Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: HpEYJk4geKS8B+cXVwVBkYRBWHXX1B13EliiUJdK1m0=
Subject key identifier: A1:0D:51:B2:60:BD:99:F1:47:A1:B3:B0:32:13:FD:E6:0D:B5:C3:E3
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 0198D4E07DAED14C32D777DFF222F44D8BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=)
2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: d1jzUrSfY8UDgaswX9PC5139+hGs08rbFWM5eYLVehE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7d:ae:d1:4c:32:d7:77:df:f2:22:f4:4d:8b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=a10d51b260bd99f147a1b3b03213fde60db5c3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:6e:ca:62:55:bc:cf:05:e5:4e:06:d0:55:
15:1e:f0:b9:d8:ec:ec:4d:3a:23:76:ca:46:7e:66:
76:05:8e:3f:52:ef:10:c1:98:45:5c:bb:f1:25:99:
4a:3b:f6:c1:50:28:f1:ca:95:57:fb:f9:b0:6c:43:
d2:1b:95:7a:97:fc:19:f0:78:fa:77:74:78:3f:03:
0e:42:ca:63:57:75:cc:33:ae:10:98:37:47:5b:d4:
9d:dc:16:1e:bf:ec:ae:b4:ee:b3:af:a9:54:98:37:
ee:5a:17:aa:e6:7f:d1:2d:74:07:ad:57:84:47:23:
b2:97:f4:32:a7:cf:59:b3:2a:21:31:0f:f7:3d:95:
ae:48:8e:14:0d:9e:b2:85:7e:8e:08:65:ae:81:c5:
98:cc:94:c3:e9:d9:91:91:1f:61:c7:ce:1f:f7:b6:
4e:9d:2f:b1:f9:f1:f2:4a:fd:b7:90:9f:eb:9a:66:
a8:0a:96:2f:24:f9:1c:dd:48:87:21:17:65:1f:fd:
8b:43:dd:be:46:17:4f:7c:c6:42:fb:49:31:e9:4e:
7b:5b:79:fd:8f:8c:21:7e:82:bc:77:bd:48:d0:16:
6c:34:f2:56:90:25:0a:11:87:2a:15:0a:68:3d:1d:
ea:0e:b1:b6:d6:ab:c9:28:60:a1:f9:3a:af:e1:9b:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0D:51:B2:60:BD:99:F1:47:A1:B3:B0:32:13:FD:E6:0D:B5:C3:E3
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:27:f2:b9:d0:83:27:f3:78:08:f8:c3:57:25:98:aa:a8:bf:
8d:4d:f0:6b:e2:7e:23:3c:30:54:06:ff:af:4d:24:54:e4:56:
14:44:18:5d:06:83:21:06:d6:d9:bd:ec:19:4d:be:ba:bd:3f:
3e:01:f9:8a:37:02:6e:62:c6:0d:cb:3d:75:50:6e:f3:9a:b2:
fd:55:e7:c8:59:0f:94:b6:59:5d:09:bc:a0:f4:55:d0:4c:3d:
62:9b:21:a9:cb:f8:16:f6:85:75:a7:4d:af:64:29:8c:e3:72:
db:4f:aa:4b:5d:b4:75:95:a4:da:50:71:0f:22:84:72:f1:b7:
dd:56:dc:48:ed:c1:88:8a:b7:d0:0a:e1:e8:e1:ec:e2:5d:b2:
b3:d2:b5:14:4f:c6:33:c7:60:1e:1d:da:e1:e1:fd:73:f8:e3:
0c:b3:c9:b6:21:eb:b4:28:57:24:5e:b5:e6:fb:80:5a:43:57:
c7:e4:92:e3:4e:d6:98:56:53:2a:15:80:59:bc:24:e2:8f:27:
b8:ce:c5:95:d5:5b:fb:17:41:9d:85:0a:1c:33:d6:27:e4:44:
e1:35:47:ce:da:71:44:ea:35:81:55:33:e9:47:7f:74:3c:cf:
41:42:50:af:2b:7a:7d:ec:01:03:84:cf:2b:6b:11:12:87:45:
c1:14:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:25 2025 by rpki-client