Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: kuTBc+h0sadWK+RPh/wEuXDjHtqUtaATC9f89wPE5eU=
Subject key identifier: 62:7F:B4:7B:51:CD:A6:DE:4C:03:BD:60:2F:9A:EB:84:DD:F6:46:CD
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 019894B864648CFA1D1AC67290B21660BFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0839
Signing time: Sun 10 Aug 2025 16:02:48 +0000
Manifest this update: Sun 10 Aug 2025 16:02:48 +0000
Manifest next update: Mon 11 Aug 2025 16:02:48 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: 76Xum9Oo4CNQAbBBnNlMHriIVQeAAIJ+6OCKlva7CS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:64:64:8c:fa:1d:1a:c6:72:90:b2:16:60:bf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Aug 10 16:02:48 2025 GMT
Not After : Aug 11 16:02:48 2025 GMT
Subject: CN=627fb47b51cda6de4c03bd602f9aeb84ddf646cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:7e:6f:d2:25:77:a4:61:e5:09:e9:61:e7:
3f:72:91:0f:62:d5:89:c4:dc:82:c3:d0:66:0a:bc:
97:74:9f:3b:2c:ed:4b:24:a8:92:35:63:43:ae:f9:
38:a4:60:19:90:4f:a6:b0:91:e5:23:96:f6:a3:21:
a3:42:e8:51:1b:f7:69:35:4b:a0:4a:75:41:87:00:
0e:35:0b:d2:66:6b:00:64:a6:c9:d2:06:f4:ba:d5:
82:ab:6c:05:84:85:93:1d:2c:5b:c6:be:56:e4:de:
b5:8d:6d:fc:b4:89:0c:fd:14:a0:ce:b3:91:4a:40:
b6:38:1c:e0:9b:0c:2f:61:58:f0:2f:53:ff:12:33:
ff:a9:2f:60:c6:6c:ed:2e:b6:8b:85:08:bd:f6:a0:
27:ee:65:4f:5a:1e:a5:17:13:ec:3b:c9:0d:61:72:
34:c2:37:42:c4:02:2a:f2:b7:99:43:4c:5a:dd:85:
3b:ad:55:e1:98:3c:9d:99:b8:5c:13:31:e1:cf:6c:
c0:e0:8f:1a:82:e2:30:f3:b6:22:f0:5a:71:6f:2a:
7b:1e:e8:f2:6b:a3:53:23:4d:32:87:9c:00:9f:19:
3d:18:1d:1a:14:0e:a0:7e:6c:ff:aa:3d:bd:b2:e9:
60:7f:4c:79:e3:e9:6f:34:ce:a9:00:04:02:0a:5a:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7F:B4:7B:51:CD:A6:DE:4C:03:BD:60:2F:9A:EB:84:DD:F6:46:CD
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cd:bf:b0:40:92:47:81:d6:f5:23:ad:bf:1a:8c:84:22:39:
80:2d:3e:a6:9a:a5:90:ec:7b:74:8a:c5:a6:c3:9c:ea:91:ff:
e4:5d:07:a5:0e:46:aa:ef:8d:01:eb:3c:b4:04:75:24:84:ad:
78:45:75:c1:c3:2f:8a:41:d6:86:75:9b:2d:68:10:76:77:2e:
4c:89:c0:b2:0b:84:b5:18:a5:1f:40:fc:db:5d:dc:15:0c:bc:
57:69:8c:f4:76:b6:17:70:47:d0:d1:e4:90:17:5f:ad:ac:73:
df:ac:71:03:49:52:62:fb:52:3c:1e:53:41:7a:c0:8c:32:d2:
29:14:ed:17:aa:62:10:aa:d9:63:30:55:54:78:e2:72:01:3f:
da:38:e5:a1:db:74:25:36:b7:52:bc:c9:4c:c6:8a:b4:cf:6e:
ee:07:0c:47:b2:8e:2d:5f:89:0e:e6:30:4d:5f:58:32:f2:82:
d0:71:8e:33:b1:0f:8c:2b:ba:32:20:4d:ea:f3:af:21:c2:b3:
43:8e:d6:1e:20:d0:3c:a9:16:2f:c0:fc:14:89:4d:0d:78:af:
62:65:c1:81:f5:f7:b3:76:74:bb:6f:68:c4:52:16:48:3f:18:
a4:b0:a2:18:48:da:21:42:7c:79:55:40:d7:fd:af:96:d4:03:
a6:47:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:44 2025 by rpki-client