Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: aC3q0GGRSZkfV83YsEHFbJ02P+UFgCzbg1U3WD0PXac=
Subject key identifier: C3:B4:24:30:B8:CE:44:81:B6:54:1A:09:F8:FA:1E:32:88:C4:99:F4
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 019847E4D4752F5E74647C446F164E81DF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 131A
Signing time: Sat 26 Jul 2025 18:00:35 +0000
Manifest this update: Sat 26 Jul 2025 18:00:35 +0000
Manifest next update: Sun 27 Jul 2025 18:00:35 +0000
Files and hashes: 1: 01CdWbGh7Iblu72TWh19DMuKsTg.roa (hash: UMhszvGboz7Q5LH0CKudFHnP8+S6bLFVIG5m3eTTe34=)
2: BRkboOx_3fEjuYhSpVsqCaav6Nw.roa (hash: mmNeus1/l5cYym/HIYOW1rRfvqENuE8CN24AevBAmxw=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: nebbrjUStNI3xNE9n2+7GyrREIbKQgpENL+B//FnFKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:d4:75:2f:5e:74:64:7c:44:6f:16:4e:81:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: Jul 26 18:00:35 2025 GMT
Not After : Jul 27 18:00:35 2025 GMT
Subject: CN=c3b42430b8ce4481b6541a09f8fa1e3288c499f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:87:63:ea:b1:e0:0d:12:87:a5:28:3c:09:
e4:80:03:84:26:f2:15:68:b4:27:2f:50:dc:ad:dd:
80:6a:88:d4:7f:14:56:60:07:3a:e6:05:be:7e:10:
f3:5e:42:60:21:56:b1:bd:17:0e:6b:62:26:e9:b0:
5a:5a:f5:82:c8:7a:be:35:0f:15:4d:30:3e:ac:d8:
f8:44:77:89:3b:d4:e1:06:84:c6:78:ef:ab:e9:90:
4c:95:b0:55:c5:c9:1d:a0:2f:b7:fe:b7:1d:a5:87:
16:4d:b3:0e:24:4c:22:ca:b0:50:8b:4b:bd:1b:9d:
1a:4a:5c:01:6e:96:c7:90:cb:3f:d1:e0:12:75:c7:
47:96:77:11:1e:05:d9:51:f1:eb:f2:86:bf:d6:04:
0c:af:f9:48:f3:a6:d2:3c:ba:c9:cc:3b:58:de:75:
24:f8:66:d6:0c:62:6c:38:bf:41:6c:00:be:02:e0:
32:b7:22:9b:2e:e3:62:39:b5:47:95:f8:c8:64:d6:
88:8d:22:60:91:15:0a:08:27:fb:a9:54:26:c5:18:
36:0d:fe:84:d4:d1:7d:a2:6a:40:b2:e9:65:36:a3:
ca:84:4d:0b:ca:41:8c:e1:5b:a5:6d:30:bb:76:ba:
bd:ab:0d:d6:a8:13:73:d0:ab:93:6f:c0:dc:6b:b5:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:24:30:B8:CE:44:81:B6:54:1A:09:F8:FA:1E:32:88:C4:99:F4
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:db:61:80:b7:fd:8c:a5:47:89:df:12:71:63:1d:6a:cf:5f:
62:31:af:4a:72:f2:13:7d:80:d1:0e:81:2c:10:1f:15:a1:c7:
c9:76:f3:a1:56:db:7f:a7:d6:35:c1:73:a3:f7:df:c2:51:22:
59:b6:e5:a2:0a:d3:4a:79:62:e4:10:3b:1a:f1:c4:01:99:e9:
19:74:37:7d:2a:0d:2c:df:83:40:ca:49:c0:4e:da:23:f0:7d:
61:91:ed:9b:66:f7:37:6f:fe:38:03:42:76:bd:fb:af:4d:0c:
d6:4f:29:61:a6:ad:69:42:13:9f:10:bd:91:bf:3b:ca:ff:13:
69:39:9f:79:40:bb:ba:a7:87:51:ce:17:26:af:18:9c:0c:41:
b8:89:a6:c9:0d:58:76:ca:44:bd:8d:21:d6:95:a9:80:b2:0e:
81:56:33:74:3f:f9:ac:f8:9a:51:42:c7:de:aa:0a:5e:f1:00:
14:ec:be:9e:3a:3b:23:ad:b3:e7:65:50:b2:63:31:d9:86:af:
ce:0d:d9:dc:5e:12:61:b6:6e:9c:94:28:f9:7a:a2:2a:7b:d2:
d2:7c:71:36:da:0c:c3:83:45:07:62:49:e8:96:ec:fa:d3:6d:
b5:9e:40:a1:c5:75:1e:09:3d:2d:01:31:e5:b2:07:27:bd:5b:
b6:f7:c9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:08:58 2025 by rpki-client