Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: Rh0MKAgP62XbjDkhhttkEHpF7P+zkXHv7pRmhq+1zAI=
Subject key identifier: 88:6A:8A:82:95:6C:B8:33:2B:31:EB:F5:AD:3E:88:85:77:28:48:7B
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 01988E0FB4B719FF7C5F1237B1BEF757A96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 09:00:50 +0000
Manifest this update: Sat 09 Aug 2025 09:00:50 +0000
Manifest next update: Sun 10 Aug 2025 09:00:50 +0000
Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
4: cM2WijieWcfz1get8DBHQkXXH94.roa (hash: YN463PMg+163k21SmND+h8gKso19maJII2obZdv1r0M=)
5: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: FalCzwW5miRqejQwsL56iJDg7sndj50/wJAX8Tpu7co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:b4:b7:19:ff:7c:5f:12:37:b1:be:f7:57:a9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Aug 9 09:00:50 2025 GMT
Not After : Aug 10 09:00:50 2025 GMT
Subject: CN=886a8a82956cb8332b31ebf5ad3e88857728487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:a8:9e:fb:ff:a7:15:91:f0:6f:56:1c:73:
8e:b5:ea:15:ff:2b:8c:a6:c5:74:68:88:d7:18:dc:
e8:70:16:f6:ae:6f:3f:16:e8:35:75:02:b8:23:fe:
28:22:8e:52:a9:ed:7e:2b:39:0f:03:45:4e:d2:81:
0f:95:53:a6:b6:de:f3:46:45:5d:1e:a4:6f:4e:d2:
0e:71:19:70:d7:06:f6:ee:e8:60:dc:2a:56:8a:61:
c5:5b:3d:3f:c4:c2:81:ec:cf:23:ed:eb:4e:7e:dc:
45:ef:6e:f3:34:73:b5:d4:e8:a4:92:70:c8:78:11:
94:cd:02:d6:51:36:1f:41:13:27:51:72:eb:ba:95:
cd:6d:2e:3d:a9:9d:e9:a0:b6:e1:ff:3f:11:cc:18:
5a:fe:68:29:dc:04:69:49:28:fe:f4:69:d7:55:e6:
30:33:49:b0:03:b6:e4:09:39:c6:fa:9c:2f:23:56:
82:8f:74:0f:06:1a:89:21:b9:99:d4:bc:63:7f:3c:
11:60:9c:4e:9b:ee:33:99:67:a4:be:d3:ac:f3:e4:
91:5c:16:0b:1a:91:85:69:95:36:22:c0:2a:18:a0:
8c:70:2a:fe:c0:ab:a8:93:a5:36:2d:f9:e8:89:28:
4b:81:0e:11:38:d2:d4:b7:8a:2b:c6:43:a7:94:85:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:8A:82:95:6C:B8:33:2B:31:EB:F5:AD:3E:88:85:77:28:48:7B
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6e:54:2c:fb:7e:13:ca:ca:2c:96:3d:e9:23:ea:e4:fa:a0:
6e:e9:09:86:62:d8:bd:4d:ac:5c:7a:7f:f8:0a:08:73:f1:f4:
a9:f7:a0:9c:33:f8:cc:ec:53:db:da:8f:ad:04:eb:59:b5:bc:
4a:b4:5a:18:90:0f:b5:44:75:b2:6f:44:e8:9b:6b:ce:07:3c:
fb:6f:80:01:5e:6e:c6:ca:38:9e:8c:bd:55:ff:69:92:8d:81:
80:e8:1d:c0:82:84:fc:d8:bc:ee:98:9d:6c:8f:6e:e6:bc:7f:
a1:6f:41:20:2b:3b:84:f4:01:77:44:03:46:7c:1a:5f:81:e7:
29:b5:45:27:69:fe:30:60:d8:bc:02:ea:7e:c7:8f:b7:8d:f3:
c8:c3:48:5f:94:b9:25:67:2d:92:6c:d3:77:9e:dc:bd:ef:f8:
97:95:96:e6:f7:3e:b1:7d:80:32:9d:a9:b5:f4:59:a9:55:fe:
33:36:e5:92:6b:47:8f:69:51:39:68:bc:9c:97:c9:3e:81:12:
29:fd:a6:2b:89:fd:f8:fb:e8:49:fe:9d:72:fd:1b:f2:51:7f:
d7:9d:0e:fb:72:88:32:61:4e:c4:6f:03:e0:d7:d6:99:72:c2:
53:ae:8d:18:00:85:b5:f8:16:03:24:c7:7d:8d:1b:ba:ac:e6:
da:2d:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:09:00 2025 by rpki-client