Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: 23C58qAr66dWsW+LaHzmAZmtAd2r8Gq3e5c9CgzB40Q=
Subject key identifier: 3D:CD:0B:0E:6B:A8:65:34:4E:21:E1:E3:A3:5C:DB:45:30:F3:A1:1B
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 019839847720BC5CBEFA902D29FF94F03B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 9B
Signing time: Wed 23 Jul 2025 23:00:39 +0000
Manifest this update: Wed 23 Jul 2025 23:00:39 +0000
Manifest next update: Thu 24 Jul 2025 23:00:39 +0000
Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=)
2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=)
3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=)
4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=)
5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: DT2otNbk4eUCfl1Jt6sF2RGIDLtkRHnr1Jxr/pRi9Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:84:77:20:bc:5c:be:fa:90:2d:29:ff:94:f0:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Jul 23 23:00:39 2025 GMT
Not After : Jul 24 23:00:39 2025 GMT
Subject: CN=3dcd0b0e6ba865344e21e1e3a35cdb4530f3a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:f8:62:d6:ab:0f:f1:de:bb:bb:73:fb:7f:
4f:af:f5:1c:33:8c:a4:d9:f2:7e:9b:24:e9:b4:6f:
42:8a:35:f6:1e:d6:95:2b:38:34:a2:c4:d7:41:14:
9a:7c:a1:ad:18:6f:45:ed:2f:30:2f:6b:41:19:bd:
1c:2b:48:42:0f:53:f4:f8:ea:d5:75:eb:af:60:22:
06:54:13:05:67:ce:64:45:4f:56:cb:48:9f:af:59:
2e:d1:46:af:92:da:bf:ef:15:c1:88:08:42:bb:32:
5b:d9:5a:34:dd:5d:3a:3c:0d:4e:b3:c4:7c:58:7d:
66:87:58:6e:67:99:08:df:bd:b7:ea:5c:77:f7:3f:
24:f0:52:7c:65:75:50:08:b3:76:71:f5:5a:92:c8:
63:2f:c7:e4:5a:02:4b:eb:86:f9:1a:2e:15:9e:79:
78:bb:41:1a:77:98:7f:c3:7d:9b:c0:3b:b9:d0:54:
56:65:eb:d4:7a:20:e0:c1:e2:1c:34:eb:32:76:01:
29:de:a6:6b:3a:93:d6:ac:5b:96:9a:22:49:9b:bd:
b1:cf:d7:96:6b:61:70:bb:e1:4c:45:8b:a5:39:44:
1d:03:ad:94:ea:29:26:f9:68:81:e6:e1:81:83:20:
48:bb:dc:78:b0:0f:f5:01:b7:bd:ac:3f:ab:a6:db:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:0B:0E:6B:A8:65:34:4E:21:E1:E3:A3:5C:DB:45:30:F3:A1:1B
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5b:a8:c4:8a:4d:29:b2:58:c7:e5:11:f9:a7:56:81:be:30:
17:83:04:99:8b:2d:c1:84:4a:ab:97:15:de:d4:2b:6a:0e:12:
cc:d6:24:45:04:39:42:b6:45:6f:39:14:9e:1a:78:91:25:e3:
87:a6:80:5e:00:1c:be:53:18:5b:b0:c2:aa:4b:cf:f8:95:fa:
59:74:1a:1a:f4:7f:34:5d:22:1e:3d:15:82:8d:15:b0:6e:86:
e4:85:fc:9b:04:5f:49:23:4e:73:9f:f0:61:bd:70:59:9c:9d:
a6:4c:c4:5f:40:ac:6f:cf:bd:7b:02:22:80:f6:80:dd:2f:c3:
d7:88:5f:42:84:e1:5f:ab:1f:09:88:ce:04:5f:44:1f:88:f5:
65:ee:81:11:73:4a:3a:d2:5c:92:9f:64:29:a2:99:e5:b2:dc:
24:37:e1:cb:29:da:3a:ce:3a:e3:ea:ec:bb:92:75:3f:c4:e9:
41:51:68:54:78:09:44:e1:8d:dd:d8:e9:c2:e2:d2:62:0a:ce:
84:2f:41:20:aa:a9:20:a8:aa:4a:66:54:35:fd:46:89:21:e4:
c9:31:b6:37:2b:19:61:31:75:ed:52:5f:5e:11:19:db:74:47:
85:91:d0:a4:13:39:ee:ee:89:a0:45:b7:2c:7a:9f:fd:a5:2c:
9a:dc:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:38:54 2025 by rpki-client