Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
File: y78j_5hnaDYlSUYv4JLGMV6sykA.mft (raw, json)
Hash identifier: QAlxEPXsGj3+wT7ptvhsrsIoh4i6Ux5bztxWsSyB/AE=
Subject key identifier: CF:83:02:F4:21:E8:E8:0B:4A:25:5B:65:6C:EF:18:32:64:65:76:A0
Authority key identifier: CB:BF:23:FF:98:67:68:36:25:49:46:2F:E0:92:C6:31:5E:AC:CA:40
Certificate issuer: /CN=cbbf23ff986768362549462fe092c6315eacca40
Certificate serial: 01984AE5EB96B78ED9C1EC1F6FA1B1E7C952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 08:00:38 +0000
Manifest this update: Sun 27 Jul 2025 08:00:38 +0000
Manifest next update: Mon 28 Jul 2025 08:00:38 +0000
Files and hashes: 1: a0gi81K4PU-mZZPSh82aNeLjsVI.roa (hash: Id1bqvDurbpWKdNvf29qBzclAu3m5HKcR5Kg3lRHGKE=)
2: y78j_5hnaDYlSUYv4JLGMV6sykA.crl (hash: sU+ZLPQiH/a1hgpyUvPW76J+Dvwsc0K2lTn91fBuSoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:eb:96:b7:8e:d9:c1:ec:1f:6f:a1:b1:e7:c9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbf23ff986768362549462fe092c6315eacca40
Validity
Not Before: Jul 27 08:00:38 2025 GMT
Not After : Jul 28 08:00:38 2025 GMT
Subject: CN=cf8302f421e8e80b4a255b656cef1832646576a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:a1:86:ec:f6:9d:f0:0a:a5:6c:c2:ff:f2:
71:92:7d:f4:cb:05:89:27:c7:84:bf:3e:c6:50:97:
95:a2:77:37:61:c3:68:da:f9:67:60:40:7c:72:65:
a6:79:ac:27:41:b2:5a:a0:f2:16:a8:63:7b:87:a3:
e6:76:97:b7:bd:5b:ed:2a:28:22:c7:b2:bc:eb:88:
04:01:10:6a:20:e1:e4:76:68:35:32:aa:53:78:d4:
4d:d8:9c:e6:9b:22:77:01:42:db:ae:cf:3e:c9:c1:
f8:ea:65:15:5e:53:3f:17:5d:4c:f4:d0:02:3b:0b:
b9:bb:26:6a:1d:fa:1d:90:e5:32:0f:29:fc:e6:d9:
79:99:af:8e:2c:c4:87:72:cd:28:d8:e5:96:83:ec:
3b:bb:39:93:e4:d8:a2:27:d1:52:0a:b8:35:bb:c2:
fd:24:0b:b9:39:cc:c4:11:dc:31:90:ee:9b:31:04:
2f:26:66:96:c9:31:d3:0b:a8:9f:29:00:7f:c8:9c:
1d:a0:c4:c8:1f:47:44:6a:a3:e8:6d:a8:1f:32:4f:
be:fe:63:b2:52:a0:e0:19:f4:95:3d:b0:94:08:45:
34:60:dd:84:02:f3:c7:8e:46:39:d0:4e:d7:39:76:
05:79:19:c8:14:f2:b4:e9:06:b3:3e:03:b4:d5:a4:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:02:F4:21:E8:E8:0B:4A:25:5B:65:6C:EF:18:32:64:65:76:A0
X509v3 Authority Key Identifier:
keyid:CB:BF:23:FF:98:67:68:36:25:49:46:2F:E0:92:C6:31:5E:AC:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:bb:9d:2d:a1:72:1e:18:da:2f:2c:85:b6:94:cf:fd:2d:
94:ca:b5:4a:ca:56:3c:e0:00:88:ab:25:90:39:1b:e7:79:10:
f8:26:59:3c:3e:7f:49:94:8f:c7:c5:ec:76:99:3a:74:9c:3b:
ff:2f:54:65:e2:1f:bc:9a:97:14:9f:7c:f3:21:ce:ec:6e:14:
2d:92:b2:9e:ff:ae:ad:f1:6e:62:33:90:96:4b:72:95:51:cc:
2e:8c:ab:55:7d:03:b7:3a:5d:20:c4:5d:ce:96:2b:ea:97:55:
66:05:2c:a6:d1:7a:60:54:d6:ce:ce:a0:aa:7f:18:54:82:c9:
54:c0:27:b4:46:12:cf:71:27:8f:63:f7:0d:07:52:81:77:8e:
7e:2f:ac:20:1e:59:39:3c:2c:72:12:7e:2a:ca:cd:0b:53:ab:
12:bc:db:c9:bd:99:4b:dc:d3:07:8b:6f:6a:83:c6:87:58:52:
34:c8:d0:74:2c:3a:8f:62:e1:b8:b8:79:11:19:35:99:8f:4e:
c4:71:57:58:4e:95:b7:1b:a2:3d:56:02:48:15:80:92:36:a6:
4e:7a:1d:00:f4:b9:ef:1c:c9:f7:3b:a9:08:24:15:56:88:06:
a3:d1:83:c3:1c:4d:d8:c5:20:c7:2c:cd:eb:01:d1:cb:7b:05:
da:f9:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:52 2025 by rpki-client