Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier: FGZI3ptypveWEQyvsPXPW/YoOveZXEjNRPkkJfvip7s=
Subject key identifier: FC:31:C5:6F:96:7B:11:68:C1:F8:55:BC:9C:A5:F5:AD:09:A1:B1:7C
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 019849D329761147DBEE97B606FD84517878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number: 150E
Signing time: Sun 27 Jul 2025 03:00:32 +0000
Manifest this update: Sun 27 Jul 2025 03:00:32 +0000
Manifest next update: Mon 28 Jul 2025 03:00:32 +0000
Files and hashes: 1: JlQN0N4As8kTE_2777wqlcFNrC8.roa (hash: gQA+8fA2lRTUYRE2yD6RworLn/rUFJdeb4rtkckOnyE=)
2: WD7cwf6HLxZKq0IMG8YbMTooJt0.roa (hash: JexN5Bcs7RxXPWQCAkKPWPwbZPwuEud7FpPGiuV9xSU=)
3: n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa (hash: ukpF9blWLJ1fHC+qQnWNibfuLjVHA9hpURE/X4EaFzY=)
4: qObypTg-nOBL35cm5Sg2yM7Yo3s.roa (hash: rh8dBS1PUlDYnkodpVPvUZaeXyMvofP2iGR3Qp60YxQ=)
5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: shrsd7dqJdHHL7KDqSLFpZkyM48K5XsQZeu35UYYAOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:29:76:11:47:db:ee:97:b6:06:fd:84:51:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Jul 27 03:00:32 2025 GMT
Not After : Jul 28 03:00:32 2025 GMT
Subject: CN=fc31c56f967b1168c1f855bc9ca5f5ad09a1b17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:a4:10:c0:73:ab:63:14:2d:65:a4:56:81:
9e:ff:f6:3f:d7:d8:21:bc:af:24:59:0a:46:82:df:
d6:b3:70:15:6c:69:b5:6e:66:f1:98:7c:b6:32:b3:
6f:85:05:93:d2:40:06:89:3a:16:ed:1d:78:ba:6e:
46:2d:2a:1c:93:29:9f:22:74:26:a1:c6:8f:39:ff:
b1:00:06:6b:40:9d:66:3b:4a:dc:00:39:72:8b:41:
32:2e:1c:c7:dd:87:14:5d:45:ad:50:89:44:f5:3c:
bb:04:1f:f2:d3:9f:3f:22:95:d4:0b:f3:b2:88:fc:
dc:fe:bd:62:fe:9c:d2:e2:a4:4f:be:fb:29:ff:2e:
0f:fe:0e:4f:3b:4d:ec:37:04:45:69:cc:23:2f:88:
77:f1:6f:cf:be:96:ae:3f:5e:61:2e:28:65:f8:03:
bb:e4:71:41:3a:e8:a9:52:a3:00:93:55:18:4d:ab:
6e:a4:00:89:9f:de:fe:da:7e:17:8f:d9:5c:19:c6:
41:27:d4:35:4c:78:85:d8:a2:46:51:d7:fd:11:ae:
79:59:ec:3e:83:f9:e5:8a:8e:9e:97:f9:fc:f2:92:
6c:c8:cb:d9:94:cd:42:31:2a:75:30:71:d5:1a:2c:
37:69:09:29:af:17:79:11:b9:bf:82:cb:d6:48:0a:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:C5:6F:96:7B:11:68:C1:F8:55:BC:9C:A5:F5:AD:09:A1:B1:7C
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:34:3f:da:49:bd:84:f6:65:bd:63:74:09:da:d5:d1:f7:cd:
ab:66:aa:6b:5b:43:d2:3c:a5:b4:85:70:ab:b9:96:63:b9:b8:
93:4a:c1:98:1f:7e:0d:c2:6c:10:e9:10:b0:43:5c:cd:f1:75:
36:6c:da:8f:65:a6:aa:f6:2e:4e:92:52:15:9e:9d:67:79:8d:
ab:ff:ef:1a:f6:1d:52:04:a0:5d:e4:8e:20:93:3e:08:52:8d:
0a:98:86:53:f0:34:36:d2:d5:07:f5:01:83:d2:ed:d8:4a:91:
c8:5d:ae:b3:1e:c3:fc:d2:f6:20:d7:10:7a:08:1a:ca:70:29:
f6:e9:d4:d7:94:22:70:e7:c7:2e:eb:4d:89:32:d1:f2:50:d9:
2e:d3:d0:dd:4f:5a:e2:2d:78:ed:93:82:30:09:c9:96:e1:9a:
97:d5:3a:28:3d:3a:36:34:b4:e1:d1:01:9a:ef:53:ca:f2:19:
55:a7:1a:c0:9c:cc:f5:cf:66:c3:53:4e:66:c6:db:67:51:1b:
a8:4b:92:35:f3:08:7a:f8:75:c5:11:bc:d7:1a:e6:3f:8b:0c:
2a:33:9c:0b:48:36:64:11:9b:01:1b:0e:f3:f2:f7:9d:9b:3e:
10:ae:22:c3:b4:84:f7:38:2f:6b:bc:67:fa:6d:cd:9c:cc:51:
71:40:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:59 2025 by rpki-client