MQ+hBVCyM=)
2: yueP6aik06BPwcnmsnEIlj3ek5g.roa (hash: ouDcttk3dQ7QbY0vNsL4yJQH9X2H2u4pj98A+2ZbC4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:92:e9:e9:7d:3a:61:6c:db:bb:ce:de:09:d0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Aug 10 18:00:58 2025 GMT
Not After : Aug 11 18:00:58 2025 GMT
Subject: CN=cfa9be2f5598ede9e08d6a3f4b86922726f39e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:f1:6e:34:a0:71:95:24:fc:73:61:22:75:
81:6b:82:e2:be:34:5b:64:35:1b:c9:a7:47:35:f3:
c3:ad:5d:96:08:10:5f:f9:29:bc:d0:61:62:7c:39:
ec:4c:2d:5a:a6:a9:15:a2:44:a6:0d:29:1e:b8:15:
b6:e8:49:b8:6c:62:dc:15:d3:6d:e1:43:36:ab:b4:
59:a5:71:eb:4c:2c:bf:a8:60:8f:d7:68:00:10:79:
6b:6e:51:4f:47:2b:14:a6:84:bc:dd:79:47:26:e4:
93:5d:50:00:56:c2:4b:1e:2a:41:a5:2c:3f:06:24:
11:41:a4:67:a8:95:31:09:b2:53:59:19:ac:ec:b9:
65:1a:ff:aa:82:e2:a4:5a:39:63:1f:2a:3d:67:a4:
e3:eb:36:e7:a6:ed:00:f0:4c:bf:06:30:c6:54:4b:
ef:c4:93:09:44:d7:50:93:2a:36:db:b0:37:01:62:
b4:e7:bb:95:0d:27:b7:67:37:ac:ab:98:a0:69:8c:
70:df:f9:d4:61:c3:18:75:64:be:24:f2:9a:1f:d2:
70:ef:99:3f:53:81:bd:12:e2:ea:d0:22:70:78:e8:
f3:5e:d7:ba:1f:8d:f3:49:b0:14:9d:17:b1:f3:a5:
17:98:a4:30:20:a2:f4:53:05:8e:87:1a:e8:2a:41:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:BE:2F:55:98:ED:E9:E0:8D:6A:3F:4B:86:92:27:26:F3:9E:2D
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:36:35:04:e4:ff:61:89:1b:da:ad:75:fb:5f:41:2b:ac:50:
6a:34:c6:0d:ef:6d:e8:6b:0c:47:44:88:96:9a:a4:fc:a7:cf:
ca:e3:80:2f:e9:5b:86:b9:01:93:7c:2d:cf:ba:90:b9:fc:56:
f8:e7:2e:b6:23:74:12:63:1b:0e:8b:e7:c8:d3:36:d8:52:a8:
64:0f:21:64:ab:f4:ee:67:07:62:c1:95:5a:b3:17:38:0a:89:
06:22:61:6d:76:e1:b6:c2:66:fd:f2:e0:b8:9d:12:2f:36:e9:
b9:80:c4:4f:04:98:cb:e6:aa:c5:7e:e2:0d:ee:f7:69:f7:97:
5d:6c:e5:5d:04:8f:91:60:71:29:82:16:28:6e:b0:97:91:f7:
40:dd:3d:1e:8d:f5:ba:b0:ee:97:ee:0b:b4:f6:c7:26:3c:87:
cd:b8:cb:58:ec:7c:6e:d4:3a:97:69:b7:69:8e:16:2e:1e:71:
5b:aa:ed:3b:c5:f0:38:12:1e:9b:39:70:24:7b:3d:d3:e4:a0:
dd:a1:60:3d:72:d0:81:e1:9e:05:77:45:4e:6e:4e:c6:f3:72:
16:75:6b:4c:c0:a5:2f:73:f8:ca:ef:3e:21:cf:55:69:7a:d5:
f5:9d:aa:2d:f7:86:a2:48:b2:bf:79:54:a0:ce:ca:0d:ba:e7:
c7:09:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:54:03 2025 by rpki-client