Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: +eBEwIIdeqr4yEjwCUGfB2QN+F3WpO3zC5YI+h4soKc=
Subject key identifier: E6:86:ED:9B:2C:0F:AC:CB:2B:2A:A3:FF:7B:1A:44:68:E2:DA:C7:79
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 0198D4E05CD23330D5BDC901E34FD0B167D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 1363
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: 01CdWbGh7Iblu72TWh19DMuKsTg.roa (hash: UMhszvGboz7Q5LH0CKudFHnP8+S6bLFVIG5m3eTTe34=)
2: BRkboOx_3fEjuYhSpVsqCaav6Nw.roa (hash: mmNeus1/l5cYym/HIYOW1rRfvqENuE8CN24AevBAmxw=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: MyYganRaxsIdOmF/aLPx+zBoi1HzBt44LPoWTavyMAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5c:d2:33:30:d5:bd:c9:01:e3:4f:d0:b1:67:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=e686ed9b2c0faccb2b2aa3ff7b1a4468e2dac779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:d5:62:1f:80:31:cb:b5:b6:81:c7:e8:9c:
79:4a:e1:e2:e2:b0:44:31:8b:b9:6b:7b:5c:7d:39:
1d:82:10:38:d6:94:bc:59:9e:11:b4:b2:7a:98:bb:
6a:bd:88:11:c9:6b:87:e1:9e:0a:e8:cd:24:4a:c8:
33:bd:67:6c:db:9f:b4:0c:1a:f8:81:c1:1b:1e:94:
8f:06:37:13:50:7e:19:7d:e3:83:20:52:9b:cb:2d:
4d:30:23:d6:50:88:cd:2a:d3:64:3a:d3:45:14:26:
71:e1:0d:63:ea:30:77:45:f9:32:03:a4:f7:b1:55:
1e:23:6a:ab:c8:fc:94:2f:2b:9d:34:83:42:81:06:
26:c5:d7:83:d5:fb:54:0a:1b:90:b2:ca:ac:03:15:
53:84:86:b6:18:fa:b9:49:bf:dc:b5:ec:24:25:50:
e1:39:83:b4:18:9d:71:e0:00:a0:cf:29:bc:f8:1d:
7e:40:11:8a:63:62:b6:7d:8e:18:9e:b6:a1:af:0a:
d3:5a:14:64:67:e1:16:cb:f9:b3:0b:ec:89:70:48:
38:24:a0:81:51:c2:5e:ae:e3:1f:a7:4a:b1:04:72:
0c:cb:68:9a:ac:78:73:cf:dc:d3:a8:04:88:f3:d4:
ad:0b:1d:7a:2f:8d:ce:3d:e0:f4:07:11:89:45:c0:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:86:ED:9B:2C:0F:AC:CB:2B:2A:A3:FF:7B:1A:44:68:E2:DA:C7:79
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e2:8e:2e:33:a6:aa:19:ed:a3:87:4e:b3:d4:d6:cf:a3:48:
c0:2d:ae:27:a9:3e:3c:8e:81:ed:ad:e3:31:ef:8d:ae:3a:69:
6f:72:82:80:2b:62:ad:3f:1a:f3:0b:58:97:00:d8:22:ba:b1:
fd:11:cf:0c:a1:6c:bc:8a:7e:00:32:8e:0d:c0:e8:92:8d:b9:
f6:9e:c8:90:bb:90:c2:8f:b6:b7:1a:64:4e:0b:67:6a:7f:5e:
87:a5:58:0b:b7:30:16:24:56:8d:46:bb:51:4c:fa:ce:0b:96:
a1:e5:96:3a:96:49:62:05:89:fa:1e:da:5d:53:7d:e3:e1:c4:
fb:f5:09:f3:70:d6:6a:2f:91:97:cf:b9:43:dc:1b:1f:38:8e:
14:29:4f:02:3f:36:51:2d:84:c2:b0:d1:0e:58:5f:c1:91:93:
9b:a9:a7:1e:7f:76:de:d2:87:d1:21:33:7f:11:e1:e5:e5:3c:
3b:9b:5b:3c:90:2f:c0:50:26:76:78:04:1a:b1:ea:19:92:f5:
57:87:56:5d:02:df:1d:ff:da:26:5e:90:70:f6:52:1d:9f:81:
75:30:23:13:cd:73:9a:c4:8d:97:1b:39:8b:15:59:09:87:6b:
bb:bc:bc:23:8d:cb:db:41:32:49:6e:27:80:cb:da:1f:d6:4b:
00:41:5d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:40 2025 by rpki-client