Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: 55XCCqQJrYD0q612322Yj8X52KsU1UYjRdcJ6iqn7ns=
Subject key identifier: C7:48:45:F4:EC:27:94:91:42:67:0E:2B:CF:3A:A8:0E:8F:70:FB:FB
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 019882E79912074FCD4B4252C60B5C609450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0B11
Signing time: Thu 07 Aug 2025 05:01:12 +0000
Manifest this update: Thu 07 Aug 2025 05:01:12 +0000
Manifest next update: Fri 08 Aug 2025 05:01:12 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: IxmM2Up+N+Nj4ywAs9Q7jLhEaMfvNwjcCvhxeBn6YZw=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:99:12:07:4f:cd:4b:42:52:c6:0b:5c:60:94:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Aug 7 05:01:12 2025 GMT
Not After : Aug 8 05:01:12 2025 GMT
Subject: CN=c74845f4ec27949142670e2bcf3aa80e8f70fbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:69:f0:a7:25:64:61:8f:8f:6d:d7:52:59:
a8:f0:f9:d1:91:7b:9e:51:65:63:83:91:a9:6b:0b:
07:e6:09:9e:f1:26:55:a6:68:a7:85:18:36:38:30:
36:ea:4e:66:aa:dc:36:3d:50:a4:58:bb:6a:df:48:
a8:ad:e1:e5:bc:2c:74:a5:b6:94:99:24:ec:83:3f:
08:87:e7:37:01:33:3d:f4:34:91:79:d1:aa:3e:95:
ec:91:3e:bc:7b:fa:ac:2a:5b:df:be:d5:6a:ea:27:
82:9f:ab:a4:12:bf:da:c0:51:33:8d:2c:8e:48:a2:
85:95:c5:2b:39:40:e5:0f:6f:2c:fd:81:07:71:7c:
13:80:50:2a:29:31:f8:fa:01:57:d0:8c:cf:2b:98:
e9:e0:d2:3a:56:ca:43:79:c2:a3:87:3d:ce:18:2a:
d6:4b:cd:57:9b:ca:c9:be:b1:30:ad:1a:f3:c3:2b:
99:d9:71:d7:8a:ef:cd:79:d1:c9:91:62:04:24:fa:
da:9c:f0:4e:31:cd:d0:6f:36:25:25:5a:17:f2:08:
14:c8:e0:6c:0d:c9:1a:7e:7e:c5:f9:62:54:93:03:
fd:8b:b1:db:04:aa:8b:db:76:19:ac:f2:33:e7:14:
38:c2:d8:e4:68:71:d2:a5:24:ce:1a:db:11:19:8d:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:45:F4:EC:27:94:91:42:67:0E:2B:CF:3A:A8:0E:8F:70:FB:FB
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:64:d2:48:7c:4d:6c:14:f1:91:31:e8:93:6d:8c:cb:9b:f9:
56:7b:3c:37:47:2c:78:c1:37:3b:92:7b:01:01:11:70:48:6f:
44:8c:64:ae:8c:5b:9c:4a:15:90:48:bd:11:94:3e:de:5f:d2:
18:19:5c:96:f3:77:2c:88:85:74:18:c8:f3:16:0c:61:86:b5:
81:92:11:03:fe:e7:c0:75:42:e8:31:2f:f6:c7:d6:5f:25:f1:
da:ec:bd:40:03:09:44:17:13:fc:fa:ab:57:3c:7e:29:15:00:
5f:8b:35:e5:ad:94:d3:ea:15:4a:75:33:af:4e:f8:76:5d:1a:
73:8e:52:f9:d6:a4:93:5e:74:c4:d0:41:5c:63:e2:82:5d:fe:
af:3d:07:d5:50:e1:fa:42:14:ce:b6:5c:ad:a9:8b:5b:ce:1a:
4e:db:7f:f0:29:8a:1c:0f:15:88:eb:eb:b1:4f:12:4e:a1:44:
a8:ee:9b:ff:0f:fa:5c:85:dd:38:1f:58:a5:75:23:22:12:e3:
99:5d:dc:18:0b:8b:52:53:1c:d2:b6:e3:44:57:d3:a6:5b:53:
59:35:8f:87:db:46:a3:92:e0:7e:10:1f:64:71:50:a0:3c:a8:
f7:17:8d:fb:81:9a:7f:43:d9:13:98:83:47:d2:cb:be:19:fe:
96:38:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:14 2025 by rpki-client