Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: Z+Sc2OCZZfTHgmJz8qCB3YEG0BmicJ4VJ8iiSpKqJ+g=
Subject key identifier: F4:DF:9D:1A:7B:7B:DC:CA:07:B7:7E:D1:E0:AB:2F:F0:2D:D0:D5:1F
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 0198D4A7853DD43E95DA0C5FC3A676EE6A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: sKarxrcp3TYbOa1lj25cFgvPm1M.roa (hash: hzIQC+6QcM0KejfwF/J95Pb7an1/Oimflf+mKhKCBQI=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: k9dmq2v4hxjwUX425KC7kmJgnGNbaBr/XJM6PcqmsU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:85:3d:d4:3e:95:da:0c:5f:c3:a6:76:ee:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=f4df9d1a7b7bdcca07b77ed1e0ab2ff02dd0d51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:4d:2e:9f:0a:eb:d5:80:28:b6:b6:42:41:
76:7c:93:be:58:e6:be:d6:24:04:5c:02:dd:b0:b6:
c4:bf:12:8b:d6:98:80:cf:5b:32:0f:41:3d:ed:ca:
69:a1:fd:89:bf:51:2d:9a:5c:cc:42:ff:f9:8e:c2:
71:84:66:c2:7a:b1:5d:2a:ca:3d:83:27:2e:14:e7:
eb:a8:d9:1a:65:1b:d7:8a:10:a4:5e:0b:15:f6:8f:
4f:80:4b:ff:c4:52:e4:33:08:92:03:65:23:63:af:
f4:31:b1:70:d1:08:52:8b:c7:43:58:76:8b:fa:9f:
f6:8c:2a:9b:bd:30:02:1e:47:62:77:1f:76:86:55:
bb:f0:26:c9:09:78:55:84:1b:9c:32:3f:c2:e1:22:
11:7c:7e:09:c9:3a:6e:2b:34:eb:fd:13:14:b4:fb:
60:14:b8:49:f7:e6:b5:c3:7d:1c:9e:c2:3b:37:09:
70:2a:e3:21:5f:a0:69:2b:dd:ca:3b:eb:c3:49:e5:
bc:f5:ac:58:35:b6:f3:6c:46:eb:af:12:97:27:a3:
8d:b7:00:f9:6e:17:77:54:2e:9c:1f:10:73:06:18:
2b:4d:7e:43:67:5d:f7:41:4e:f3:e2:2c:89:73:4a:
d6:47:79:f6:23:58:6e:18:08:c0:4b:73:a0:53:26:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:9D:1A:7B:7B:DC:CA:07:B7:7E:D1:E0:AB:2F:F0:2D:D0:D5:1F
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:d0:fa:02:5e:01:6b:7b:c7:9c:d4:ea:56:c7:b3:88:33:
c7:fa:84:02:fe:67:42:73:ee:49:47:21:87:e5:11:c0:a5:ee:
b2:42:bc:38:21:c2:a0:f2:7a:44:f6:5c:3e:0d:b1:33:eb:18:
61:ee:52:7b:08:33:4e:85:d9:c6:41:6f:92:b4:cf:74:f8:9e:
28:7f:69:e4:44:b2:7d:d8:f0:17:0a:7b:cc:b7:3f:0b:9d:9b:
19:f6:1b:9c:0d:35:03:b1:6a:5c:71:13:27:0f:06:d8:e2:73:
c2:af:77:9d:88:c5:6b:a3:bc:dc:55:aa:98:67:d4:1e:a2:ba:
6e:4b:77:15:eb:73:e4:ae:00:e9:ce:a7:1d:dc:4d:af:d5:72:
e6:ba:5d:a4:eb:d2:ff:74:86:f7:d9:42:a2:1b:f6:fa:7d:ce:
8e:07:2f:fa:c9:2f:05:ca:4c:79:06:bb:73:82:6a:2f:89:e6:
3f:35:ac:5e:ff:ae:2b:5c:95:b1:54:ca:f3:b2:41:d3:f3:12:
81:4c:48:de:4c:71:cc:74:0c:88:cc:63:69:13:95:0d:ec:d8:
b9:be:6e:6c:bb:17:f8:a7:ae:1d:5e:98:c5:82:ef:cd:00:82:
e2:22:1a:e4:c9:fa:8a:3f:6e:f8:43:56:b0:4f:9c:2a:d2:bf:
3f:aa:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:48 2025 by rpki-client