Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: v0OKRALLPYqEBhwNI8Z/JPbGzInFRiOSMiAcWmc4hn0=
Subject key identifier: 28:BE:19:F9:D5:3E:53:DA:7D:94:30:51:71:49:99:9A:6D:04:DF:D7
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 0198D660C96325DFE115D70EAA2028CCDB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 085B
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: w8Pyy72fmsgEIlCEpOuO2VPIh+3uneEcesMogORnmd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c9:63:25:df:e1:15:d7:0e:aa:20:28:cc:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=28be19f9d53e53da7d9430517149999a6d04dfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f3:1d:90:5a:7f:65:60:dc:81:6e:e0:1b:28:
07:df:8a:80:30:15:9c:4e:6d:b1:d4:95:65:b2:9f:
a1:15:b0:a4:cf:91:df:85:d9:6e:c9:b7:95:be:33:
cc:e3:9b:a6:d0:1f:88:e6:dc:1f:c3:55:b5:28:46:
a4:65:50:3d:26:ca:63:ba:56:c3:d3:40:11:10:71:
09:e8:b8:c9:3d:ed:80:9b:87:fc:2b:db:b9:98:45:
26:d8:c0:41:24:45:0b:d0:03:c9:81:b1:72:78:56:
8b:f7:04:94:36:0e:20:86:b1:9c:5c:d6:0e:64:b2:
61:a0:ba:e0:a4:6d:6b:10:27:fd:3d:4a:90:21:32:
1d:0c:3c:92:35:7c:97:60:3a:d0:45:d0:15:c2:19:
07:bb:ad:1d:cc:06:75:3d:06:7c:22:11:04:e4:64:
06:69:dc:ed:b6:f1:64:c8:ff:e6:b8:d7:f8:0f:1c:
b8:da:79:7c:3c:93:eb:3f:c0:d8:2c:e4:4b:51:10:
25:8f:e5:a9:31:a1:5a:25:68:74:74:22:25:8d:86:
18:05:15:b2:81:5b:2e:f7:ad:16:1f:9f:48:be:c2:
56:21:5b:ed:f6:96:54:5d:65:e7:76:4a:b1:af:c9:
2c:42:0c:92:94:be:31:a4:86:07:8d:9c:56:e6:01:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:19:F9:D5:3E:53:DA:7D:94:30:51:71:49:99:9A:6D:04:DF:D7
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:94:ca:7f:74:86:01:7e:15:ab:8a:a7:72:ff:2c:cd:9a:b0:
e3:39:2f:3b:83:ef:0a:1d:d7:54:08:50:55:8b:64:1f:91:60:
78:09:78:72:65:ca:be:b1:8f:5e:81:51:c5:58:1c:f5:37:fe:
1c:4b:01:ab:b5:14:f2:a7:59:b7:02:02:d2:62:a0:85:84:dc:
5e:57:70:91:78:5e:07:ef:8e:e8:05:46:42:e3:bc:35:f8:42:
92:bd:13:69:e9:37:a5:4c:e0:72:2a:14:e4:33:e5:b6:59:67:
14:97:7b:f6:eb:8a:10:71:c5:d9:df:07:b7:6d:22:2c:ce:ee:
39:86:e1:f7:39:38:e5:62:37:75:22:9a:a8:66:8f:22:66:78:
7b:86:3c:f6:66:d0:55:5d:3e:16:fc:a6:85:56:83:85:a7:7b:
f2:ad:b0:83:22:d2:58:ad:d7:b1:17:cb:21:d2:8a:b1:bd:a3:
2c:c8:82:fb:17:f0:1c:35:39:45:a8:d2:fd:ff:12:af:c4:f0:
49:56:78:18:81:05:c5:e5:a0:25:cb:1b:21:ba:fe:a1:b0:18:
fe:a0:99:07:33:31:00:35:aa:2f:16:4f:79:27:da:33:ca:25:
f7:d6:57:ef:f3:6c:1d:b9:bb:f7:6a:23:af:3c:b0:63:a8:51:
36:18:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:24 2025 by rpki-client