Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: Lcy6UCS5Uv8bSmoUDOi6ue3K9mm88A/ih4Uo0q89pWg=
Subject key identifier: 45:41:D4:81:B8:62:A2:AD:EB:81:B9:02:58:5D:77:60:E7:A1:FC:F0
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 01984D43B1980A56F114BACD34A8895C5BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0938
Signing time: Sun 27 Jul 2025 19:02:18 +0000
Manifest this update: Sun 27 Jul 2025 19:02:18 +0000
Manifest next update: Mon 28 Jul 2025 19:02:18 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: ezr7gYdzJLNpBQuyU0PljTi8Y7T4X+rlh4ZOsrIDmrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:43:b1:98:0a:56:f1:14:ba:cd:34:a8:89:5c:5b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Jul 27 19:02:18 2025 GMT
Not After : Jul 28 19:02:18 2025 GMT
Subject: CN=4541d481b862a2adeb81b902585d7760e7a1fcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:72:7e:d0:36:36:5e:13:8b:6c:98:6a:79:
08:e3:7f:d5:e1:4c:6c:b7:b2:8c:9d:f1:4a:36:c2:
0d:41:01:d4:86:d9:56:73:a8:70:d3:9e:c2:8e:18:
b8:a8:f7:46:ca:1d:0a:b6:e2:f7:a7:77:b0:7d:68:
ed:59:d6:1f:cb:1e:d4:fa:05:ea:2e:9e:43:f2:27:
34:ad:be:62:43:1e:08:f5:33:09:db:dc:e3:d7:56:
8f:ba:0d:c7:f1:41:7f:c3:d8:44:33:c7:db:ea:7c:
95:c7:8c:ff:64:b6:ca:8c:7c:a9:85:34:04:89:8e:
d6:9f:7b:99:dd:7f:1c:b5:9c:20:ea:8e:71:f1:8f:
29:41:cb:ae:ab:5a:30:a2:66:83:9b:e4:ae:55:a4:
1c:f1:2c:fa:27:ad:14:b0:cf:22:c9:d6:f2:2d:54:
a2:b0:a8:28:5e:75:ea:19:07:8f:39:bc:66:44:db:
0e:fa:fd:f3:4f:f1:09:29:ac:74:43:68:c7:51:53:
b8:5a:5d:19:ed:f6:59:f7:6d:06:48:49:6c:6c:6e:
d5:3b:6f:a9:8d:9b:a9:a3:f7:13:b2:35:89:53:6b:
4f:31:64:b4:07:92:13:65:7e:7d:13:74:b1:cd:39:
57:fe:ea:9c:34:6b:82:64:13:44:99:2a:eb:e4:87:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:D4:81:B8:62:A2:AD:EB:81:B9:02:58:5D:77:60:E7:A1:FC:F0
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fa:8e:59:d7:7c:9a:43:bc:0d:04:c8:24:1f:f0:28:a0:85:
6a:49:cd:29:ba:7f:a3:e3:ec:09:ca:e8:eb:cb:e9:34:7c:f1:
74:83:d0:95:9f:e8:5f:b9:c8:53:ab:ce:0b:28:e7:e5:82:a2:
8d:87:d0:37:3f:3c:57:3f:07:4c:8e:2f:3f:1d:d5:55:6e:63:
06:b8:f1:31:d2:10:8a:66:ca:74:e9:e8:38:77:a5:4a:84:a2:
1e:27:ba:46:a4:a1:5a:8b:3f:f4:da:81:85:d3:9e:15:d6:39:
51:21:c9:47:fa:12:68:b4:06:9c:2a:45:ad:8b:72:d3:50:04:
61:f4:5e:03:b4:b4:6d:b7:a0:11:67:6f:62:30:f3:fd:d7:68:
6c:9e:02:2c:e1:74:6a:ae:a3:9b:72:c8:bd:3b:63:e0:ad:5c:
79:fc:58:a0:c1:53:14:e7:18:18:55:0a:5c:c3:cc:81:16:77:
b6:1f:8f:39:6f:cf:97:5a:ec:06:78:09:e5:8f:18:5f:3b:2b:
fd:71:e9:71:ad:ab:58:24:44:89:2e:50:ec:6a:13:a6:7a:9c:
60:06:c4:53:12:17:02:48:6e:df:08:09:92:06:70:45:d6:8a:
81:95:a1:d7:df:79:b1:02:f3:fe:59:12:59:9b:8b:58:6f:8d:
2c:07:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:27:21 2025 by rpki-client