Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: /yv/wN+okOP3Oh1nxxd4IqQOVBNpcTV2doZC3AdzLL8=
Subject key identifier: DC:F2:49:1A:32:30:80:AA:F9:F7:55:B3:6E:0D:1E:6E:AD:CF:49:D7
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 01984AAF3A157ECF7B13B1415E3D15E29B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0650
Signing time: Sun 27 Jul 2025 07:00:54 +0000
Manifest this update: Sun 27 Jul 2025 07:00:54 +0000
Manifest next update: Mon 28 Jul 2025 07:00:54 +0000
Files and hashes: 1: GP-mcsPVfkxFR6BakAdLWMHzvnk.roa (hash: 46Gy5AnSQQR4RzlnLScg9/HmedHrQU8V47NDaOoaI7E=)
2: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: zYInoxCh4JAgvGIjms2Yl29YTCqrWW40vPK9oXYodYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:3a:15:7e:cf:7b:13:b1:41:5e:3d:15:e2:9b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Jul 27 07:00:54 2025 GMT
Not After : Jul 28 07:00:54 2025 GMT
Subject: CN=dcf2491a323080aaf9f755b36e0d1e6eadcf49d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:45:5c:0f:2d:8a:97:e9:cd:bf:4a:c5:86:
34:6b:3c:04:f1:dc:e2:30:fd:aa:84:91:25:01:e1:
4a:dc:e4:00:70:24:98:95:c3:13:4c:bb:cb:e6:85:
30:71:61:91:aa:5d:df:c9:71:ee:95:f8:49:2a:7d:
da:49:93:35:e2:e2:9a:9f:ca:d6:75:27:6f:97:a0:
bc:f1:7b:5c:3b:47:52:15:70:61:2b:9f:b4:32:2a:
6b:fb:00:fe:a5:4a:a9:2f:32:71:f3:29:70:e3:1b:
6f:81:1e:9c:4c:cd:bd:ea:1f:4c:fe:2b:3e:14:88:
a8:20:36:72:a3:bb:0b:d9:8c:5e:7b:ee:1e:e0:ac:
c7:b7:92:20:a8:5d:dd:68:07:d9:c3:ab:78:6f:6e:
72:09:50:19:87:74:b4:90:f3:7c:ff:ff:47:f5:a5:
38:53:fb:71:ef:29:6e:5c:32:93:b3:32:6a:f5:b7:
f3:f8:d6:2d:60:67:88:68:ed:24:57:bc:20:03:68:
dc:b7:af:9b:69:94:94:23:eb:f5:a2:28:8b:87:61:
9e:02:ce:c2:32:3d:e4:aa:df:0e:1e:59:6b:d4:ae:
cd:b0:29:5d:cb:07:f6:28:16:c9:de:cc:b8:f3:71:
15:c0:d1:6a:06:f7:9b:30:e7:04:c0:8e:dc:c6:7e:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F2:49:1A:32:30:80:AA:F9:F7:55:B3:6E:0D:1E:6E:AD:CF:49:D7
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f0:be:9e:eb:fc:54:d8:e5:49:d8:f2:88:a6:7a:fc:12:0f:
f0:07:70:43:c1:37:d6:8b:a9:ab:76:2e:dd:e3:1b:d9:bd:b8:
eb:4f:3a:5e:39:80:14:e9:a1:c8:7e:fc:2d:0c:1a:f8:7e:70:
1c:17:e3:5e:0c:94:ad:2c:48:23:1b:bb:ed:d4:f2:59:c2:37:
74:d4:48:71:e0:b2:54:21:6b:68:a7:77:19:b6:c3:ed:63:b3:
33:2f:1f:45:32:b0:04:08:20:70:dd:9c:89:e2:5a:39:ae:19:
02:e2:fa:71:c7:8c:f0:ad:66:f1:44:48:83:d1:1d:80:47:52:
94:eb:ce:dc:e5:31:62:fd:d4:be:4c:ef:11:3e:da:1d:ec:64:
58:c9:f9:22:cf:f0:63:2a:f5:2a:7d:b6:a0:d8:7d:1a:93:d8:
bb:10:65:2c:34:af:d9:21:71:ac:85:97:86:87:d0:c0:b8:84:
44:ff:76:9d:f7:08:54:52:ad:b9:df:3e:b5:24:87:50:e7:9b:
ed:62:21:2a:6c:d7:a9:81:67:2c:53:0b:a1:48:5d:c1:99:49:
e5:63:1e:88:dc:a1:af:51:31:9b:79:9b:1c:fb:35:e0:f0:9a:
1c:3c:f5:25:ed:ac:b4:1d:79:d8:cd:3d:fc:82:b0:76:96:e6:
e2:11:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:21:20 2025 by rpki-client