Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: 5w9L7oSeHStPiyO1mss0EHTmcEd6NlLC42Jmw7DkfQA=
Subject key identifier: A2:BB:6D:40:00:48:9B:05:F9:A7:96:63:E1:05:7B:EF:FF:1B:6B:D9
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019848F7382E4895F17BBB13A3E2FFAAE041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:17 +0000
Manifest this update: Sat 26 Jul 2025 23:00:17 +0000
Manifest next update: Sun 27 Jul 2025 23:00:17 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: M5VLNhYkblQBMiot5UfYtTLnmJFjWgmLRI+4A9zYZXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:38:2e:48:95:f1:7b:bb:13:a3:e2:ff:aa:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jul 26 23:00:17 2025 GMT
Not After : Jul 27 23:00:17 2025 GMT
Subject: CN=a2bb6d4000489b05f9a79663e1057befff1b6bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:b8:6a:fa:5c:eb:59:29:2a:31:7a:0b:3e:
2d:12:c8:78:49:6d:da:a8:7f:59:64:d8:e1:ab:96:
48:cd:2e:03:dc:e4:9d:92:ef:d9:6f:92:96:b0:b8:
77:2e:f3:9b:e3:bc:73:37:2c:08:c8:e5:d4:46:18:
f2:ee:04:5a:2b:7a:e5:53:ed:20:89:50:d5:87:1c:
36:74:aa:b6:b7:34:9b:2d:f3:99:7a:60:d5:de:2d:
2b:43:55:36:30:5a:e6:3c:fd:1a:f4:a7:08:04:cb:
22:02:66:aa:b5:45:3c:41:bb:c3:1e:33:8a:10:ed:
a9:79:96:94:28:d6:63:15:be:81:82:cb:27:6b:fa:
8b:97:70:3a:b0:1e:e0:ce:33:79:0b:d1:24:b0:38:
56:43:fe:6c:67:77:bf:ca:3e:ef:ba:e1:1b:87:07:
30:76:8b:5f:c0:09:33:98:68:38:d3:c0:7b:23:b5:
c8:98:99:de:e5:23:8a:8f:fe:0a:b3:a9:a1:18:e0:
1e:f4:03:b5:90:36:8f:97:14:20:db:cd:cb:72:ce:
4c:5e:01:80:e9:1a:0f:65:39:e8:b3:54:b4:5e:a3:
c4:1f:1c:da:db:0c:b0:b2:6b:25:79:ab:24:75:8a:
63:b3:c8:96:5a:e6:5a:27:38:a1:8d:39:f4:dd:a4:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:6D:40:00:48:9B:05:F9:A7:96:63:E1:05:7B:EF:FF:1B:6B:D9
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:db:3e:e5:fa:41:a7:2f:4c:d2:dc:f2:d7:7b:3d:bb:7f:01:
d4:e9:a6:5d:a2:0a:f1:bd:0c:ad:62:4b:a4:86:84:22:3a:2e:
78:39:b6:f4:69:dc:bc:4a:41:e4:18:69:5d:85:33:d3:1b:be:
5c:a9:a5:14:9b:fb:cb:ac:f6:11:ff:05:28:e8:8d:51:4f:b0:
01:40:49:b5:be:58:b0:38:ee:fd:8c:e9:e2:68:63:ba:bc:ef:
13:a7:b8:f1:24:3a:a5:13:d2:b2:fc:cb:f0:07:d5:cd:ac:37:
28:0b:c6:37:15:60:7d:07:63:32:c8:12:49:50:ce:ae:0f:d6:
23:ba:fd:a3:c2:45:62:9f:91:f2:81:55:59:dd:18:cf:6e:1a:
dc:62:3d:bf:48:48:41:ab:94:5d:56:05:b6:e9:62:35:15:9a:
4d:61:13:9b:ef:8f:33:c8:04:e1:cf:4c:f3:3d:d7:29:6e:a0:
36:6c:28:28:70:61:6e:3d:40:44:61:21:bc:d7:01:69:73:8b:
4b:f5:ba:61:2b:64:a5:86:b4:8c:dc:0c:5e:62:0d:ce:ad:1e:
72:70:3b:e7:ee:10:18:a9:ea:e3:56:97:4c:e7:a9:e3:75:05:
d3:5b:df:49:18:7c:b1:c8:81:82:39:3f:11:e9:e7:41:9e:6c:
4b:84:f0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:28:12 2025 by rpki-client