Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: lke78SYPEzrLPW0glbIzB4M1VdumNfnTOMu1sH4vSZU=
Subject key identifier: C4:81:DC:89:E8:E1:7E:76:A7:7A:D6:EF:25:0F:04:12:FD:39:0F:6C
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 0198D65FDEF4D648D6818AF7E9C886CE08CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 0752
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: OL8Mb/Z1dAB1V7VdxgdFTri2yTrQ8A7wuNg+hZq7jIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:de:f4:d6:48:d6:81:8a:f7:e9:c8:86:ce:08:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=c481dc89e8e17e76a77ad6ef250f0412fd390f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:30:96:91:a4:9d:5b:e8:b6:13:80:15:9f:
5d:08:c6:11:19:a4:74:87:45:49:d5:10:e4:13:b9:
e7:0e:f4:49:1b:c7:0a:73:56:b2:80:92:cc:5b:85:
85:b8:67:80:d6:64:58:19:5e:fe:8d:a9:1e:ac:62:
06:fa:a6:17:90:8e:a2:8e:9d:77:b8:e5:34:90:c9:
6f:f3:30:0c:2c:a3:d3:2f:c9:80:61:87:77:1d:b7:
08:1c:96:45:c4:37:cd:83:67:e5:b7:8f:56:c0:3f:
df:59:51:f1:d7:40:3b:c7:60:d9:78:cf:49:29:5f:
02:d1:56:d8:cc:5d:35:db:38:ba:6a:fc:05:3d:f2:
49:27:71:eb:3a:04:09:86:70:14:14:33:18:fa:53:
d5:f1:27:95:34:42:fe:7c:53:7b:3c:22:1b:7e:d9:
0d:7c:3b:f9:6d:f0:21:08:f8:2b:26:25:d7:ea:f7:
19:4c:a6:5f:7c:98:e3:9a:22:da:60:22:50:63:70:
32:5c:a3:fc:d2:c5:9a:92:36:b2:04:d0:1b:6a:a2:
4b:8a:40:ba:e7:c1:73:1d:1d:5d:5b:a1:f4:2d:07:
49:2e:e5:d7:1e:69:57:a1:d8:5b:27:be:4a:bc:8f:
ee:9f:c7:f7:66:29:2c:14:f0:b7:cc:2e:0c:dc:aa:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:DC:89:E8:E1:7E:76:A7:7A:D6:EF:25:0F:04:12:FD:39:0F:6C
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b4:fb:7f:7a:08:db:0d:78:13:b6:89:e3:7e:02:62:c2:3a:
cb:f5:35:42:81:bd:7a:90:1b:91:30:04:36:c9:cd:f1:3a:3a:
a4:b6:9b:d0:69:35:f9:d3:95:31:d5:63:80:8a:a0:04:d7:da:
76:ba:e2:7d:f8:39:ac:33:c5:18:8f:f8:48:98:0d:7f:2d:27:
20:92:e9:c7:18:a3:7d:f0:30:26:f5:04:e9:9b:6c:af:c8:f3:
15:b9:c4:4d:28:d1:e9:c3:ec:1f:58:20:d1:fd:16:2b:49:82:
03:4a:0e:e6:5a:0c:03:c0:ef:59:37:8c:d1:e7:d3:51:e1:12:
94:c5:0a:97:e8:c8:7d:92:39:6c:ae:9c:11:b2:fd:94:a7:f4:
1d:38:4d:e4:ce:1d:2a:46:7f:fc:62:50:1a:b0:e0:23:5f:bc:
98:45:75:1c:df:4e:8e:46:2b:07:f0:71:9c:de:2f:42:2a:0b:
bd:05:1b:cd:e2:8d:73:b1:8d:e7:4b:83:20:35:55:e6:88:16:
ee:e0:2c:5b:3a:3e:80:6c:9b:ae:fe:d0:5f:87:28:a9:a9:23:
ec:73:20:4e:4e:fc:7f:60:98:53:b1:3d:b8:40:93:92:23:b6:
97:63:83:26:2d:68:cd:18:bf:d7:2b:59:01:46:8c:e8:f3:f0:
7d:92:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:05 2025 by rpki-client