Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: gPf8FT3V/EDlNR0Dg4+Gf6FcYGpha/V8DjK+S+O95Ys=
Subject key identifier: 3E:DD:7F:16:CC:70:CF:F9:B1:06:E8:4A:4D:72:CD:38:11:F1:F9:00
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 01989DBA0457027B3512A99A8BE2D01C44BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0B08
Signing time: Tue 12 Aug 2025 10:01:10 +0000
Manifest this update: Tue 12 Aug 2025 10:01:10 +0000
Manifest next update: Wed 13 Aug 2025 10:01:10 +0000
Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: gSmEmDMwgFEIqjJ4PL+WQq9Lo+lY9fgNFDJbrD36oII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:ba:04:57:02:7b:35:12:a9:9a:8b:e2:d0:1c:44:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Aug 12 10:01:10 2025 GMT
Not After : Aug 13 10:01:10 2025 GMT
Subject: CN=3edd7f16cc70cff9b106e84a4d72cd3811f1f900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:26:0c:f9:90:d5:90:32:84:b1:13:d1:70:
4b:16:9a:43:d2:06:21:cb:46:11:7c:c5:af:e5:6c:
68:90:7b:a6:67:2e:4c:6d:df:58:33:37:e1:e2:44:
c2:8a:f5:f0:93:27:cc:5b:ea:fe:e2:e4:81:b0:45:
4a:41:37:98:d3:2d:86:79:f6:db:c7:c1:a9:82:2c:
a6:5c:14:fc:fa:72:15:ec:03:e0:e5:c1:97:2f:ab:
d7:95:cc:39:5d:74:b4:b2:be:e3:18:23:88:92:fa:
22:a0:44:1e:dd:87:fc:7d:53:ef:64:43:37:d7:07:
16:a3:1b:8b:8d:e8:58:15:49:04:02:80:59:ab:c8:
e7:aa:01:cc:42:94:b0:b2:62:f2:02:0b:d4:2d:fb:
ad:e9:4e:15:4a:d1:25:a6:bb:a1:98:0a:03:78:9a:
a4:3e:51:a3:de:fc:cc:9e:f8:6f:67:b1:a5:db:42:
85:fb:16:eb:db:b7:f3:7c:ad:7a:81:94:9c:9a:f6:
1e:f6:6d:4c:d0:80:43:a2:c1:6f:f5:5b:30:42:21:
45:80:60:3d:2a:67:c6:55:28:32:10:97:0d:e7:2f:
c6:1f:00:b3:3a:87:96:56:04:a7:20:16:02:52:4f:
d4:42:b6:d9:6c:bf:54:90:44:69:2d:65:1d:88:06:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:7F:16:CC:70:CF:F9:B1:06:E8:4A:4D:72:CD:38:11:F1:F9:00
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:29:4f:5b:b0:8b:74:29:bc:ce:2b:e7:7d:83:a8:a4:8c:
45:ad:f3:2e:26:7a:b8:8a:39:88:f2:3e:80:49:37:57:a0:0e:
54:b3:2f:5a:59:e7:e7:d5:a0:de:24:41:52:89:54:ea:82:0a:
d3:9a:c0:c5:97:73:77:a9:a5:92:8b:95:8f:93:cd:3e:2b:91:
fe:f9:02:83:14:00:a5:25:a0:4e:dd:c5:0f:69:30:91:3f:0d:
3f:09:f5:d3:32:55:ac:93:3c:05:cb:97:f9:4c:63:b7:9f:65:
cb:93:c9:c0:9c:a6:be:9d:da:df:b8:76:4d:b6:79:e6:87:b8:
91:b5:c2:e7:20:9d:83:1b:b1:ed:50:2a:b7:ae:53:b2:87:22:
ca:0b:c3:8c:c3:94:5d:31:80:58:d8:da:49:8a:1c:f4:00:04:
8f:ad:7e:d1:08:d8:06:b8:8d:f5:94:c5:c9:a9:e2:74:df:91:
a2:bb:36:10:86:c0:4b:b1:8e:b9:53:6c:10:54:76:72:12:6c:
b8:08:25:25:38:2f:37:88:a4:b5:2c:0c:68:1d:9c:ad:29:e3:
31:39:c1:47:f1:aa:bc:2b:a6:e1:13:15:e8:f9:98:87:96:23:
e5:62:da:d1:c0:23:98:83:66:8b:99:92:be:51:c2:3f:6f:a6:
0a:c3:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:38:52 2025 by rpki-client