Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: Dpp5u1VJv/nymZTfxWz7imCX4luGxG6UPiy0oz8Z5QA=
Subject key identifier: D1:42:68:3D:BE:01:46:69:99:13:E9:F1:9D:6F:AC:D7:1D:53:BF:18
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 0198879FA2CC71478E1A9542FB2B8FE2B86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 04DC
Signing time: Fri 08 Aug 2025 03:00:42 +0000
Manifest this update: Fri 08 Aug 2025 03:00:42 +0000
Manifest next update: Sat 09 Aug 2025 03:00:42 +0000
Files and hashes: 1: LatVmLe7_3HhJVu7rsLTHeovBKs.roa (hash: IGGEFB71BgJP92qEL3zGMAOiHYa+Of8dpxdn55D3Bac=)
2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: ONIZFoKlvCZrpVYXvgNTMHWDPf+RxidNVnZwWE8t5Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:a2:cc:71:47:8e:1a:95:42:fb:2b:8f:e2:b8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Aug 8 03:00:42 2025 GMT
Not After : Aug 9 03:00:42 2025 GMT
Subject: CN=d142683dbe0146699913e9f19d6facd71d53bf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:7f:b4:71:49:57:74:9e:69:26:6f:66:e3:
44:01:0e:ce:7b:bf:16:79:8a:3e:11:0e:4b:d9:24:
9e:9c:21:ae:a8:9c:9a:9a:c6:69:2f:6d:f5:a4:d9:
e2:20:4a:7f:4a:11:ee:2a:98:fc:05:91:ba:05:d7:
b0:75:0d:fe:da:47:88:b1:ab:92:4b:fc:61:e6:be:
40:e5:39:df:a9:33:47:77:46:3c:88:61:91:df:7e:
51:5e:bd:1d:51:45:a1:93:06:b8:69:3a:40:25:e8:
e8:46:60:71:81:a3:66:14:71:52:10:2c:ca:dc:95:
cb:62:70:fb:c2:b8:51:34:a2:9f:5d:ab:d4:40:bc:
86:68:9f:cb:e0:1f:f6:e0:0d:19:3b:ba:55:52:45:
1f:15:95:c7:77:19:6b:19:bd:21:7c:1f:4e:dd:68:
fa:60:3c:71:72:c2:77:ae:9c:1c:89:bd:f0:69:71:
1f:cd:69:6e:64:13:7c:a6:db:89:d8:24:eb:83:9d:
cf:23:db:53:75:e1:4b:0d:0c:25:61:da:a2:26:09:
d4:d4:0d:9a:33:8d:2e:1d:34:37:2e:1b:6d:6b:2d:
a5:f9:b1:b4:0d:e1:b6:cc:0f:c7:61:78:d7:83:51:
34:b4:a2:e3:ee:cd:eb:b6:06:b4:9e:74:ca:54:2e:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:68:3D:BE:01:46:69:99:13:E9:F1:9D:6F:AC:D7:1D:53:BF:18
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cb:b1:9a:3e:95:09:14:8a:f0:8d:19:c2:5b:46:d1:88:8e:
32:a1:17:d3:96:5a:69:a3:9f:d0:6d:5b:9a:7d:bf:e5:73:fa:
be:df:f6:f7:38:88:be:df:d4:b2:38:c4:8e:89:96:a5:f5:ce:
52:77:e2:6b:a8:90:65:de:0e:8e:dc:26:32:33:eb:3c:15:92:
cd:e8:c9:da:ce:71:8e:9f:79:bd:2c:e2:52:7a:98:f9:64:2a:
9c:98:39:ac:4b:69:97:e0:77:a5:00:d9:53:b8:a9:4b:45:35:
de:10:c6:23:5f:fa:b8:2a:bb:be:6c:13:63:98:13:19:6a:6b:
7a:2a:9a:9d:4c:5c:9f:48:81:72:ea:ee:53:3e:64:e2:4e:6e:
31:2d:47:ec:3e:aa:96:db:25:48:77:57:dd:a4:b5:53:c8:79:
c4:1c:3a:ed:0a:e7:98:12:ee:e3:42:00:94:19:de:85:c3:fa:
80:f9:40:eb:af:cc:19:7d:9d:33:51:ba:ad:c0:ef:ea:85:d1:
ba:e7:56:89:b1:2a:b4:38:cd:6d:c7:0d:4b:f0:8c:c8:90:4f:
7d:8a:76:d0:e1:76:2a:20:60:8b:7f:66:bf:d7:77:df:1d:5e:
3e:06:ca:88:c3:1c:7c:ff:34:fd:d8:89:89:e6:4b:e2:9c:59:
2c:bb:0e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:18 2025 by rpki-client