Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: SOj9rRe4060Ui6TGLqhXyw7izs2bS9iROS15qcZU1bY=
Subject key identifier: 2D:80:22:66:E9:FF:CE:64:16:19:02:CF:E9:25:A3:06:17:96:AC:C6
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 0198D5837E09B0BAEAA93F78AC67DCDB8AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 056B
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: Cqt5FAHu48PTHcvANBPAxvwQjbNSwuQZoRkDYqkw+lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7e:09:b0:ba:ea:a9:3f:78:ac:67:dc:db:8a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=2d802266e9ffce64161902cfe925a3061796acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:88:28:f3:0c:18:34:a0:e3:db:e6:6a:f1:
e2:b2:27:be:a0:9f:10:e6:11:ae:9e:12:04:68:1b:
97:34:d8:66:6e:50:bf:45:80:b7:47:f8:92:19:a1:
ae:a7:44:bf:4f:d6:0a:d3:05:13:1c:f1:be:b1:7a:
d3:b1:9e:8d:00:d9:a4:c5:c3:92:c0:73:99:13:70:
0b:fc:21:c1:3c:57:2b:6e:3d:f9:a9:be:d6:2c:66:
7f:24:71:db:05:27:51:12:28:8d:03:07:ca:63:c5:
7b:b7:91:2e:ff:3f:88:03:61:32:20:9d:a9:17:d1:
34:62:51:0b:37:c8:ae:e6:d3:d9:d7:dd:08:fe:f0:
b9:b5:61:59:1f:94:a4:bf:21:75:f5:42:a2:ee:68:
c2:7b:38:77:0c:3b:88:b4:65:1c:76:a5:f0:e5:90:
22:75:14:4c:95:98:7c:4a:d3:4c:bb:82:cb:bf:7e:
53:df:45:3f:4f:59:88:4c:ae:61:17:4a:c0:a5:59:
ef:a7:f1:d4:83:73:7a:5c:fe:78:d4:f9:2b:8c:bc:
bb:4e:f5:b0:b1:a5:97:ec:9e:78:71:7e:f6:b1:26:
b2:63:59:2a:ae:fb:65:07:86:46:a4:0c:ef:8c:78:
72:7d:2e:25:32:a8:6c:81:f2:6b:b6:af:56:ee:d6:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:22:66:E9:FF:CE:64:16:19:02:CF:E9:25:A3:06:17:96:AC:C6
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c1:3a:2e:0a:ac:02:97:76:bf:46:34:c4:31:d6:50:7b:be:
55:87:71:8b:b7:db:53:5c:b7:f2:e9:49:13:8c:b3:b9:44:94:
cb:24:15:e9:68:d0:ef:13:ac:c0:07:3e:9c:c5:9b:ba:7e:e0:
fa:a8:36:3b:2c:01:68:e0:67:a1:bb:f0:d5:69:23:4d:cd:bf:
60:a1:a0:c2:1d:92:08:fb:94:95:bf:2d:c3:58:ba:2e:c5:4e:
d8:a5:47:ea:60:13:d9:ea:10:12:ae:1e:a1:d0:49:0f:aa:e7:
b3:c2:27:ac:ed:25:c0:51:07:9f:47:7e:ae:fa:7b:14:b9:b2:
6e:c2:ea:54:b2:09:d9:fc:f6:a8:06:7d:01:af:a2:95:80:00:
eb:02:4d:19:12:b4:fd:25:24:16:70:1a:a8:73:cd:ff:1d:77:
79:7f:7e:fa:3d:4f:7e:d6:cc:89:a3:9b:05:1a:a9:d5:52:ec:
b2:cd:01:e2:b9:39:54:98:34:24:3a:9d:08:66:40:25:82:7f:
bc:c8:a6:c9:fc:3d:15:f9:b6:08:75:62:cb:8b:17:ce:48:02:
e9:e4:1c:0a:14:d1:db:89:e6:5f:93:ce:92:43:8d:ac:48:32:
b2:ca:20:f9:17:19:af:8e:97:da:66:5e:b1:fc:c9:5b:05:54:
1c:6e:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:54 2025 by rpki-client