Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: zQx2jA00zrX6LKvC2YgOKkkGBL5JUWugiH/kewAcIws=
Subject key identifier: 74:45:C7:92:4A:27:A6:F9:F4:88:0E:4A:27:C9:D7:0D:ED:86:B8:5E
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 019848F78CAC360F9503380D0A827767F3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 0562
Signing time: Sat 26 Jul 2025 23:00:39 +0000
Manifest this update: Sat 26 Jul 2025 23:00:39 +0000
Manifest next update: Sun 27 Jul 2025 23:00:39 +0000
Files and hashes: 1: qeRkAxuKV7jDoBRtnwhgHvVO2oU.roa (hash: AbAyYkMckXNzAm/R63UZOCSEewsBDfH65FR66tVjq2s=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: VXmavMi4Ds2I11Mp5Cxlq91BH3Enl0JGNsomoqvvN3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:8c:ac:36:0f:95:03:38:0d:0a:82:77:67:f3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Jul 26 23:00:39 2025 GMT
Not After : Jul 27 23:00:39 2025 GMT
Subject: CN=7445c7924a27a6f9f4880e4a27c9d70ded86b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:08:c3:95:d1:65:40:4e:3c:19:6d:77:7a:
90:25:6b:1d:b0:60:8a:4e:40:74:3c:35:cc:df:b2:
c6:4e:d5:0f:e2:88:6c:23:be:e2:9f:96:fc:1a:ea:
04:b6:c8:36:ca:c3:45:59:94:fd:24:a8:9a:90:63:
36:43:47:52:a4:f5:3a:28:95:70:2f:05:80:4e:8e:
b0:35:00:d7:90:d5:86:70:4a:86:b2:01:76:c7:2c:
b0:19:5a:df:0f:33:88:b5:c0:7d:86:e6:02:74:2c:
b3:f2:23:f9:ae:63:e0:07:a3:a2:1d:5e:fa:12:02:
02:6d:35:5e:23:2e:8c:d9:11:11:5b:3e:71:33:45:
a5:81:1a:21:97:e8:39:1e:3c:8b:f1:66:da:56:3c:
31:9e:cf:52:6c:c7:d1:59:a9:8d:76:29:54:ff:8c:
1b:b5:e9:a3:84:33:93:03:8a:c0:e2:df:3e:35:16:
6d:9f:c9:bf:c9:aa:53:a8:78:6a:fc:a6:4d:d5:9a:
13:21:aa:00:77:ff:14:6b:3c:5b:6d:5f:f7:1a:af:
b8:35:53:0e:ba:1a:b9:6c:19:4b:96:6b:f0:a8:18:
27:04:ae:0b:60:e6:ca:9f:d3:b2:4b:38:43:3f:bc:
d7:3c:82:ff:b1:be:78:5c:42:a2:e4:72:de:b3:2d:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:C7:92:4A:27:A6:F9:F4:88:0E:4A:27:C9:D7:0D:ED:86:B8:5E
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a0:d4:2c:92:d6:c1:00:a3:68:57:46:ed:19:4c:76:a7:5a:
fc:21:78:bb:18:1c:06:40:19:23:6e:8a:01:5e:a9:0c:46:92:
57:67:f3:f5:5a:27:38:85:19:8a:03:28:0e:dc:1d:ff:54:ee:
64:e0:c8:18:76:ed:51:eb:90:76:fd:5f:a3:97:fa:bb:8b:da:
09:68:75:26:07:e6:82:d4:5f:9b:2a:7d:7e:32:81:09:28:8d:
a0:66:d4:4f:11:dd:4d:a3:c2:75:99:a3:b4:c3:6e:3e:11:5c:
a2:25:06:72:d8:b3:be:7f:79:36:54:4b:59:90:ef:92:1a:a2:
a4:30:27:4b:af:76:dd:01:ea:1a:1f:41:a8:33:19:ca:56:61:
15:36:59:30:3d:3b:17:bd:b1:39:14:a6:57:7d:ee:7a:5b:37:
1a:57:4d:45:ff:03:75:c2:f4:b1:8f:68:1c:c4:1d:f2:d7:fa:
3b:84:5f:8b:98:f7:94:a5:f1:b9:be:36:2c:58:e9:51:40:29:
5e:2a:f9:9f:e9:29:55:8f:98:49:9f:8e:1a:38:6d:8c:e0:77:
da:28:37:34:88:0e:90:d4:10:50:2a:18:14:05:fb:75:d0:8e:
b7:9d:e7:b6:e0:5f:22:59:e3:d0:78:e0:6e:ed:b1:19:f6:cc:
9d:e7:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:57:31 2025 by rpki-client