Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: bWMRndVAIdX3JilxHmAOG4SuVDTMQDoNBdmfwWPj0nU=
Subject key identifier: 38:DD:FF:6D:02:70:8B:68:E9:BC:2E:51:0D:E6:05:D7:EF:18:65:69
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 01987A520B4876F6AD400975318BB345DCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 0691
Signing time: Tue 05 Aug 2025 13:00:53 +0000
Manifest this update: Tue 05 Aug 2025 13:00:53 +0000
Manifest next update: Wed 06 Aug 2025 13:00:53 +0000
Files and hashes: 1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: kXYDd/sJaZBkQL0Uwsxb9Iffwg3ZdfUG9Si5RI9nWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:0b:48:76:f6:ad:40:09:75:31:8b:b3:45:dc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Aug 5 13:00:53 2025 GMT
Not After : Aug 6 13:00:53 2025 GMT
Subject: CN=38ddff6d02708b68e9bc2e510de605d7ef186569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:2f:57:7e:22:55:82:ee:05:89:95:e5:0d:
ce:ad:4d:39:66:ce:b5:ce:25:2a:7e:12:e5:2b:b8:
26:77:26:40:aa:53:d0:2b:6f:2d:82:69:be:8a:e0:
a9:ff:22:af:03:51:dd:ed:c7:74:df:ee:a1:2c:49:
98:7c:a3:79:6d:05:d9:35:dd:01:98:84:d8:90:86:
05:d8:09:fd:bb:9a:1c:7b:f1:88:25:84:5e:4d:c7:
b5:7d:ed:5c:9a:9f:c7:c2:3a:df:17:52:f2:8d:3b:
94:09:5b:a1:11:a0:67:8a:fb:27:ce:d6:1f:09:85:
eb:86:bf:31:93:46:c1:00:56:2e:35:94:82:28:ef:
1b:e4:cb:11:50:9a:55:57:e2:03:7d:cd:94:21:7f:
85:7c:2a:44:81:2d:f1:65:66:41:26:6d:3a:e2:80:
00:8c:ac:3c:11:d6:9a:20:6d:d0:54:53:db:92:6c:
50:ff:8b:8e:de:c7:7d:2c:4f:29:e6:1b:cf:9b:c9:
c5:b9:7b:63:de:c0:9e:2d:e7:aa:8b:13:f7:38:9b:
b6:d4:6d:48:e0:19:4d:5d:5c:ca:ac:ff:52:1f:c5:
2e:78:c5:70:95:fe:ca:3f:aa:bc:bb:a4:f4:0a:9c:
de:e8:99:45:dd:c3:e0:ab:23:57:b2:41:74:c9:43:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:FF:6D:02:70:8B:68:E9:BC:2E:51:0D:E6:05:D7:EF:18:65:69
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:34:14:b2:b2:1b:c6:c2:6e:0d:52:28:8c:11:f2:21:8b:e2:
8c:4a:45:6d:62:70:6c:ff:c4:d5:ff:5c:7d:ed:05:aa:32:00:
3c:ed:c6:73:6c:9f:47:68:0d:07:ae:98:47:b6:33:77:54:ec:
ca:39:9b:e9:35:ce:af:52:0a:87:40:82:7e:36:eb:6a:f5:90:
fb:5f:74:b4:47:a1:26:12:85:45:76:1d:6a:0c:e4:88:49:f3:
9e:dc:d3:ec:26:fc:db:cc:83:cd:49:60:69:9f:52:02:21:3f:
67:95:79:bc:31:2b:70:c0:55:8b:25:79:47:bc:b6:18:99:10:
14:0b:c4:66:60:60:30:76:6c:c6:d9:ab:10:be:73:9a:38:1c:
cb:19:bd:a7:2e:bc:66:7a:c3:cb:51:f2:8e:ca:c8:98:d3:55:
79:78:a4:16:a4:ea:7a:9c:d2:2b:68:07:d2:46:65:23:75:e7:
d8:f3:d2:23:73:b6:bb:69:e2:99:d2:77:42:16:01:29:04:00:
12:0d:52:36:97:98:98:c3:1f:c3:f6:06:77:a2:bc:b2:a8:02:
14:b2:94:42:23:4f:b9:0e:27:da:12:1e:33:a3:eb:3e:2b:9a:
88:cc:12:00:03:41:9b:f2:33:c6:a5:f2:90:89:d5:74:cf:49:
3a:48:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:54 2025 by rpki-client