Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: GDeK+ouY5QPDHPnjZuJgOIRsIpjXppHvoNIVJWqpe28=
Subject key identifier: 60:7B:03:8D:44:A3:1A:73:F2:F3:BA:3F:28:93:E3:B4:81:89:50:88
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 0198D583D45BDB36C1CAB9D11BD0D0036C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0721
Signing time: Sat 23 Aug 2025 06:00:43 +0000
Manifest this update: Sat 23 Aug 2025 06:00:43 +0000
Manifest next update: Sun 24 Aug 2025 06:00:43 +0000
Files and hashes: 1: 7NPjy0_LNEtrF1BCG60HRzqdKlw.roa (hash: QFPKpHBMjVle5FlNRbqdK60lHpC8YmYJkA7cV7MHx8U=)
2: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (hash: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=)
3: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: yFgmDlZnKjQJbvawoRhjHF56+7TDRyVQNT7Ks4fqMEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d4:5b:db:36:c1:ca:b9:d1:1b:d0:d0:03:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Aug 23 06:00:43 2025 GMT
Not After : Aug 24 06:00:43 2025 GMT
Subject: CN=607b038d44a31a73f2f3ba3f2893e3b481895088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:03:be:74:03:4f:6b:25:08:db:ec:22:15:
b3:81:c7:bc:73:20:ca:78:45:f4:dc:2c:62:8b:6c:
8b:41:d3:fe:8e:11:1e:8a:9f:ae:cc:03:34:4d:b2:
be:1c:d2:13:ef:5e:ad:ea:2f:3c:0d:cf:db:30:29:
dd:75:28:0b:70:e9:10:c5:86:9d:8e:fa:5c:4f:b7:
63:22:fe:7c:a0:85:bf:f1:00:39:82:59:7c:e1:a5:
b9:a2:18:d9:01:7d:f7:67:1d:d8:c1:cf:05:a9:17:
09:11:76:6d:f2:39:d2:da:fa:55:d8:3f:77:9b:05:
c1:fe:87:3d:a1:a8:f0:9e:93:70:28:06:18:cd:ce:
17:ea:a0:98:29:9c:a1:fa:40:e2:b8:bf:d3:b1:91:
ce:c7:c1:07:0f:f0:bf:cc:be:44:c4:cc:7f:b8:51:
29:1b:9f:40:3c:42:95:24:77:4d:b7:c2:de:9b:ab:
24:b9:b7:f8:86:89:f8:f4:44:28:19:e2:5a:00:9b:
45:0c:63:31:ea:01:19:8a:15:af:ef:00:24:28:46:
9b:79:0f:11:f2:1f:54:f0:96:9d:46:66:ca:b5:d2:
80:e9:47:2b:6b:ff:a6:9f:e7:fc:bc:60:6e:01:03:
d7:98:7c:14:30:ba:5b:d6:41:8d:c5:5c:aa:e1:5d:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:03:8D:44:A3:1A:73:F2:F3:BA:3F:28:93:E3:B4:81:89:50:88
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:f7:a0:8b:c2:98:3c:58:96:3d:02:88:6d:ed:22:4f:31:
38:f3:a1:bf:b2:ba:69:c3:61:33:0e:f5:25:35:de:88:8e:d5:
84:42:21:c6:53:0e:b1:91:b6:bc:9d:b9:92:73:41:f3:63:2d:
9c:c4:eb:dd:e5:bc:86:f7:2c:a0:0c:37:af:29:43:58:65:8d:
f2:c3:84:f3:24:8f:2e:e5:f8:2a:d9:1d:5e:ff:6a:4c:f4:02:
4e:91:b7:bc:92:1a:b5:4d:39:57:77:3b:45:8a:70:fe:77:f7:
ca:1d:46:fa:6d:1f:8c:52:8e:eb:3f:8b:b9:05:e0:33:ef:f7:
6d:35:af:5c:b1:b9:69:8e:32:a6:57:fc:93:51:2e:13:a6:f4:
9c:73:55:04:18:9d:05:34:a4:42:2f:ca:0c:e0:30:6e:d7:44:
50:4e:16:f8:10:20:4e:ef:53:6c:1d:ba:be:75:7d:6c:97:42:
79:ef:c5:1c:7e:c2:ce:d7:92:c1:27:32:0f:c3:16:9a:7e:8a:
e6:c5:d8:ba:02:30:37:2e:ed:fb:32:c0:24:6b:72:cd:4f:af:
c7:44:d3:29:85:71:02:e4:56:c4:c6:a1:4a:a8:1b:bf:3c:0f:
23:36:e6:27:d2:f1:34:87:1b:cb:67:05:59:50:7d:6d:e6:53:
f5:59:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:19 2025 by rpki-client