Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: 3ncd74Ll5sk3vxrjtbVJpOhd8l7gmwkZUqV0D62a75k=
Subject key identifier: 07:FA:80:34:FB:80:21:B1:7C:5B:F9:20:30:2B:2D:29:B5:D9:D9:F6
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 01984B5482804A90E5E70E762403E7C81542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 10:01:26 +0000
Manifest this update: Sun 27 Jul 2025 10:01:26 +0000
Manifest next update: Mon 28 Jul 2025 10:01:26 +0000
Files and hashes: 1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: ko/K6l03DVj5hBUAUqAzmIZYHMs1UYFAXP3mJzqx9aE=)
3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:82:80:4a:90:e5:e7:0e:76:24:03:e7:c8:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Jul 27 10:01:26 2025 GMT
Not After : Jul 28 10:01:26 2025 GMT
Subject: CN=07fa8034fb8021b17c5bf920302b2d29b5d9d9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:11:bb:d6:43:ff:4c:69:1b:38:ee:5c:19:
19:d7:91:48:79:25:ff:e2:dc:f7:f4:23:14:de:16:
48:b5:a5:89:52:b3:bb:4c:ca:a0:00:48:92:1e:42:
03:0d:de:5b:9d:ec:4b:31:51:80:a2:75:a8:b3:17:
c6:59:79:ea:24:9c:5c:b1:f5:e8:55:b3:3f:f1:c7:
bf:7d:d7:d9:9b:e2:7b:2d:b3:27:64:b5:ae:09:39:
63:aa:82:8e:d7:4d:e0:0d:eb:86:19:04:2a:ab:5f:
75:23:3f:1f:c4:2d:3f:ab:9e:dc:41:08:a0:be:20:
cb:50:3c:14:93:71:cd:b2:cf:35:4a:f2:04:07:fc:
c8:8d:f2:fc:6d:09:fb:ab:7c:a1:6f:ab:3a:2e:8e:
a6:46:c8:ae:2f:28:17:40:eb:30:4e:ca:5a:28:b0:
0c:1e:11:c4:62:5e:f5:33:22:fb:ac:2b:4c:ce:06:
70:32:74:70:e6:2f:9f:ed:82:38:3c:46:c2:cf:1c:
d7:87:25:92:ef:81:5a:82:32:0d:6a:7f:a7:f4:97:
85:0d:45:71:e3:64:48:1f:1e:77:cb:5d:05:71:e1:
6b:fb:c7:24:85:a2:c0:0e:1e:29:7d:5a:e6:b6:de:
69:25:c4:3c:2f:ac:74:a2:0c:4e:9c:80:e2:3a:1b:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FA:80:34:FB:80:21:B1:7C:5B:F9:20:30:2B:2D:29:B5:D9:D9:F6
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:71:2a:47:7c:f4:89:98:38:2f:6f:a3:65:06:8b:69:5b:7d:
5f:fa:98:e8:fc:96:78:dd:7d:28:a0:d0:b8:70:f5:2c:cb:52:
84:b6:87:13:4e:34:f8:cd:b5:95:e8:87:21:82:59:c1:f8:dc:
4c:ed:74:86:3b:7d:45:c5:6b:3d:2f:e5:c8:c1:e5:7b:95:02:
a0:bd:6c:4f:df:0a:27:c2:f7:97:78:ae:02:cd:33:39:40:c2:
39:5e:6e:60:a5:a4:7a:dc:4e:c2:f4:85:19:55:22:5d:15:e6:
4d:ea:dc:d1:7b:c2:bf:c9:74:c7:5a:93:e5:c7:b5:46:d4:e4:
8e:70:bd:d0:48:59:91:11:4e:28:38:35:c4:b8:40:84:5b:4e:
f4:7e:97:43:24:87:ec:78:21:58:5a:b0:64:97:0f:52:22:0e:
95:ac:51:44:b5:1e:f6:44:6d:e8:94:10:bd:bb:dc:5f:41:f8:
7e:b1:95:75:cb:28:2c:4a:e7:21:6a:27:fd:be:43:5d:b0:ea:
d5:1b:43:72:0e:60:8c:d9:9b:e1:76:43:d9:66:ac:01:95:d6:
d3:28:22:e1:04:46:99:a3:5c:98:82:b8:bb:bd:f8:69:a1:db:
be:98:f5:f4:cf:04:f3:2b:0f:26:b0:26:3e:f8:e9:76:de:9f:
01:00:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:55:10 2025 by rpki-client