Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: MdctqxHWZ3s2gm6jgeBnMhf/iQ1Y12fj2e+CTKp4xG4=
Subject key identifier: F6:FA:23:9E:A8:90:4F:EB:F0:AE:C1:52:C7:56:38:7D:61:B8:D2:09
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 0197C64A7E00FCE5D306EC4BA6481753A6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0EAA
Signing time: Tue 01 Jul 2025 14:00:59 +0000
Manifest this update: Tue 01 Jul 2025 14:00:59 +0000
Manifest next update: Wed 02 Jul 2025 14:00:59 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: oubulcoVFT1sGhkv9ojpoLMU6azFer8h69zVHMRPXV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:7e:00:fc:e5:d3:06:ec:4b:a6:48:17:53:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jul 1 14:00:59 2025 GMT
Not After : Jul 2 14:00:59 2025 GMT
Subject: CN=f6fa239ea8904febf0aec152c756387d61b8d209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:34:db:53:c3:a5:9f:37:8a:03:54:80:d3:
64:f3:7e:92:53:b2:4f:cc:0f:d1:e0:98:36:65:c3:
0a:e3:8d:c9:13:4c:3e:ce:b5:9e:c6:5a:05:fd:b5:
0a:14:92:85:c5:f3:d4:0c:6d:1a:96:ef:51:7d:43:
da:d7:d5:7d:74:b8:0d:29:a9:2c:a5:d8:52:1a:f4:
1f:ba:ad:25:6a:5f:c5:2d:b5:ec:21:d1:2e:4a:24:
4b:56:78:75:49:04:e5:7f:b8:19:17:a9:be:0e:34:
43:b6:c2:5e:fe:2a:56:d0:ee:bc:83:a0:ff:40:cc:
7d:5e:a4:b1:e3:ee:8e:0d:4a:07:b0:75:4b:07:d5:
85:7c:08:d8:01:ee:80:11:05:f5:e3:ad:fb:cd:0b:
d0:74:c7:6b:e0:72:af:b9:43:0a:48:d8:61:22:94:
76:8f:b6:5e:4c:d9:e7:20:3f:ae:c8:94:3e:b4:c1:
ea:7a:53:2d:db:34:53:0a:7a:b2:63:ae:b6:fc:96:
c7:cc:5b:a2:c5:ed:b6:19:be:c6:7d:6b:e9:44:82:
9f:10:6d:6a:8d:38:1e:34:b2:c0:64:e8:77:79:d6:
9a:1e:91:9f:04:70:82:e6:09:5f:77:92:fb:52:e7:
6b:91:4a:d2:f0:d1:da:92:5c:89:30:dc:00:97:ef:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FA:23:9E:A8:90:4F:EB:F0:AE:C1:52:C7:56:38:7D:61:B8:D2:09
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:42:6c:b4:01:de:03:3d:e2:67:07:1c:fa:b3:07:a8:c7:3f:
28:bf:9a:b0:ea:1e:10:4d:0f:21:35:2b:ef:f2:38:e0:5d:d3:
08:b6:76:51:a2:37:c3:dc:61:9b:8d:76:44:35:85:fa:79:e7:
5f:54:57:8c:6c:9c:2e:87:07:3a:72:0f:b1:86:14:d9:0f:84:
87:8c:15:c3:65:55:65:a7:9f:86:85:4d:6b:c6:e6:63:dd:1a:
47:bf:69:f4:5f:ee:57:ca:82:26:e9:2d:5f:79:59:0b:e1:7a:
a0:e0:7a:ea:83:a4:aa:d4:f2:f6:f1:4f:e2:e5:27:80:58:84:
5b:c9:68:1e:50:62:e2:c2:d4:55:a6:79:06:e2:16:87:7f:3f:
b3:37:33:f9:e8:11:c1:56:11:c7:73:33:38:b1:78:c6:78:9f:
eb:c3:b2:99:b9:95:9c:94:50:d0:e2:89:88:79:10:6c:69:04:
ff:6f:3c:59:2f:4b:3b:f3:2a:8b:71:83:52:8d:1a:0b:e1:3e:
9c:59:56:3e:41:22:3f:e8:f7:5e:3c:94:b3:4b:27:64:8f:ca:
0a:19:4f:1c:44:87:b0:1b:9f:a6:ee:6e:7b:25:24:d4:6a:96:
af:cf:8a:9a:55:d7:a1:95:bd:df:06:29:c3:63:6a:09:57:44:
f3:c1:ca:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:21:50 2025 by rpki-client