Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: KpzSz3cQzzxR9Nb+/MxjKMQnWXBUkS/k8gzY+uVjLbw=
Subject key identifier: 23:8E:50:B3:82:03:44:FC:1D:26:AA:92:BF:91:B8:91:72:6D:38:F5
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019842F51D62B2A0C408011BF8E8990F6F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1602
Signing time: Fri 25 Jul 2025 19:00:16 +0000
Manifest this update: Fri 25 Jul 2025 19:00:16 +0000
Manifest next update: Sat 26 Jul 2025 19:00:16 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: jOZjvgwPu0UHD4b9ondfRhX4nkW1mf2sbc30LVRzQFk=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:1d:62:b2:a0:c4:08:01:1b:f8:e8:99:0f:6f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Jul 25 19:00:16 2025 GMT
Not After : Jul 26 19:00:16 2025 GMT
Subject: CN=238e50b3820344fc1d26aa92bf91b891726d38f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:17:d0:7d:d3:4d:57:d0:5a:52:48:a7:3d:
02:5c:13:ca:19:c7:d5:a7:dd:67:c1:39:0f:82:ac:
8b:59:3f:33:99:d0:80:e4:7d:15:f9:29:e9:ae:4c:
2c:f7:9a:dc:8c:19:4e:7f:8e:12:69:e8:2c:74:63:
65:64:dd:85:81:31:2c:b1:17:12:1c:2d:c6:eb:3b:
70:eb:2e:89:f7:2b:ec:06:17:47:a7:9f:fa:58:23:
ec:29:0a:91:87:cd:8c:23:71:f6:ac:b0:07:e0:bf:
11:1b:46:b4:03:9d:44:bf:49:e3:9e:51:f6:e0:46:
f0:5e:82:39:d8:bc:d9:00:a8:75:ec:61:07:9c:c6:
1d:a0:d4:13:0e:fb:d3:87:8d:66:14:97:3a:23:9a:
9d:dc:ac:67:d0:fa:d7:35:83:14:5e:5c:46:3d:7f:
e7:6f:2f:b9:d1:6a:ef:19:83:56:2f:2b:f8:83:83:
f7:72:bb:a0:aa:81:93:fb:c9:72:f2:ea:d7:9a:31:
38:ba:a3:c3:60:e4:1e:40:fd:cd:26:95:c2:84:93:
e3:8b:50:b7:81:00:e2:70:8c:23:f2:82:2e:ef:1a:
85:52:1b:86:45:f0:09:96:40:28:18:33:28:82:d4:
c2:de:d8:b1:71:f1:e3:3b:a9:7a:c2:5d:a1:3b:c0:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:50:B3:82:03:44:FC:1D:26:AA:92:BF:91:B8:91:72:6D:38:F5
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:da:d9:b0:2c:78:80:23:14:8a:1b:af:7a:0f:d1:fc:6e:9a:
db:79:c6:24:1d:de:89:62:51:2c:f5:86:ba:e8:9c:0b:6d:08:
83:f6:72:49:a9:bb:02:43:5f:7e:30:1b:e5:6a:31:bc:2b:94:
70:12:c6:35:79:60:25:f5:9c:ee:d2:e7:b9:71:6a:f5:9f:0c:
fb:1e:48:a6:82:a7:e5:9e:25:db:a9:0e:b8:60:22:1f:0b:72:
3c:7d:1c:5b:aa:e7:a8:bb:84:0c:e6:19:f4:67:81:be:61:7a:
72:25:36:32:09:6b:8a:73:db:9b:b3:3f:35:1d:73:55:29:34:
cc:16:fe:44:b3:84:c5:fb:da:75:91:2b:4e:89:26:fa:14:d2:
c7:7a:49:f5:a8:26:3f:4a:e8:f4:6a:a2:41:a6:87:6b:4d:16:
e3:80:6a:15:4f:cd:7f:8f:5e:4f:2f:6a:19:6d:08:8b:8b:af:
0a:fb:56:3f:9f:07:12:00:83:25:2a:d7:b5:eb:af:1a:e4:e4:
97:88:72:4d:47:c6:d2:51:33:72:06:9a:01:e4:0f:85:c5:01:
01:1a:85:8a:6d:c2:33:ef:93:52:6b:30:fa:bb:a0:e4:54:61:
61:91:25:92:26:f2:2d:be:69:2e:27:4a:9b:4e:46:40:50:00:
7c:54:9e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:16:09 2025 by rpki-client