Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: seWMzJOYoz0gz8MjfPbNDtie6UqXmtKhJqoHfdNQHU0=
Subject key identifier: B0:04:A4:61:52:19:19:EA:76:BB:8E:1C:85:85:71:7D:45:43:D3:EA
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 01987A1BA06C4B8B647AD28E6A3E673E7222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 1621
Signing time: Tue 05 Aug 2025 12:01:27 +0000
Manifest this update: Tue 05 Aug 2025 12:01:27 +0000
Manifest next update: Wed 06 Aug 2025 12:01:27 +0000
Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=)
2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: FupPJ6KFQpX6dSbOxk7A4CDPOkeeI5VOs+lcHE+ANeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:a0:6c:4b:8b:64:7a:d2:8e:6a:3e:67:3e:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Aug 5 12:01:27 2025 GMT
Not After : Aug 6 12:01:27 2025 GMT
Subject: CN=b004a461521919ea76bb8e1c8585717d4543d3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:80:6d:fb:ef:b6:8b:04:2f:fc:8f:6d:83:fb:
f8:21:c9:bd:fb:04:f4:23:c2:94:8b:7c:88:13:10:
f8:da:0a:57:8f:93:bb:ff:d4:0c:52:55:b3:df:41:
23:c7:2b:cf:e1:8d:44:5e:5a:55:a8:e4:38:89:a4:
0c:b7:54:13:1a:a3:4e:c3:ad:00:f6:0b:13:4e:d8:
2a:31:84:a3:42:1b:73:63:6a:c0:8d:0a:3e:d3:9b:
f1:3c:c7:f2:5c:88:ec:51:db:0e:89:a7:ee:10:c9:
a1:f6:84:a4:a1:80:de:87:10:4c:ef:13:04:09:1c:
4e:12:22:f0:1a:61:c6:1a:c1:50:f1:8a:ad:8a:81:
06:8f:f8:c9:5d:04:3c:be:07:ef:57:f2:76:6e:aa:
d6:79:5b:99:33:93:b2:fc:82:e8:16:c2:70:06:57:
35:45:ae:e0:70:0a:cf:93:fb:29:b4:06:a0:2f:af:
cc:50:af:f8:b7:b8:90:7e:4a:dc:ad:d4:30:32:02:
3b:4b:68:4d:1d:b5:5c:9c:e2:10:20:fe:c8:c0:97:
e5:6e:46:ae:a1:b7:a1:16:72:9e:0e:e6:37:8f:a9:
a8:2a:db:be:08:f9:03:e0:33:4b:7e:ed:bf:bf:e5:
ef:66:36:e5:12:31:97:17:82:15:f0:67:9e:a1:be:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:04:A4:61:52:19:19:EA:76:BB:8E:1C:85:85:71:7D:45:43:D3:EA
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:9d:a6:1c:6c:96:f4:46:1d:f9:ec:41:11:46:3f:f7:b5:
be:85:7c:a5:f4:a0:07:21:a1:cb:1c:24:72:9d:eb:d4:54:cd:
f7:93:bb:a0:23:88:93:80:23:7c:9c:6e:90:ab:6c:6d:50:6c:
57:10:b7:ea:8b:20:ed:7e:99:0b:dd:43:0c:d0:76:5d:85:e0:
8c:d1:57:38:fe:9e:07:2d:e7:2c:50:26:32:75:21:fe:a1:aa:
62:fd:40:5d:fd:61:17:c9:75:a1:3b:95:cd:ea:79:38:94:fd:
c9:d3:1a:b5:88:fd:05:4a:94:42:64:b3:0e:80:01:f7:7e:fd:
7f:07:a6:01:b8:de:29:f0:88:1a:2a:67:f2:d6:ae:c6:8a:4b:
18:9f:24:4e:27:27:88:44:2e:be:5f:66:4e:e5:35:58:f7:1a:
c5:dd:3c:d3:97:80:79:5e:3f:b7:e6:2d:75:27:24:9c:1e:6f:
db:69:43:30:7e:3b:0c:46:8e:08:6f:a6:85:39:34:3a:cc:c9:
dd:fb:1a:d8:7d:56:9b:82:bc:0c:93:5b:b8:03:7f:87:82:84:
3f:1c:1f:23:3c:20:b4:01:1f:0c:0c:ea:a6:29:f5:6c:78:55:
8f:ce:0f:57:8e:e4:ec:0d:15:0d:d0:28:a5:35:2d:27:5d:e4:
81:d3:2b:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6G6BsS4tketKOaj5nPnIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy
OTdlMjUwHhcNMjUwODA1MTIwMTI3WhcNMjUwODA2MTIwMTI3WjAzMTEwLwYDVQQD
EyhiMDA0YTQ2MTUyMTkxOWVhNzZiYjhlMWM4NTg1NzE3ZDQ1NDNkM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIBt+++2iwQv/I9tg/v4Icm9+wT0
I8KUi3yIExD42gpXj5O7/9QMUlWz30EjxyvP4Y1EXlpVqOQ4iaQMt1QTGqNOw60A
9gsTTtgqMYSjQhtzY2rAjQo+05vxPMfyXIjsUdsOiafuEMmh9oSkoYDehxBM7xME
CRxOEiLwGmHGGsFQ8YqtioEGj/jJXQQ8vgfvV/J2bqrWeVuZM5Oy/ILoFsJwBlc1
Ra7gcArPk/sptAagL6/MUK/4t7iQfkrcrdQwMgI7S2hNHbVcnOIQIP7IwJflbkau
obehFnKeDuY3j6moKtu+CPkD4DNLfu2/v+XvZjblEjGXF4IV8Geeob7eLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAEpGFSGRnqdruOHIWFcX1FQ9PqMB8GA1UdIwQY
MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt
YjQ5MmQ2ZmY0ODNmLzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm
LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7Sdphxs
lvRGHfnsQRFGP/e1voV8pfSgByGhyxwkcp3r1FTN95O7oCOIk4AjfJxukKtsbVBs
VxC36osg7X6ZC91DDNB2XYXgjNFXOP6eBy3nLFAmMnUh/qGqYv1AXf1hF8l1oTuV
zep5OJT9ydMatYj9BUqUQmSzDoAB9379fwemAbjeKfCIGipn8tauxopLGJ8kTicn
iEQuvl9mTuU1WPcaxd0805eAeV4/t+YtdScknB5v22lDMH47DEaOCG+mhTk0OszJ
3fsa2H1Wm4K8DJNbuAN/h4KEPxwfIzwgtAEfDAzqpin1bHhVj84PV47k7A0VDdAo
pTUtJ13kgdMrwQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:23 2025 by rpki-client