Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: iwADX01F6+BebOJd90lnDPciWVDGXVEWZDP4WkFce2U=
Subject key identifier: E0:89:C5:BD:36:28:19:75:25:A9:B2:13:DD:18:45:39:1C:0A:79:36
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 0198D4A7996A6817B9ED1619AA82BEEEF586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 06D1
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: Nf0Y97WoRq7pU_teevRi4FwBAIs.roa (hash: O1xztXnSDxA9BVjGt2O7JPCTRL9a6O2EeAtFUNC9SMU=)
2: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: magMpqTUXxh8tdUG9myBE0N89r5tcl3/QCwRlU1G7BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:99:6a:68:17:b9:ed:16:19:aa:82:be:ee:f5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=e089c5bd3628197525a9b213dd1845391c0a7936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:84:c5:31:cf:f9:15:2d:4f:d5:a3:ae:d2:
c8:96:3a:95:4f:9e:1c:c5:2a:fc:5f:93:41:7b:e7:
ce:03:d2:55:41:e4:15:92:20:5f:d3:54:6d:b4:ec:
88:d7:ab:f8:0a:3f:5e:4f:13:e4:2c:d7:b8:9e:54:
58:2f:1c:23:8b:75:02:8f:fe:56:0c:80:30:e9:49:
04:dd:89:92:14:dc:27:5d:71:f5:dc:89:f8:0d:30:
69:da:0e:ba:3b:3e:bf:87:1a:53:3b:90:b9:b3:41:
e2:1d:d7:cc:54:52:53:6f:59:1c:cd:99:af:51:82:
d7:a7:13:08:08:67:1e:71:76:66:a6:bc:5a:4a:e1:
4c:00:04:f0:30:21:5c:d0:69:cd:c0:61:cf:98:6c:
33:75:12:2f:e9:9a:ed:8c:ec:3b:07:66:ce:27:90:
e6:88:ab:4a:fe:5d:d9:58:79:1c:0a:f4:23:28:39:
d4:9b:16:bf:ff:67:b4:a6:0d:0a:40:61:bb:be:ae:
5c:9a:20:e8:e4:b5:33:df:7c:57:b5:d9:d1:40:10:
e4:cd:8f:9f:31:28:65:d0:98:de:51:56:96:d7:c7:
9e:ab:cc:e3:3a:24:bd:16:78:37:3b:83:4d:1f:6b:
b0:b2:64:22:75:98:40:06:f5:6c:96:e3:6c:89:c7:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:89:C5:BD:36:28:19:75:25:A9:B2:13:DD:18:45:39:1C:0A:79:36
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:44:0f:47:f4:73:38:67:48:11:23:c0:df:f5:83:ae:47:b2:
ed:a2:8d:ee:19:2d:54:9f:1b:8e:a0:3f:60:46:bf:93:8a:6a:
27:cf:ed:11:ec:77:5a:c0:1d:5c:42:0f:a0:fd:11:f1:ed:0a:
71:e1:f1:7f:6e:d3:b0:f5:61:c5:de:9c:27:3b:62:02:15:e3:
ef:2f:50:6b:35:84:86:71:68:19:1c:dd:fe:1a:79:07:cf:40:
2b:17:0e:ea:5f:dd:c5:56:48:17:f7:0c:f6:1b:3d:0d:f2:df:
8d:d3:af:9e:33:89:ac:a9:45:51:90:13:21:3e:a8:bd:b7:a0:
fd:5b:c5:09:cd:1c:2a:84:59:e5:ff:2e:ca:a3:47:98:26:b9:
57:42:7b:91:80:4d:e8:7a:5e:83:1b:99:46:49:0f:37:ba:13:
c9:4c:8c:49:2e:54:cf:0d:f7:c4:f2:62:72:ca:74:82:fb:36:
31:ba:9b:b9:ca:19:f5:28:5c:4e:46:8e:86:ef:13:ca:3f:7b:
3a:39:19:2b:02:d1:6f:d6:5e:73:41:be:15:32:36:77:6d:b3:
36:30:0b:cb:3f:83:30:54:fc:89:07:1c:d6:1e:99:81:84:a3:
12:33:74:05:7a:f3:ec:8e:c1:21:f5:06:4d:7d:c5:03:76:70:
ae:7c:b1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:03 2025 by rpki-client