Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: Vni6WzOIFqkIs9YKlBSSgOJYfdQ4lx/d2UPFFcTVbM8=
Subject key identifier: 03:98:DE:A4:E1:85:52:A6:C7:04:99:BC:96:20:6C:25:06:0F:63:92
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 01984B8ACE297D60637BEA0FEE9B11995774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0667
Signing time: Sun 27 Jul 2025 11:00:44 +0000
Manifest this update: Sun 27 Jul 2025 11:00:44 +0000
Manifest next update: Mon 28 Jul 2025 11:00:44 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: Pdsoo1/H6gw5NKbSGXuXWNV0RzMxGz1uVtKN+jdq0Hw=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:ce:29:7d:60:63:7b:ea:0f:ee:9b:11:99:57:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jul 27 11:00:44 2025 GMT
Not After : Jul 28 11:00:44 2025 GMT
Subject: CN=0398dea4e18552a6c70499bc96206c25060f6392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:54:86:5e:cd:09:f5:d7:ad:c9:46:43:c7:
d1:a9:a3:d5:8e:05:e1:6a:52:75:78:53:38:42:0e:
47:40:7f:a6:b5:03:78:88:82:df:41:68:36:47:92:
0a:b0:85:a7:3d:d0:50:e2:ae:fe:19:ba:ca:93:fb:
79:c2:2c:a1:d9:04:56:f7:9a:e0:43:a3:6a:56:21:
5d:96:42:69:a6:e4:4e:bb:4f:2f:2c:11:11:d2:01:
80:6a:e3:96:1a:05:5a:db:9f:d3:e1:50:5b:37:0f:
79:96:be:fd:3e:f4:a8:4b:4c:60:d1:98:27:ec:65:
84:79:63:98:98:d5:7a:37:cc:99:63:c6:a7:d1:e6:
7b:63:53:8f:1c:f9:3f:5d:ff:02:47:53:30:9c:5b:
dc:e0:71:ff:6e:3e:63:57:38:25:6b:bf:52:1d:0d:
99:74:32:d1:d8:b1:ae:e1:cd:f6:04:7f:1e:cc:0b:
65:15:aa:39:b1:79:86:ad:30:5b:0f:0f:0b:97:15:
fe:cf:4a:6b:e1:80:f6:ba:9f:8a:3e:ee:83:8b:53:
64:7b:31:14:6f:07:dc:dd:b7:ac:ff:c5:ef:3e:7a:
5a:04:de:7b:15:5c:00:8c:7a:92:1f:66:24:36:71:
cf:ea:54:eb:15:8e:ba:4d:09:0f:00:53:7b:b0:27:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:DE:A4:E1:85:52:A6:C7:04:99:BC:96:20:6C:25:06:0F:63:92
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e7:70:be:88:2a:3f:f5:c2:5c:81:a2:87:04:e2:b5:5a:60:
94:75:e5:d1:9e:f7:ce:03:36:29:17:fd:4e:95:b9:c6:c5:53:
82:4b:75:7c:de:3a:8d:8f:89:fe:3c:d9:84:80:a2:ea:22:d8:
83:dd:07:d2:f7:83:cc:0d:f0:d5:8c:19:4d:ca:3a:31:22:dc:
a0:71:a3:c0:92:b0:46:b5:f4:05:4d:f9:7a:a0:0c:4b:c3:8c:
0e:83:a9:f9:bd:d5:14:21:73:79:08:88:3f:2c:0f:db:fd:76:
51:6e:a2:cb:f9:d8:d0:28:87:3f:10:84:26:eb:d2:ba:3c:32:
ee:bd:c8:39:fe:66:10:e0:73:1b:ac:bc:34:3c:f4:ce:62:44:
96:b2:25:de:29:7d:cc:f5:22:1b:79:95:48:f5:34:b9:30:11:
3c:d9:02:d1:ff:34:0f:12:3d:1b:30:e8:be:f1:95:92:b2:ee:
9c:94:f1:19:09:0f:2e:b7:34:1d:8d:3e:9f:9f:c5:45:98:f3:
0b:d5:09:88:89:48:d4:cf:d5:b9:ec:83:e1:17:74:20:b5:6f:
db:cc:66:96:db:0f:75:c3:86:bc:01:31:68:2d:02:0c:66:e4:
af:d3:34:58:b4:b3:e8:bd:48:fd:01:79:76:ce:ad:f3:d4:fe:
92:90:a8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:44:01 2025 by rpki-client