Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: pFY55aRMEZo58UDgwTrYEzTQEBwN5JI9e9nb3TxrsaE=
Subject key identifier: D2:5C:D2:87:84:3F:33:6B:C4:02:AF:FB:BF:29:50:30:83:34:BD:F2
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 01984BC18C80A79E89AE05A3A408459DDF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 12:00:32 +0000
Manifest this update: Sun 27 Jul 2025 12:00:32 +0000
Manifest next update: Mon 28 Jul 2025 12:00:32 +0000
Files and hashes: 1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: MNnYVD6aWq5+fvcR2qNTENSl4hRdKkz1soy0mBpyQ/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:8c:80:a7:9e:89:ae:05:a3:a4:08:45:9d:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Jul 27 12:00:32 2025 GMT
Not After : Jul 28 12:00:32 2025 GMT
Subject: CN=d25cd287843f336bc402affbbf2950308334bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:c7:26:a9:32:01:8e:49:db:0e:a1:d7:18:
ce:99:e7:54:a6:e8:97:5c:f3:86:58:34:b4:31:9b:
50:8f:4f:c7:a2:d5:9f:6c:6f:3a:9d:c5:7b:31:03:
5c:9d:5f:44:31:3e:65:bb:65:ab:6f:04:f5:ef:c4:
b2:83:8f:20:24:e6:0c:4d:c8:ac:fd:c6:2e:1d:25:
3f:79:01:79:dc:f8:b0:3e:a2:b7:61:70:03:d3:93:
04:0d:07:4b:cb:fc:2c:20:fd:01:b3:ab:f0:62:b5:
12:72:f2:74:d7:d5:11:0a:86:b8:9a:93:6e:04:a7:
b0:28:c5:25:ad:9f:41:b5:2c:bd:64:e1:f5:d9:02:
8f:10:d7:16:cf:27:ac:b3:99:c6:3e:26:f0:e9:32:
b2:0a:c5:88:99:08:8f:f5:2a:6f:f7:44:66:ab:cd:
95:cb:15:85:ba:20:5d:f6:45:0c:65:5e:cb:e3:2d:
0c:55:a2:e5:6e:da:2a:68:70:79:ee:ae:d7:24:20:
b6:c4:fd:e3:9e:87:f4:96:ef:a5:53:b3:cc:cd:b7:
31:22:0d:0f:75:81:34:71:98:ef:fe:d6:05:38:34:
34:53:a7:7f:01:89:75:0e:dd:c3:10:0f:b3:7e:5e:
07:2b:13:58:30:22:a1:20:b5:a7:92:5a:54:b8:4e:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:D2:87:84:3F:33:6B:C4:02:AF:FB:BF:29:50:30:83:34:BD:F2
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e4:47:0a:59:4f:77:13:5e:fb:0b:0a:49:0c:c2:55:1c:86:
67:2a:07:98:cb:fa:42:b8:3f:c5:c0:c8:ee:9c:18:4e:c4:b8:
42:3e:90:2c:8e:28:5a:b9:04:a8:32:44:49:0a:43:53:9e:f3:
9a:77:69:bd:40:82:40:fb:de:dc:c5:e8:00:74:73:d2:08:c5:
33:17:d9:3f:90:b1:13:a5:47:0d:cf:f2:15:d4:b2:1c:0c:3c:
d9:3c:99:b6:ef:45:ef:c0:e7:af:aa:53:db:b1:52:6c:97:cd:
d5:b6:62:49:25:0a:53:2c:ff:c5:2c:fd:d7:a6:1e:a6:17:46:
e9:b7:1b:80:8e:0c:c3:e4:c1:64:ea:b0:c0:36:ba:a5:9a:18:
ba:a7:32:77:9e:70:ae:4f:dd:0d:2e:2a:69:d0:37:06:c3:49:
bc:07:84:db:42:8d:0e:71:b6:30:78:c7:53:f0:b9:f9:6b:e0:
69:e3:86:2e:91:17:6a:bc:cb:bf:fb:ac:20:9a:6a:dc:52:4b:
45:d7:e0:1a:86:f9:15:0d:42:c5:38:8d:70:2c:74:a6:28:22:
71:af:cf:84:e2:6b:19:9b:20:cf:0d:54:c7:d5:cb:69:9d:31:
aa:3f:b5:66:d3:7e:58:d4:78:26:9c:c9:bc:c8:a3:a0:e8:c5:
06:7b:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:16:48 2025 by rpki-client