Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: dP5CBumBQiZ6WxzDpXETMr482/GpdQ0YX1Axxs0nPRQ=
Subject key identifier: 61:68:37:16:9E:62:D4:0E:3D:27:FE:D1:BC:4B:57:0B:DF:83:EA:FD
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 019874191932C738E186FE138AD72C1460AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 1298
Signing time: Mon 04 Aug 2025 08:00:58 +0000
Manifest this update: Mon 04 Aug 2025 08:00:58 +0000
Manifest next update: Tue 05 Aug 2025 08:00:58 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: Ufahm41Ut5BMZwUHCa5w5zPLmhWFWdLUcCezNscWFqk=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:19:32:c7:38:e1:86:fe:13:8a:d7:2c:14:60:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Aug 4 08:00:58 2025 GMT
Not After : Aug 5 08:00:58 2025 GMT
Subject: CN=616837169e62d40e3d27fed1bc4b570bdf83eafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:f4:ed:54:1a:65:04:7d:fc:a2:08:c1:f1:
aa:10:41:e7:5a:d6:99:18:02:1b:36:97:ca:b1:70:
11:fd:34:57:83:01:bb:3e:48:f2:a0:f1:62:ef:ba:
9c:15:f6:a5:9e:c8:c2:82:ce:4e:87:76:8f:61:a1:
a4:e0:de:2b:5e:41:01:88:6c:9b:a9:73:3c:f8:a5:
df:f4:6d:f3:3f:3f:61:21:ff:c5:0a:64:52:17:85:
e2:0e:19:1a:93:4e:c1:77:e6:87:93:96:ee:5e:5d:
2a:7e:6a:2a:ea:13:af:e0:58:4f:f6:67:92:aa:d7:
ef:e8:1a:17:a8:4c:0e:02:1d:ba:77:b0:a4:fa:9b:
9e:ec:07:1c:ec:d8:b5:5b:4e:d4:74:2f:43:ac:2d:
fd:c8:83:1b:5e:ca:a8:dc:7a:84:9a:cc:6e:e7:ae:
33:fc:fe:64:aa:dd:b0:d8:b9:8d:8f:88:cd:2b:14:
05:ef:9c:66:db:c4:26:d7:60:7d:bc:34:d2:47:43:
80:5a:8b:ce:d5:be:70:9e:53:55:b7:ba:bd:46:4e:
39:9f:1d:bc:0c:33:67:74:b4:d0:2a:1c:da:b2:50:
09:0b:b4:16:83:c6:49:95:10:c3:04:41:a3:93:5d:
62:6c:f3:ba:89:ce:f5:6c:43:79:5a:06:97:d3:bd:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:37:16:9E:62:D4:0E:3D:27:FE:D1:BC:4B:57:0B:DF:83:EA:FD
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:da:4e:d8:ca:b1:5f:66:aa:06:47:cb:1d:ba:97:03:47:e0:
ad:fa:da:d0:45:aa:d9:01:13:75:6b:21:3d:a2:57:67:be:9f:
14:7f:2d:bd:54:fe:f1:fa:2b:ba:11:10:59:f4:59:6f:83:64:
cc:9b:ed:31:6a:ea:30:e0:37:ae:6a:5a:0e:9e:9d:23:f1:ec:
e9:8d:4b:5a:9c:b1:7e:1a:95:35:cc:28:ab:b9:19:35:52:85:
da:e7:e5:46:b0:00:e0:cf:9b:fa:e3:32:2f:b9:d8:e3:62:f0:
53:83:7a:ab:47:31:55:8a:f9:c0:f6:5d:30:0e:df:3f:82:cb:
a7:fa:8a:2d:6e:a5:11:38:fd:38:58:d4:73:c0:af:5e:0d:f2:
aa:d2:90:7b:57:bf:60:e2:7b:5e:49:93:1d:e7:1f:ec:7d:03:
71:c1:6a:4e:d6:d4:53:3f:6c:93:57:c5:25:4d:a9:c6:99:99:
a0:01:9e:b4:40:bd:a2:e9:83:57:3b:65:0b:c3:49:ad:21:c8:
7b:71:8d:51:7e:62:60:f3:d9:be:d4:13:b3:e8:dd:b6:5a:69:
cb:76:b8:5a:1b:a8:27:11:23:40:06:78:f6:db:b4:26:ad:f1:
58:c1:c1:46:ca:60:c7:5c:a5:2d:8b:a2:5f:17:92:f5:c5:cc:
58:76:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:53 2025 by rpki-client