Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: UadX4YFAGQQgmM31DI28oCN4IdzTJtxeunhoS4GhFsY=
Subject key identifier: 7B:97:76:7F:04:B9:A5:E4:96:4F:A7:F5:43:A8:BB:A5:BF:80:FE:2A
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019849D3812AF1945557AE652B428342F245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 10E1
Signing time: Sun 27 Jul 2025 03:00:54 +0000
Manifest this update: Sun 27 Jul 2025 03:00:54 +0000
Manifest next update: Mon 28 Jul 2025 03:00:54 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: lJodVdt83apD0x3Y6Al8/en/PTh2waPlrlzjAOfZSjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:81:2a:f1:94:55:57:ae:65:2b:42:83:42:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jul 27 03:00:54 2025 GMT
Not After : Jul 28 03:00:54 2025 GMT
Subject: CN=7b97767f04b9a5e4964fa7f543a8bba5bf80fe2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:11:8c:c0:0a:b3:40:d0:02:52:88:85:fb:
13:06:7c:18:ec:3b:54:9c:84:b9:0d:19:db:45:63:
38:94:3e:1f:9f:7a:b0:a6:a0:3b:7c:9a:e8:cd:a9:
50:71:87:35:98:a0:13:30:3c:82:b2:d2:74:5b:09:
f4:0a:31:4f:a7:8f:2b:0d:b7:b2:92:30:b7:60:ec:
25:d2:68:5a:1e:ed:be:d2:d3:de:ac:4c:78:46:f1:
d3:6e:f2:da:cb:c4:ac:8a:08:16:6b:c4:68:06:c5:
90:b3:a2:db:ec:ff:bb:a0:a2:6d:56:1e:5e:dc:4d:
2a:f7:81:6a:ac:59:03:c0:67:46:83:b0:56:0f:bf:
b4:e9:46:78:8b:72:bd:96:c1:e4:20:93:4f:60:c2:
b6:2b:8d:26:d4:23:6c:0b:1f:0a:05:d7:95:8e:34:
25:32:a6:47:3e:8e:ef:6a:e5:52:d1:b4:a2:c4:ac:
30:e3:b2:58:d6:1b:7b:7b:94:6c:4a:6a:67:82:e9:
7e:5c:61:37:e9:3d:80:90:5e:60:c9:cb:89:ea:2f:
9c:e8:65:69:d1:bd:39:fa:c4:dd:e8:5f:66:53:52:
5c:d5:92:b3:27:92:f3:d5:24:5e:37:11:f7:b7:1e:
ed:58:ad:57:e8:19:d0:eb:7a:f6:89:3a:7e:00:fc:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:97:76:7F:04:B9:A5:E4:96:4F:A7:F5:43:A8:BB:A5:BF:80:FE:2A
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:98:5b:18:99:28:0d:fd:c2:97:b3:23:59:d1:f2:56:64:6a:
31:31:9d:5f:76:b7:38:b9:3f:ba:2f:63:a0:67:99:d4:64:d5:
d0:33:37:82:68:ce:3a:c5:f3:31:26:9e:12:bc:eb:c1:fe:1b:
d1:2f:b0:67:24:cf:73:33:02:68:cd:a5:07:c1:c6:49:8b:5a:
64:fc:0c:59:d4:3d:c6:5a:a5:81:47:7e:83:7a:78:f8:64:c3:
b1:ec:43:e4:84:68:98:4b:28:31:84:37:8e:68:7f:8f:e0:e4:
e5:34:bb:0d:54:a5:1c:e3:83:9a:86:e5:1e:8b:86:a7:e6:13:
df:75:08:cb:2f:22:15:99:8c:83:08:54:9a:11:a1:5d:9d:9d:
d9:fb:be:c3:65:a0:3d:05:c0:7b:39:78:f0:8f:ca:d9:62:88:
6a:21:ef:7c:d6:69:6b:58:9b:4f:26:06:5a:4a:22:5f:59:80:
81:5d:19:8b:a4:c0:be:fc:29:95:08:fa:27:fa:60:26:3f:19:
af:19:a5:a7:24:e8:81:10:9d:26:40:0e:03:a4:84:17:15:d7:
bf:93:20:ce:62:fe:8b:e2:02:36:22:dc:e7:98:37:bc:d4:bb:
d3:57:e7:60:d7:05:0f:08:08:95:c3:9e:fc:b2:39:cd:61:65:
ec:89:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:10 2025 by rpki-client