Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: bYp78FeqOqPcWVdoqgomTl1v8eQ86bwSG94tIRouykI=
Subject key identifier: 83:1F:57:FF:86:6A:C6:A9:53:41:37:55:81:E9:B0:60:B0:74:9E:A3
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 01989FDF0D2EBBCA41860770BFDEB70AA64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 06F2
Signing time: Tue 12 Aug 2025 20:00:51 +0000
Manifest this update: Tue 12 Aug 2025 20:00:51 +0000
Manifest next update: Wed 13 Aug 2025 20:00:51 +0000
Files and hashes: 1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: sD0i2MU2jfCE98XNZ6VlYdQGfWp22Tcfvx/9vgnuawI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:0d:2e:bb:ca:41:86:07:70:bf:de:b7:0a:a6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Aug 12 20:00:51 2025 GMT
Not After : Aug 13 20:00:51 2025 GMT
Subject: CN=831f57ff866ac6a95341375581e9b060b0749ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:4b:b2:d1:46:dc:f9:a5:01:26:fb:04:60:
c2:2e:49:70:7e:a3:c9:3b:84:2d:ea:11:1f:15:f3:
2c:92:3e:12:6a:b8:d3:a5:0e:c2:3f:b0:70:13:2a:
1a:76:2a:2c:2d:44:00:81:86:1e:a6:16:8d:b6:45:
6c:a1:00:06:4d:ba:59:26:3f:84:25:a2:bf:6c:39:
8c:d8:db:86:a7:42:50:21:70:44:b3:75:4d:d9:58:
f0:02:91:a2:4b:68:9b:35:45:30:ba:c5:84:69:91:
c0:d2:6b:25:81:36:49:1d:8c:82:d3:c9:f9:45:27:
8e:5f:4f:d7:a0:0a:8f:f7:d4:31:a4:9e:37:27:76:
0d:a5:9f:b9:85:8e:1d:af:7c:5b:5b:77:76:80:bf:
f4:62:e3:5c:ea:bf:35:d2:0e:13:2f:4f:6f:48:c7:
9a:7b:ff:a2:66:c3:a3:fb:5d:74:7c:71:57:a9:3f:
84:fe:03:d6:53:39:8b:e8:33:42:de:76:5b:b6:b0:
24:a7:9f:21:22:94:30:df:ee:d4:c1:91:df:a1:fc:
59:4c:41:1e:13:35:52:7c:23:f6:51:24:a0:78:85:
b5:98:ec:3e:17:57:c9:2e:bb:07:9c:24:28:99:09:
aa:02:5d:16:53:bc:79:2d:d6:78:76:05:71:a4:21:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1F:57:FF:86:6A:C6:A9:53:41:37:55:81:E9:B0:60:B0:74:9E:A3
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:97:c2:50:a9:9a:95:fd:67:ed:a8:2b:8f:e7:08:31:ed:
7d:4c:80:48:b7:36:14:07:88:0d:f4:3c:68:07:7d:4b:db:f1:
c2:96:7f:91:fe:24:26:d1:9a:f3:71:8c:98:a6:07:54:9e:b7:
14:50:01:0d:14:10:87:d4:1c:7a:1b:b3:fb:94:70:3a:8a:70:
fe:e6:4f:58:3b:37:bf:97:75:9b:68:64:8f:ca:7f:36:93:9b:
74:28:2c:a3:f6:e5:94:fa:ef:00:2b:1a:f7:d6:30:fb:03:81:
db:6a:46:d5:e2:43:6c:66:9f:26:a3:b2:6c:29:ae:12:ba:1b:
6a:66:17:d4:9e:b4:77:30:3b:06:72:c3:4c:ae:d0:32:98:9c:
1f:c2:dd:1e:ed:3c:bb:aa:a1:69:58:1d:3b:f9:cd:0a:49:94:
64:60:ac:f8:b7:e5:b4:9c:07:1c:14:f9:38:99:d8:5f:b8:05:
fc:b1:b7:94:33:78:fe:5e:64:14:ae:9a:11:e7:32:83:37:61:
42:85:4f:1d:a5:60:41:bb:a5:1e:c9:00:dc:04:cb:93:7a:d6:
65:1b:96:c5:00:dd:cc:d0:92:2d:d1:d9:6f:f4:eb:4a:5b:a7:
a7:ec:1a:f0:88:4f:bb:4b:48:db:9e:4b:a9:e8:bc:a6:53:9b:
08:5f:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:51 2025 by rpki-client