Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: cePO801GEwMZg3WPD3/PLi5FwAAw91+O1oO64lTTe7E=
Subject key identifier: 8D:3C:5C:35:EE:B0:0C:54:93:19:F6:AD:62:68:7D:00:71:D0:07:08
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 01987CAE2AF12F6C9D810221AD05334BA136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 055B
Signing time: Wed 06 Aug 2025 00:00:45 +0000
Manifest this update: Wed 06 Aug 2025 00:00:45 +0000
Manifest next update: Thu 07 Aug 2025 00:00:45 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: aaqHeDOsvdJhsHo70CoZ9Iq+C1Kndf7Yj1cn3pOdCFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:2a:f1:2f:6c:9d:81:02:21:ad:05:33:4b:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Aug 6 00:00:45 2025 GMT
Not After : Aug 7 00:00:45 2025 GMT
Subject: CN=8d3c5c35eeb00c549319f6ad62687d0071d00708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:1a:7a:0a:7e:83:0b:60:91:25:8f:c8:0a:
51:59:dc:55:5f:fd:5d:64:1b:3d:31:54:e6:b5:d9:
b6:57:aa:ea:1f:6e:d6:d2:cf:c3:21:b6:06:b1:d6:
e7:20:9c:ca:61:95:18:6c:57:49:76:01:e7:5f:97:
2f:5f:cd:a7:d0:2b:11:a8:c7:fe:9e:3e:d1:73:e8:
5e:74:c7:3e:41:17:17:9c:1c:43:20:01:44:2d:52:
d2:c8:e0:bb:c1:d3:fa:49:91:12:4d:f0:f7:0d:f4:
4c:d3:2b:f1:0a:bb:17:7d:ba:37:11:7b:5d:c7:6c:
a3:a0:4b:52:1b:e0:33:7a:26:03:3e:e3:38:2a:32:
c2:4e:00:96:a6:f0:64:b8:c1:e1:39:ac:e9:41:46:
f0:a4:52:d4:82:56:bd:a5:a2:92:1a:67:9c:51:cd:
c7:a5:81:43:16:63:28:81:cb:ed:62:7c:4a:35:f7:
81:f6:69:e6:87:df:ff:f1:fa:ed:47:ad:f3:80:f1:
5e:9c:29:0d:2c:38:15:a6:2d:86:6d:70:5c:5a:2c:
d8:bd:ce:bf:e7:48:5d:56:a6:17:09:04:15:5b:51:
73:4a:6f:8b:67:18:31:3e:49:90:f7:0a:de:cc:26:
d6:90:63:b7:40:f3:47:cb:23:e3:4d:e9:6b:d8:10:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3C:5C:35:EE:B0:0C:54:93:19:F6:AD:62:68:7D:00:71:D0:07:08
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:20:be:67:e5:84:d0:df:44:83:e0:26:4f:c3:51:77:c0:1e:
76:f8:76:e7:9b:d8:e3:eb:1f:e2:5e:f5:36:ba:e7:a0:95:36:
88:bc:e3:e4:0c:2f:96:cd:1f:c9:9d:9b:d1:12:19:af:02:c7:
ef:c7:98:4b:dd:16:99:0b:72:a0:4b:da:46:1c:2a:ab:1d:e4:
69:d7:25:58:50:c2:50:d9:52:30:d0:0d:6f:fb:51:fe:50:87:
52:fa:01:27:f5:aa:44:f2:d6:56:b3:d6:89:3f:28:41:7f:5f:
53:33:df:23:ad:6b:d7:5c:43:22:58:85:39:f0:20:27:cb:39:
00:29:cd:6e:e2:5e:88:3c:46:b6:83:1e:25:f7:7a:1d:98:d6:
87:55:c4:9d:f3:2f:73:11:8b:11:04:71:65:44:06:ac:07:e6:
d9:8a:dc:7c:9c:f4:35:03:29:7d:f3:b6:c7:e0:38:d5:36:50:
1e:86:d4:0c:7f:3e:eb:9c:b7:44:35:f5:0d:3b:ca:ca:bc:25:
cb:05:ff:22:6a:ec:3b:ad:27:9c:2e:6d:5c:b2:1c:45:5f:ab:
a0:05:01:21:19:3c:99:7b:4f:ab:10:5c:af:6a:1a:91:9f:b5:
b4:31:23:8d:5e:99:3b:f4:ed:95:84:d5:4f:f6:19:7e:6f:83:
3b:5f:6a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:30 2025 by rpki-client