Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: APtbc0cLpPhv+FZoz2A1c28Tr8nc6lOFamCa5SO6P/o=
Subject key identifier: 6D:2E:58:57:68:E1:94:D0:F2:E8:00:18:00:5E:7E:D0:66:BB:A3:5D
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 0198D4729326E5BE5C71CBB600133B7B8448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 14C9
Signing time: Sat 23 Aug 2025 01:02:15 +0000
Manifest this update: Sat 23 Aug 2025 01:02:15 +0000
Manifest next update: Sun 24 Aug 2025 01:02:15 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: N76NLCNdcp96e1Bj1La0YwgDT5bLjh7Cd1ZiFW8eHxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:93:26:e5:be:5c:71:cb:b6:00:13:3b:7b:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Aug 23 01:02:15 2025 GMT
Not After : Aug 24 01:02:15 2025 GMT
Subject: CN=6d2e585768e194d0f2e80018005e7ed066bba35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:04:ab:5e:1a:e0:57:f3:a5:1d:fb:6e:f7:
04:09:0d:59:15:03:77:49:d6:cc:d1:42:3a:e7:62:
c8:1c:70:f1:a1:aa:60:09:23:91:27:43:43:10:4a:
f2:59:2d:84:13:3e:c2:24:1e:23:78:d8:d0:c2:60:
14:96:e6:e4:36:8f:2b:7a:7e:ed:16:c8:7e:64:75:
9b:18:0e:3c:91:55:44:e6:05:00:2e:70:9b:9e:ec:
34:3e:94:21:e5:3a:f2:66:b5:45:8f:9b:1c:6c:3b:
9c:12:ca:45:74:0a:f1:ee:de:24:0e:6d:4d:12:80:
32:ec:e6:11:85:3b:fb:47:5d:89:59:4b:3a:ca:d6:
fa:a2:e5:be:0e:02:57:5e:85:be:8e:11:12:03:6a:
fd:b8:3e:f6:2e:17:74:50:43:69:d3:53:55:ac:11:
05:f4:90:7d:ee:b0:1f:12:da:3b:df:cd:14:ce:92:
88:1d:2a:c6:19:54:e6:90:6e:4f:ef:c7:fe:4f:30:
7d:8f:7c:4a:63:1e:e5:cc:81:1b:fa:35:21:c5:20:
32:9f:ad:55:6e:06:e9:71:a7:35:a2:0c:a7:1d:ea:
dd:f0:c2:45:71:b9:a5:14:1b:b5:9f:94:f0:ac:3e:
c6:c2:42:8f:d6:08:64:72:e0:a8:20:33:7a:74:26:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:58:57:68:E1:94:D0:F2:E8:00:18:00:5E:7E:D0:66:BB:A3:5D
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b1:71:5f:0c:9f:bb:ce:7f:38:4c:98:6f:98:46:a7:ac:da:
6c:0d:39:b0:41:fa:1c:6b:60:3a:6c:06:7c:5b:b2:bc:08:25:
4c:f7:15:ad:ce:09:06:f9:ba:08:f2:91:9a:bf:4d:00:51:12:
7a:f1:c3:95:a2:f6:0c:3c:2b:c3:ff:34:cd:37:ea:42:06:e9:
65:46:18:9d:3f:45:e2:f8:82:78:57:82:e7:a0:b6:27:c7:c7:
d6:c6:3f:d1:79:0a:c6:03:1b:19:ad:7e:03:12:b3:60:72:fd:
64:7d:55:40:65:4f:ea:70:23:41:69:f8:70:a6:9f:d2:0c:9c:
a5:18:eb:07:c7:9e:29:98:cb:86:e7:b4:30:b7:0c:55:19:63:
7f:25:7e:15:d4:a9:fe:fe:7e:fc:99:3f:cd:1f:48:5a:b7:bd:
51:b3:ac:ad:3d:36:b9:08:5b:e8:b6:9e:d6:a3:3a:58:20:b4:
08:f3:fe:a7:c0:07:4a:7e:db:3c:75:16:56:0c:c6:38:d9:43:
30:77:c1:17:ca:f2:32:93:f0:38:96:d5:7a:07:7c:ab:7a:81:
76:eb:bb:2c:13:46:bb:05:ab:16:2d:92:fd:f0:04:10:9b:4b:
fa:47:95:8e:71:40:de:41:47:f4:d3:4c:61:d9:c3:1f:8d:a8:
3f:4c:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:41 2025 by rpki-client