Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: ShpQRubXE5BTT0WuO5xyLMOq9QBN/h4D8SCLp+3/dAI=
Subject key identifier: EA:81:5E:BF:AA:9A:33:E1:FC:85:70:4B:63:55:5E:1E:BE:92:58:A4
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 0198530E68151BC3DA41D1C5047D834EE235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0A29
Signing time: Mon 28 Jul 2025 22:01:49 +0000
Manifest this update: Mon 28 Jul 2025 22:01:49 +0000
Manifest next update: Tue 29 Jul 2025 22:01:49 +0000
Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: BXd0dLmvm7vtP4lS5TgXABkRClI0UDJNfV37IFXS+yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:68:15:1b:c3:da:41:d1:c5:04:7d:83:4e:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Jul 28 22:01:49 2025 GMT
Not After : Jul 29 22:01:49 2025 GMT
Subject: CN=ea815ebfaa9a33e1fc85704b63555e1ebe9258a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b9:13:1c:a9:ba:ea:b3:ca:47:95:40:be:2b:
24:29:75:5f:f1:64:f6:9d:67:bc:25:df:c1:1f:9c:
ef:7d:95:64:e9:bc:eb:e9:7c:96:a6:58:de:48:12:
f7:2f:d0:39:08:6a:f9:f0:70:e6:9e:06:fd:05:2e:
3d:30:3d:27:de:d1:79:d1:84:ef:10:67:f5:9b:e6:
49:d4:c7:03:e6:cc:42:a3:30:02:7b:5b:b2:f5:35:
17:52:83:70:cb:95:b2:91:ed:f6:c4:22:a0:fd:d7:
8a:b2:87:7a:4f:1c:42:7d:f4:5b:d2:a9:35:32:17:
ca:cd:36:8a:66:e8:f1:e2:f0:8f:89:9b:b5:ab:4e:
12:22:76:20:25:37:89:69:4c:26:b6:6d:23:63:32:
09:a1:9a:a0:26:e2:0a:a6:1d:01:95:f0:19:72:95:
50:35:b4:d1:39:b1:45:7d:7e:ac:10:5f:db:bd:c8:
3e:30:eb:8a:fc:02:e1:4e:74:70:49:a5:ed:41:2e:
4e:88:51:5b:04:57:22:8e:e9:7e:00:c3:52:ea:c7:
5b:8e:62:29:fb:2e:48:8d:24:89:11:98:4f:e1:13:
b4:6b:fa:b2:29:1a:35:90:b9:57:ac:55:99:4f:5b:
be:4c:8d:be:5d:94:21:77:d4:d0:a5:d0:71:f0:48:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:81:5E:BF:AA:9A:33:E1:FC:85:70:4B:63:55:5E:1E:BE:92:58:A4
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b7:e6:44:c6:18:a9:bd:05:83:e6:33:a6:c3:74:0a:d3:8e:
77:53:f4:cb:ae:0e:8c:4a:db:40:4d:ce:40:4a:44:0c:e0:76:
0b:88:a9:22:ba:86:ff:2b:58:ef:58:ea:10:fb:bf:66:df:5f:
42:26:55:65:e8:80:66:d4:a6:e2:11:38:b7:37:13:3b:4c:96:
03:55:1b:f1:5a:c0:67:f5:01:4f:4f:8b:75:7c:8f:d1:29:29:
75:a7:ab:74:c7:f6:e3:0c:5a:ea:c0:03:a5:1d:58:bf:52:03:
76:e0:40:70:36:81:e4:73:f8:3b:e4:40:a6:e4:40:78:fb:1c:
31:b0:be:bb:f7:c3:be:1e:3b:b8:4f:d7:e5:6e:c5:ce:83:62:
9d:7d:3d:2e:7f:7b:4a:7b:09:3d:8d:ed:92:f6:cf:df:94:8c:
d0:96:d8:ad:f4:9a:a7:7f:6a:9d:d8:dc:05:6d:07:0a:55:b2:
e9:f8:99:69:59:9d:16:bb:1a:a4:2f:9b:00:3d:76:26:c1:37:
02:73:b6:dc:0e:09:64:8d:91:74:28:ea:e1:e6:a9:8d:84:49:
89:2a:fa:3a:19:9c:58:29:fd:59:21:14:d7:ab:ab:c9:f6:10:
d5:51:5c:8d:76:20:e9:ae:7c:93:9f:27:30:11:26:20:d0:c8:
95:f3:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:43 2025 by rpki-client