Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: dheC/GR92ekoOCRey3k2DenQF0nEvwPwIXSBdikIrZA=
Subject key identifier: 4A:0E:22:6D:E5:ED:C5:81:56:FA:3D:36:58:B0:E7:C7:13:F2:4C:91
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019857C5C894AE7A77A20396BBF513EF0A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 20:00:36 +0000
Manifest this update: Tue 29 Jul 2025 20:00:36 +0000
Manifest next update: Wed 30 Jul 2025 20:00:36 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: 4kZkPAveKIo7t7JbKTqWINyR6n7EWoD5Amt0mtE7DK8=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 16:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:c5:c8:94:ae:7a:77:a2:03:96:bb:f5:13:ef:0a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Jul 29 20:00:36 2025 GMT
Not After : Jul 30 20:00:36 2025 GMT
Subject: CN=4a0e226de5edc58156fa3d3658b0e7c713f24c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:b1:3b:6c:d5:b9:76:20:27:47:8f:f0:a8:
b6:e8:52:59:84:37:a3:63:51:fe:2c:13:62:31:60:
21:9a:c5:f4:73:5a:08:5d:b6:4c:97:69:a2:e4:d9:
13:40:7e:f9:43:bc:39:64:7c:46:f8:0d:f5:70:87:
c7:3c:8b:f5:18:88:e6:94:2c:fb:96:03:72:2f:42:
97:b2:95:c6:73:1a:10:4a:56:63:af:45:fe:c0:d7:
8e:0e:c6:a5:8f:d1:05:1e:4d:26:45:74:e9:00:b5:
1e:fd:d6:fa:5b:f7:57:1d:f8:36:44:33:69:8e:e8:
70:c7:80:7d:e7:d7:17:46:45:bc:49:d8:cb:38:2f:
85:8f:70:3b:d4:2a:11:86:21:12:d2:b2:45:1f:0b:
c6:ab:1b:03:02:c8:c5:bb:bc:86:71:67:e1:4b:f4:
76:ec:d3:cc:7e:1e:1f:23:b3:93:a5:f0:d5:34:6b:
66:87:4b:1c:0e:9e:a0:72:2a:2d:41:ec:86:b2:4f:
93:e8:58:dd:ec:3f:4a:79:4d:67:f8:44:bf:f9:23:
41:b8:94:e1:09:b8:47:65:e1:8e:ad:61:25:c2:8a:
ab:0c:18:16:7c:fe:da:03:de:e3:3f:26:2f:f8:ee:
39:36:03:2f:70:bb:41:e8:f1:74:cf:c4:27:34:4e:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:22:6D:E5:ED:C5:81:56:FA:3D:36:58:B0:E7:C7:13:F2:4C:91
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:94:c7:75:3b:73:ae:79:3b:68:e0:da:c9:44:ac:0a:15:69:
3e:97:6a:41:92:55:1d:4b:0b:da:5a:3b:33:5d:9f:e9:ed:28:
a7:dd:c6:50:c0:3f:f1:68:0e:84:8a:e4:85:2a:93:6d:fa:50:
37:2c:3d:50:58:8a:8c:c9:4a:04:85:dd:0f:38:9a:22:c7:d6:
61:33:5b:18:c8:0a:45:3e:66:8d:7f:07:ed:d7:19:6b:43:89:
9c:87:d7:26:a8:8c:b8:b9:7a:4a:5d:34:2f:75:ee:14:08:f5:
57:2b:76:9c:f0:78:4b:8e:81:81:bb:3f:b9:24:dd:4e:ef:bf:
fb:1f:4e:54:d2:a2:83:88:d0:d4:e1:61:b4:66:10:5b:3d:9e:
21:eb:98:6d:91:c3:fa:98:cd:a6:e8:d2:65:87:0b:da:ba:d6:
2b:1a:21:f3:7f:59:6b:b3:6b:10:92:49:c4:66:32:26:41:9c:
78:00:6a:ff:85:8c:5f:8a:45:eb:69:3a:ea:27:83:9c:11:13:
c5:c4:1d:00:b1:00:eb:74:ba:8e:4a:f6:01:bb:ca:95:32:a0:
1a:20:15:55:ac:d8:a9:de:f3:b1:81:00:8e:09:51:06:74:f3:
72:ab:b0:7f:83:e6:82:c7:1f:5a:06:8d:69:2b:58:d2:be:a1:
32:0b:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 00:29:24 2025 by rpki-client