Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: dLweX6pu28/3Qhedi+hCZfjMh7jd2kzaRYDMGx0pawQ=
Subject key identifier: 83:8D:AC:0B:08:4D:41:70:B2:77:71:AF:C7:E4:BF:68:4B:F2:36:EC
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 0198D773896A3EA391AF7DE6B47948837D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 0BBE
Signing time: Sat 23 Aug 2025 15:02:09 +0000
Manifest this update: Sat 23 Aug 2025 15:02:09 +0000
Manifest next update: Sun 24 Aug 2025 15:02:09 +0000
Files and hashes: 1: FXCR9Lc6KgRx_HPpZhjXnE6ILJY.roa (hash: TawwcEelbsmmDw/jX+MvcIQud2NnCnis9eNEGbrjubs=)
2: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: cClZJYFC4fx32TPGaBfMbmksNcKdkdZmvrd4Xj8dmwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:89:6a:3e:a3:91:af:7d:e6:b4:79:48:83:7d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Aug 23 15:02:09 2025 GMT
Not After : Aug 24 15:02:09 2025 GMT
Subject: CN=838dac0b084d4170b27771afc7e4bf684bf236ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:6b:c0:ce:37:08:64:2e:d0:27:45:90:9f:
34:fe:22:a6:3e:91:7b:d3:b4:51:0c:3b:2e:2f:fd:
9a:03:93:da:37:3e:ec:c0:72:3f:b4:aa:75:67:7c:
14:23:8e:af:49:60:14:49:c8:df:cf:59:7d:65:03:
cf:b6:e6:7c:22:29:87:e9:c3:e1:c4:76:09:0d:b9:
90:6e:d9:28:d9:7d:c6:30:1d:e6:91:9d:cd:8e:c4:
04:47:9a:6e:d1:37:c6:fa:f7:93:c0:43:84:4f:8c:
18:12:a9:4e:72:b8:b0:60:f1:63:f0:40:ed:e3:f3:
cf:60:e9:0a:a3:be:4c:c4:ab:2d:d0:14:47:73:a8:
e3:07:fd:3e:f0:d7:27:eb:78:8f:3a:bb:d6:0b:d4:
a2:7e:e3:31:c2:4e:98:1f:e7:a5:c1:49:10:2c:c1:
8b:78:f2:29:d3:5d:0e:c3:b1:7c:35:e8:cf:32:99:
04:a2:ab:08:1d:cc:a5:a1:72:ea:33:0a:bf:88:01:
bd:13:b9:cb:c5:8d:d1:49:d4:f3:38:48:0e:57:30:
01:fd:dc:c5:ff:6e:07:9d:c5:e0:62:0c:f2:26:de:
1c:b3:fb:5f:56:10:18:d6:8a:28:d8:67:c6:52:d2:
58:27:7d:81:2a:19:85:a6:8c:02:c9:52:5d:51:5a:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:AC:0B:08:4D:41:70:B2:77:71:AF:C7:E4:BF:68:4B:F2:36:EC
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3d:0f:0d:de:b6:e2:1b:bb:a2:8d:88:53:e5:38:eb:cd:9a:
e6:a9:b8:53:63:f5:8e:f3:46:88:78:72:c1:6a:60:47:9d:4c:
95:3b:f7:6e:41:29:11:5e:56:5f:8c:d8:53:34:b5:b1:86:b5:
01:f7:c4:a3:6f:cb:c7:a1:1a:ad:2d:ff:cb:9b:23:17:98:fa:
53:b9:28:ba:a6:e1:6d:b1:63:2b:29:cf:dd:73:d9:1f:c7:47:
a0:1d:a6:62:75:ac:1f:31:9d:5f:a4:66:13:80:ba:b1:59:87:
f4:15:8c:7c:90:ca:6e:e3:b5:6a:2a:ba:06:4d:59:69:e2:c5:
bb:73:bb:49:d0:61:1b:1c:32:e7:5c:54:fc:14:b5:49:7e:a7:
85:08:41:54:90:50:c9:4e:5f:10:e1:90:0b:9e:8c:bc:82:05:
72:02:8f:de:6f:ac:f0:ce:4e:b1:5b:e1:87:5b:69:ad:8e:4c:
32:7a:ca:e1:b2:00:1c:f9:74:6f:da:1a:d9:69:96:4b:2a:e0:
0a:86:98:50:1d:95:8c:96:77:bf:bb:ee:b8:4d:bd:b3:2d:68:
08:96:3e:60:6e:1c:8a:8a:6d:82:79:b0:af:00:93:a6:aa:ae:
5e:1a:1f:49:d7:b2:11:d5:e1:03:16:f9:82:8d:6f:19:b2:92:
69:79:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:58 2025 by rpki-client