Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: I63iU2K+VSTCLuBSkhMGx6EgX2v6Jtr9dDY8tgt1xbM=
Subject key identifier: D0:22:9A:14:61:D9:63:84:E6:D9:8E:D3:02:E8:32:5F:DF:82:A0:F3
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0198D7735B565540C69CEB06B5389B3F29A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0FEA
Signing time: Sat 23 Aug 2025 15:01:57 +0000
Manifest this update: Sat 23 Aug 2025 15:01:57 +0000
Manifest next update: Sun 24 Aug 2025 15:01:57 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: J9SmXJV+ot2qdexPHgsaUDoF+nU3PObcGuP+2LLAaP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:5b:56:55:40:c6:9c:eb:06:b5:38:9b:3f:29:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Aug 23 15:01:57 2025 GMT
Not After : Aug 24 15:01:57 2025 GMT
Subject: CN=d0229a1461d96384e6d98ed302e8325fdf82a0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:e8:61:9f:7f:12:cf:f7:0c:45:c2:44:70:
c4:60:64:41:28:84:15:25:9e:c6:1b:8e:ca:cc:79:
a8:19:99:bd:a2:f7:b2:fc:e3:b2:82:8f:07:8a:3c:
ed:39:d7:cc:48:a2:37:62:d8:ab:44:27:e8:63:69:
e4:e0:e8:6d:ff:c2:a8:aa:55:44:40:06:fe:49:81:
a6:da:9b:3d:8e:ab:36:af:c1:f3:ab:5e:5f:01:38:
4e:9d:b6:f6:4a:c9:81:32:af:0a:19:07:dd:5b:cd:
10:a2:e8:9e:8c:77:3f:09:5b:7d:fc:3c:1e:ec:45:
63:1b:49:f3:e7:da:e0:26:a2:70:15:0e:d7:7d:36:
37:d0:60:d4:46:d4:80:38:ff:d2:17:4a:17:38:1f:
5b:4f:47:e7:40:82:31:a1:2e:b3:aa:67:0f:bc:ac:
99:34:5c:2c:7f:0d:82:d5:5c:72:8d:fb:11:b5:51:
da:d7:19:22:bd:2d:17:5e:d4:e2:39:bd:40:78:a3:
40:de:7c:e5:43:c1:ac:d9:69:5e:1f:cb:9b:2d:b6:
9f:0a:56:51:8b:07:fe:be:48:b9:6b:40:18:48:fd:
0e:14:89:c8:c7:28:9f:e8:3d:7e:d9:a3:e8:9f:a0:
d6:24:b9:9a:25:12:89:ce:e6:0d:2b:40:48:49:e6:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:9A:14:61:D9:63:84:E6:D9:8E:D3:02:E8:32:5F:DF:82:A0:F3
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:f3:48:3d:91:a6:6d:30:5c:77:71:25:8a:66:21:9a:8a:
7e:41:6b:fb:f2:50:d8:8e:05:4b:29:e0:7a:96:1c:f8:b5:e5:
ab:de:c0:af:38:34:ee:4d:92:09:af:fa:ea:61:78:48:81:75:
d3:1b:04:5e:4d:98:59:89:91:d5:2e:92:bf:17:30:6a:c1:e0:
d6:50:15:5d:48:0f:ea:4a:92:9a:ea:45:ef:c5:13:04:c4:7c:
34:f5:e9:0f:10:c6:1a:07:36:88:e7:c6:b9:29:f5:aa:d3:e2:
54:d8:31:11:17:21:a9:52:5a:50:0f:fb:21:bf:5f:b0:24:01:
25:c6:9d:1f:16:3b:41:d2:cd:f6:20:82:ff:5b:8c:c7:09:03:
7c:c6:2e:9d:f6:39:7d:e4:a4:41:a2:ab:a7:4f:a2:8c:0b:30:
32:5b:83:06:0a:e9:41:0a:50:19:6b:52:ab:40:c3:16:da:6e:
24:b3:c0:3b:4b:ff:c3:40:9a:85:40:d2:34:f3:0b:be:e3:33:
43:a2:ea:15:91:f0:41:25:bb:36:9d:ab:3c:e4:78:45:3b:bf:
cf:b9:f0:e1:af:b3:96:dc:c0:50:bc:5e:b6:87:14:41:72:19:
1c:ed:6c:d7:33:54:bd:bb:47:96:ea:5b:ee:ea:b3:8d:81:44:
9f:a6:3e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:36 2025 by rpki-client