Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
File: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft (raw, json)
Hash identifier: UlPP6SRFNYet+s+yoU/hhV3uOi+blno0cneFg517SQI=
Subject key identifier: 6F:71:9F:43:A6:0E:07:C1:37:E7:C8:2C:A5:B1:1D:A8:29:F3:60:F9
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 019848F79656722CF6DEEA8036E689D5DE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
Manifest number: 0267
Signing time: Sat 26 Jul 2025 23:00:42 +0000
Manifest this update: Sat 26 Jul 2025 23:00:42 +0000
Manifest next update: Sun 27 Jul 2025 23:00:42 +0000
Files and hashes: 1: 1-PJ8uFT3vIGcdh8Ryvstj5V11gs.roa (hash: flh68N5wBml9poaLXGZmGeNQ/HSV3CHvsWwwddNW1dc=)
2: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl (hash: Q7+01s0Pu/UuQSsLGDY4kCp8RXC4UcCyUM21AD8Gm1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:96:56:72:2c:f6:de:ea:80:36:e6:89:d5:de:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Jul 26 23:00:42 2025 GMT
Not After : Jul 27 23:00:42 2025 GMT
Subject: CN=6f719f43a60e07c137e7c82ca5b11da829f360f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:26:9f:5c:3f:ed:de:9b:b0:73:a7:8c:f0:
fa:e2:56:aa:82:b7:f2:38:a0:0a:d0:f7:c2:ac:c7:
16:2d:3d:c3:c6:1a:ce:16:d0:d9:3b:6a:39:d0:6d:
3d:a7:8a:1c:ba:c8:ea:6c:ac:8d:37:f4:6e:e1:d1:
01:72:0e:53:a3:ce:6d:c9:8e:50:ad:a7:d6:1a:67:
fa:72:7f:c0:66:f9:af:be:53:09:41:ba:94:e0:c2:
8b:b4:5c:ee:45:99:5d:c7:ba:a5:70:c2:22:70:1d:
af:06:e0:8e:7b:9c:f5:e6:94:5f:67:ae:15:a9:ef:
1e:5c:79:07:a3:fe:5c:a0:40:8a:5a:2d:dd:0a:f8:
e8:72:ad:2e:ca:d2:d1:45:50:f6:3b:ae:98:96:21:
98:f9:a5:2c:ff:cc:17:b8:b5:15:4f:ed:01:6d:09:
b5:61:94:5d:21:78:b7:88:d1:e5:91:99:df:6c:b4:
d7:52:7c:8d:aa:c7:59:2f:70:b7:a1:4e:9d:70:38:
cc:6b:7f:c4:a0:af:7b:14:ba:11:8d:27:05:59:ee:
63:c4:52:71:a3:94:90:b1:b3:8c:fd:1b:bf:05:ee:
21:a6:c2:bb:93:14:e3:70:3e:4e:48:cd:cd:30:dc:
b7:da:48:96:f1:85:e4:79:d7:af:59:24:29:e2:d0:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:9F:43:A6:0E:07:C1:37:E7:C8:2C:A5:B1:1D:A8:29:F3:60:F9
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:c1:6c:5b:5d:15:d6:08:63:4c:9d:c5:79:ee:40:df:72:09:
31:79:38:3a:f3:ae:53:e3:bb:77:e0:10:0f:83:8e:71:06:f7:
5a:a2:ab:8c:54:78:b5:85:cb:5d:90:90:8a:b3:cd:28:85:ea:
12:f9:85:6e:e0:98:53:b0:45:1e:91:01:2b:b3:06:1b:3a:1b:
3e:ac:15:71:73:ca:55:ae:0c:75:1b:42:87:99:ae:ca:ce:72:
80:4f:bf:86:53:95:a2:ad:1e:36:a1:b5:37:c3:89:e5:c9:d9:
db:78:be:74:8d:f4:e2:97:e3:62:0b:b7:a6:44:a4:ae:07:32:
c2:ab:c3:5d:ba:75:56:44:ac:08:fd:c5:c6:49:1c:6d:50:be:
2d:4e:74:37:be:cd:91:66:b6:0d:4c:18:c4:2c:79:9d:1c:0a:
d5:b3:f0:8f:01:73:88:87:82:84:eb:96:ec:28:1d:aa:d4:10:
8c:a5:eb:2f:90:9b:09:a6:84:69:11:16:c8:69:d7:5d:4d:3a:
f4:8f:17:f5:9e:2c:e9:0a:45:2d:9f:c5:7f:04:d4:27:4d:6a:
a2:4b:e3:b0:84:bd:56:38:e1:2e:7a:96:3b:01:ee:b5:2d:91:
1b:6a:15:12:7e:e5:16:9f:90:b5:da:43:fb:f2:55:1e:77:18:
e1:7c:3b:3c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhI95ZWciz23uqANuaJ1d4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODY2OWQzMWExNGRiZGM1MDc3MTU5Y2YwYTY1MzUzYmZi
ZmEyMGEwHhcNMjUwNzI2MjMwMDQyWhcNMjUwNzI3MjMwMDQyWjAzMTEwLwYDVQQD
Eyg2ZjcxOWY0M2E2MGUwN2MxMzdlN2M4MmNhNWIxMWRhODI5ZjM2MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT4mn1w/7d6bsHOnjPD64laqgrfy
OKAK0PfCrMcWLT3DxhrOFtDZO2o50G09p4ocusjqbKyNN/Ru4dEBcg5To85tyY5Q
rafWGmf6cn/AZvmvvlMJQbqU4MKLtFzuRZldx7qlcMIicB2vBuCOe5z15pRfZ64V
qe8eXHkHo/5coECKWi3dCvjocq0uytLRRVD2O66YliGY+aUs/8wXuLUVT+0BbQm1
YZRdIXi3iNHlkZnfbLTXUnyNqsdZL3C3oU6dcDjMa3/EoK97FLoRjScFWe5jxFJx
o5SQsbOM/Ru/Be4hpsK7kxTjcD5OSM3NMNy32kiW8YXkedevWSQp4tDW8wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG9xn0OmDgfBN+fILKWxHagp82D5MB8GA1UdIwQY
MBaAFPmGadMaFNvcUHcVnPCmU1O/v6IKMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZWnAweG9VMjl4UWR4V2M4S1pUVTctX29nby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMmI0MTdkLTI4NjktNDExZi1hZWRh
LTRhMDViYWM1MjY1Zi8xLzEtWVpwMHhvVTI5eFFkeFdjOEtaVFU3LV9vZ28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA3LzJiNDE3ZC0yODY5LTQxMWYtYWVkYS00YTA1YmFjNTI2
NWYvMS8xLVlacDB4b1UyOXhRZHhXYzhLWlRVNy1fb2dvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1cFs
W10V1ghjTJ3Fee5A33IJMXk4OvOuU+O7d+AQD4OOcQb3WqKrjFR4tYXLXZCQirPN
KIXqEvmFbuCYU7BFHpEBK7MGGzobPqwVcXPKVa4MdRtCh5muys5ygE+/hlOVoq0e
NqG1N8OJ5cnZ23i+dI304pfjYgu3pkSkrgcywqvDXbp1VkSsCP3FxkkcbVC+LU50
N77NkWa2DUwYxCx5nRwK1bPwjwFziIeChOuW7CgdqtQQjKXrL5CbCaaEaREWyGnX
XU069I8X9Z4s6QpFLZ/FfwTUJ01qokvjsIS9VjjhLnqWOwHutS2RG2oVEn7lFp+Q
tdpD+/JVHncY4Xw7PA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:25 2025 by rpki-client