Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: cLb/XDgIEqJja8W4EgdNuF2oaScbFSVAxbz3neVoTXI=
Subject key identifier: 3D:29:F9:7B:83:FA:5A:E0:1F:40:51:86:B1:A7:09:53:6A:61:3D:10
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 019873E1E5660AF82B9CF22DE5ED6331619E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 135D
Signing time: Mon 04 Aug 2025 07:00:40 +0000
Manifest this update: Mon 04 Aug 2025 07:00:40 +0000
Manifest next update: Tue 05 Aug 2025 07:00:40 +0000
Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: 9Eh6dFwpXFjTvJ7I7C80DtZ5LALVa2gmjIIWFrfcPuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e5:66:0a:f8:2b:9c:f2:2d:e5:ed:63:31:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Aug 4 07:00:40 2025 GMT
Not After : Aug 5 07:00:40 2025 GMT
Subject: CN=3d29f97b83fa5ae01f405186b1a709536a613d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:a9:df:6e:52:0e:e8:f5:44:d1:c3:7d:c5:
64:7a:57:c9:0a:27:15:91:81:8a:19:32:a6:ea:5e:
a5:a3:1c:f4:da:29:6a:28:59:2d:6d:d1:bc:63:3b:
48:72:11:32:8d:d3:58:63:93:ae:ed:97:33:96:f1:
2a:9b:52:2f:13:ed:52:a7:68:6e:11:ca:b2:23:fe:
86:35:0b:71:c9:7a:5e:60:f9:bf:4a:63:50:48:f1:
cf:2a:19:62:b2:92:ba:21:46:ba:69:cc:aa:a4:33:
6c:65:5d:3c:8b:a5:66:5b:f6:cb:88:34:0d:d0:11:
6a:a0:29:b6:4c:bc:c4:df:6a:53:fb:08:cb:01:d0:
d5:15:46:a9:68:b5:58:bf:4b:ad:1b:65:df:d0:bb:
e1:2d:c7:cf:c3:04:74:e8:18:1c:cb:b4:da:ad:8e:
d9:79:d6:01:97:8b:5d:79:2f:87:a7:96:55:a4:74:
d3:3f:46:66:20:1a:f0:4c:76:2e:47:8f:f4:32:e6:
94:3f:85:2d:79:e0:c0:56:2d:c5:a1:93:90:58:f9:
54:12:01:1f:8d:32:28:d9:46:ec:9d:43:ca:53:83:
76:f3:17:e0:9e:02:f1:aa:9f:a2:f2:fb:f4:a1:86:
e4:12:b2:5a:f2:ff:f0:86:7b:89:60:4a:c8:be:60:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:29:F9:7B:83:FA:5A:E0:1F:40:51:86:B1:A7:09:53:6A:61:3D:10
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7e:d1:14:e2:03:3b:8b:5d:89:30:15:fc:78:d0:e1:4d:40:
27:1d:60:75:c2:6c:31:75:b1:78:a6:02:7c:7d:2b:04:24:4f:
b9:a2:7f:9d:9d:d3:bc:3a:cb:da:34:93:f6:35:26:5d:0d:2f:
40:ba:90:38:89:32:47:e9:c3:9a:a1:5f:b5:15:01:17:de:6b:
c9:f5:e7:e7:e4:7e:55:80:c8:f9:7a:7b:d5:6c:f9:d3:74:73:
b4:11:ba:2a:ee:73:35:b3:fa:f1:be:4b:ab:f8:da:eb:dc:54:
7e:dc:85:db:f9:86:0c:1c:7a:9e:c3:2d:d1:59:1f:71:d0:22:
7a:6f:d1:25:e3:74:c2:eb:ed:50:56:5c:5e:75:f1:34:71:5a:
62:85:9c:e5:cb:af:8d:54:ea:d3:31:b6:44:13:21:e0:e7:af:
e1:1e:59:a9:b3:65:61:d0:fa:e2:24:ad:a9:3d:51:a1:d7:ee:
fc:fd:87:f2:5b:df:a8:aa:36:b9:2c:2c:5e:80:67:e4:02:f3:
51:4b:db:96:a2:d6:11:79:41:f0:4d:d8:df:80:17:88:17:28:
dc:fb:23:15:49:9f:98:72:e1:f1:af:56:c0:9d:b5:93:f0:fe:
40:6a:9e:59:80:7f:7f:23:c0:cb:4f:24:5e:c8:25:a8:2b:4a:
ac:a9:8e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:55 2025 by rpki-client