
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: ubH6fRBbGC9qJI6G5/Qv15FUtx0IsIP+/OBenrx7V3w=
Subject key identifier: B6:60:72:7C:FE:C5:96:87:C8:4E:C7:8D:BB:DC:BB:A4:6E:F6:34:E1
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019848F725D7008ED2CF0AB5B2994C527914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0450
Signing time: Sat 26 Jul 2025 23:00:13 +0000
Manifest this update: Sat 26 Jul 2025 23:00:13 +0000
Manifest next update: Sun 27 Jul 2025 23:00:13 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: j1h2E2vw3wXTIV1irjIUvvsoSSIV05HZNi4rlaW8HHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:25:d7:00:8e:d2:cf:0a:b5:b2:99:4c:52:79:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Jul 26 23:00:13 2025 GMT
Not After : Jul 27 23:00:13 2025 GMT
Subject: CN=b660727cfec59687c84ec78dbbdcbba46ef634e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:b4:49:d3:fd:24:32:31:fa:ba:f7:ef:48:
ec:90:81:81:80:e6:e1:66:0b:1f:b2:99:ef:67:45:
38:a2:66:f9:73:e7:9d:db:37:ad:ee:3e:75:c1:97:
5a:3d:15:3e:72:23:0f:25:e8:3e:04:bb:9c:34:3e:
3e:2e:9a:62:32:c3:3b:9f:a8:b7:6d:0f:8b:47:55:
88:ad:59:50:b4:07:ef:6c:06:21:bd:58:c2:b0:c0:
d0:0e:4c:c6:95:f9:c9:e7:ef:6b:74:ed:d0:56:f8:
72:6f:4a:59:e0:10:f9:ab:66:1e:2f:8b:28:65:0a:
53:6d:fd:b6:65:3d:8d:44:8a:16:22:2d:24:91:41:
d1:28:78:62:5d:d1:da:78:00:17:0b:d6:79:0f:d5:
ce:4c:58:53:8e:4e:d4:43:45:4e:e5:a3:aa:33:53:
bb:1d:99:e0:3b:b7:9e:96:a3:19:ef:e7:c5:23:7f:
d3:b8:94:e7:af:9a:a6:d5:f2:42:3a:7a:c2:21:14:
82:35:93:98:82:af:a5:c2:64:ab:ae:a4:22:cf:04:
e9:a7:18:0f:ae:70:e0:72:e5:16:86:f5:da:ef:fb:
0c:39:56:d5:e9:6b:2c:72:6f:29:65:2e:92:74:ae:
83:a2:65:3f:e2:7a:09:3f:30:e1:eb:0c:0c:b0:5f:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:60:72:7C:FE:C5:96:87:C8:4E:C7:8D:BB:DC:BB:A4:6E:F6:34:E1
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5a:aa:78:02:ae:7e:91:a3:b9:c0:7b:e9:4c:5b:cc:5c:e6:
ae:44:9b:ae:16:20:5e:ad:d3:72:01:45:a5:5d:3c:7f:ed:98:
66:f4:52:9e:eb:23:1e:9b:2d:87:d0:a6:b6:4e:94:cb:d0:09:
e8:6c:08:b0:64:77:a5:b9:f5:34:c0:e8:a9:6e:8c:e0:7a:f3:
94:5b:36:d0:cb:7c:17:a8:b8:ac:97:09:d7:41:d6:25:78:3e:
44:e8:20:60:4b:85:5a:d5:14:1f:ca:c6:25:4f:ac:87:76:1b:
92:db:52:22:79:ec:4b:4c:63:fd:3d:8d:f5:a8:2f:6f:43:3f:
01:0f:75:0e:ae:f5:5f:08:11:e3:b3:ee:10:c7:c3:4d:78:1e:
8a:61:98:3c:1e:fd:a1:c2:d6:8b:72:37:91:8a:dc:16:89:61:
70:2d:a4:eb:14:8d:33:13:5b:e8:d4:a8:57:94:a8:bf:1d:df:
38:69:1d:9f:7d:f0:e3:f3:ee:e3:57:ac:4a:b4:0b:3f:12:b8:
7a:46:cc:1a:0d:17:c0:35:89:8b:20:ac:94:9b:16:d3:e8:32:
e2:73:69:89:94:f9:de:47:db:39:dd:ff:21:68:6e:bd:ea:e4:
6b:b7:2e:81:fd:f3:ee:1c:52:f8:a9:4f:3e:46:ec:15:eb:8c:
f6:e0:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:55:15 2025 by rpki-client