Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: 1HwmYdYK8efEXamXZrOP/8iHkGVtceYYOgQdChPMfnQ=
Subject key identifier: 71:F5:D5:A0:11:60:98:AF:99:DE:45:DA:37:0F:C6:F5:8A:E3:55:EF
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 0198D4E09762F158703601D7D6930DD50B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 0504
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: LatVmLe7_3HhJVu7rsLTHeovBKs.roa (hash: IGGEFB71BgJP92qEL3zGMAOiHYa+Of8dpxdn55D3Bac=)
2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: kdbd78oZTKxBur1gCJpSbghWV3aiPZbvQF+0SPV4T0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:97:62:f1:58:70:36:01:d7:d6:93:0d:d5:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=71f5d5a0116098af99de45da370fc6f58ae355ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:83:d4:f8:0a:dc:ee:f2:03:0a:59:50:f5:
1c:48:ff:6a:01:5d:5f:b3:2b:55:e5:68:4a:a9:e6:
e0:1d:20:6d:fb:f9:05:41:26:8a:3b:bb:22:68:c8:
58:5d:38:36:f8:47:b4:c5:7f:36:dc:48:31:8f:ef:
33:c9:4d:7c:e4:f3:4a:3d:bd:c1:65:e7:33:08:ef:
71:9d:2a:65:2a:9d:62:a2:25:78:95:aa:ee:90:76:
52:5a:79:87:f0:98:d3:e7:f3:1e:2e:0e:a3:fc:0a:
2a:07:ff:07:bf:88:b8:e1:ad:bb:79:19:4f:fb:ae:
a9:55:92:80:26:19:d1:38:84:45:72:cf:21:7e:39:
84:b1:18:ef:9f:a2:61:7c:ed:5b:a7:5b:ae:42:f0:
ca:b0:d7:8d:87:bd:43:93:91:94:ff:33:88:9e:bb:
3d:8c:a6:f0:13:e6:e6:1b:61:a7:3b:f3:ba:3e:ca:
ea:e2:f2:1d:ae:49:30:3b:fa:25:c2:cf:11:25:df:
0e:fe:d7:7a:7f:e9:36:8c:d5:b3:d8:b3:9b:4a:d0:
81:d1:7b:f0:f3:03:15:7e:90:fe:f0:82:d5:41:21:
de:ef:80:bd:49:bb:af:3a:f4:fe:34:85:25:19:aa:
50:5e:2e:02:f7:47:13:cd:15:2e:fb:e9:c2:f3:5a:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:D5:A0:11:60:98:AF:99:DE:45:DA:37:0F:C6:F5:8A:E3:55:EF
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fa:7f:ff:9c:2c:3c:3e:fb:df:87:b6:68:dc:38:22:82:35:
a2:22:f4:79:ee:0b:73:9b:91:d1:a9:23:3f:6e:63:96:fa:18:
24:99:65:7f:01:b9:8b:1e:69:f0:38:a6:75:f6:23:5b:47:29:
33:53:4f:d3:6a:91:b4:fe:45:95:59:02:de:d6:ef:4d:fe:3e:
15:17:ce:ff:5a:44:cd:61:37:b0:a3:3d:fa:46:3d:5c:3b:93:
21:d7:9a:61:25:ee:68:f5:0d:ad:2a:5b:a4:6d:b3:29:59:9f:
2f:51:be:85:30:8b:96:7b:6d:51:cb:9a:89:f5:08:6a:f0:8b:
13:57:51:90:b4:8c:f3:7f:3a:59:79:96:e8:34:74:13:f6:88:
78:4a:70:dd:34:ad:ca:73:14:c9:47:a5:51:c4:da:3c:fa:03:
e7:54:e4:29:cd:fe:a3:db:b1:5f:30:26:4f:65:2f:19:12:cd:
f8:9c:f9:fd:d3:27:a4:c0:f3:0b:d8:5a:d4:24:42:2b:09:0b:
2a:b3:7b:ed:19:85:1b:18:88:3d:6b:87:01:55:56:a9:f0:0e:
67:32:69:6d:4e:f9:f7:81:3f:95:b8:d5:a2:f0:6b:1d:54:37:
c6:a3:b2:aa:34:66:40:67:89:cd:cd:09:79:56:4a:40:4e:fd:
50:31:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:44 2025 by rpki-client