Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: F6ETTvD6POvEj4OAgAUuKWy0nrcQuiJF+H4UsjQu4Rk=
Subject key identifier: 77:5A:68:53:4E:4A:18:CD:60:90:57:FE:FF:3E:9E:84:67:7A:F1:3E
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 0198D515C7E0771E591118E01ED446213248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 1356
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: mj2SP2YUf8OOW3PWyfsSenlnbcQ.roa (hash: 7rYL22HIBA9YP5PrLL9E5bTyxJEJdAa2DC73cuHwaP4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: VNuLJZSImVYVHl1Dg50NCHn9JOa7+Me4fJxsPHfNAWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c7:e0:77:1e:59:11:18:e0:1e:d4:46:21:32:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=775a68534e4a18cd609057feff3e9e84677af13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:68:10:c8:92:84:39:88:75:3d:0f:5a:8e:
d2:21:5e:96:0b:02:9d:ff:b4:85:1a:b2:f8:07:3d:
db:95:a3:54:98:e3:91:cc:cf:ea:ef:a7:dc:78:40:
69:86:cd:51:6e:58:17:49:d2:ba:a7:0a:41:47:36:
72:0c:ed:77:7a:81:ea:cb:da:29:4a:32:3e:95:1b:
da:68:b6:ad:c3:c7:74:34:0d:7d:77:b7:55:36:2e:
71:42:0a:17:fd:93:0b:7c:d1:e1:a6:19:31:7b:92:
53:fa:29:d2:d9:4b:ff:f0:1f:91:39:48:a0:61:53:
89:e8:b4:34:76:e4:6e:3d:2d:69:7b:5e:03:57:3b:
06:25:06:a5:49:36:51:ff:09:19:d4:0f:72:d3:1f:
48:30:59:db:3f:39:2e:93:29:90:87:d7:24:b7:ea:
a2:41:55:c6:9e:30:d0:a6:19:e4:30:df:39:ff:c0:
95:38:e8:82:8d:b0:bb:77:17:3d:8c:13:a6:85:ff:
70:4b:07:d1:0a:59:f5:bf:f6:29:cd:3b:bb:5e:be:
3a:b9:95:26:c2:38:b1:1b:98:80:df:96:99:1e:a3:
6d:be:26:4d:67:22:09:fd:57:2a:5e:66:ec:42:4d:
5a:70:40:9d:52:22:77:d0:d9:1d:db:1e:03:97:a2:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:68:53:4E:4A:18:CD:60:90:57:FE:FF:3E:9E:84:67:7A:F1:3E
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f4:f7:c5:a5:12:8b:c7:aa:b7:5d:e7:52:30:fc:c1:89:d3:
49:82:df:2d:b8:90:3c:08:80:b4:5a:f5:c5:89:46:9e:84:38:
bd:b5:0c:0b:07:e1:30:a6:c2:63:bb:c5:f2:6f:b6:e7:dc:4e:
af:62:a1:87:2d:a8:8e:54:1d:d1:22:6e:47:43:ba:97:f8:e0:
76:4d:d6:68:98:5e:c0:d7:fd:81:59:be:22:00:5b:0e:f5:90:
c3:61:cc:f2:ae:59:a6:ce:52:73:b7:ec:9c:df:78:a8:ac:c2:
49:84:ad:e6:f8:ea:8c:b4:1a:d0:60:ae:14:17:6f:f7:ab:6e:
44:c4:0e:bd:36:79:c3:e3:4c:fe:7b:66:2d:dc:a4:8f:1a:6e:
f3:d1:64:36:6b:35:a8:46:57:7d:8c:f0:91:06:69:41:ab:d3:
e7:fc:51:d7:32:f4:ad:5a:a9:49:47:86:e1:cb:9e:76:43:1b:
22:2e:b8:20:8d:6b:34:6c:21:1d:68:b8:b3:83:4d:56:b2:3e:
ff:ae:65:98:b3:af:e9:5e:99:83:94:ef:04:43:21:dc:d3:8c:
fd:35:50:92:44:4b:e2:c9:08:03:35:03:59:c4:5e:76:3d:60:
e9:02:97:b5:e7:88:4b:e6:e6:8b:1a:35:32:4e:8e:4d:8d:43:
03:a8:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:38 2025 by rpki-client