Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: eGN4SYzGoj4vl8Y6TDgXgTjlIvrx1GAYzUvaoXV7S7M=
Subject key identifier: 30:0A:66:01:6C:F5:78:07:FA:43:46:90:13:BE:CB:01:D3:CA:EE:7F
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 01984964F89F1BE13854DBAE7A9D59614634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 0688
Signing time: Sun 27 Jul 2025 01:00:10 +0000
Manifest this update: Sun 27 Jul 2025 01:00:10 +0000
Manifest next update: Mon 28 Jul 2025 01:00:10 +0000
Files and hashes: 1: QREl75-pSDzY1cGp7JFGJZqBbdk.roa (hash: 8F8IjWrIbjzgy41ElzsTSysUdH3FvkTJCpcji0/HmYc=)
2: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: FWd9G8CzJnpb5eqyCN/8UIiE2+MVQmYVCZsGkkxF+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f8:9f:1b:e1:38:54:db:ae:7a:9d:59:61:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Jul 27 01:00:10 2025 GMT
Not After : Jul 28 01:00:10 2025 GMT
Subject: CN=300a66016cf57807fa43469013becb01d3caee7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:ef:9f:de:b2:64:0c:d9:2e:aa:d0:fd:81:
cd:3b:5b:8f:38:1d:23:f4:ff:d2:59:33:dc:df:cc:
2b:47:c1:81:04:41:3b:97:fc:0f:e7:a9:5a:fd:b1:
19:d7:ee:ad:1f:c8:59:7b:f6:f1:db:6e:05:63:a7:
f0:f9:df:b4:93:3e:7c:ce:de:10:a3:39:a7:c3:b9:
9e:58:4f:d1:a8:53:bd:f7:09:5a:50:71:26:6b:8e:
0b:65:8a:75:98:14:76:ce:bc:71:0a:6e:93:b2:71:
e6:3f:b2:24:63:cb:24:6e:88:80:2c:12:6c:16:88:
1d:37:c2:96:bb:b6:fd:81:62:9d:e1:09:bc:ee:32:
04:12:5b:8d:0c:72:96:97:a2:fd:42:e4:07:7d:ae:
ba:05:11:64:1f:cd:7d:ac:61:12:cf:95:d9:22:7a:
0e:3c:17:c0:50:54:ac:0c:27:c3:36:9c:8c:5b:72:
dd:02:44:f0:9d:f6:96:e9:b5:6d:fe:9b:f1:be:36:
f0:04:39:26:8c:21:27:c9:97:cd:0d:b1:3f:4b:9f:
e7:36:23:83:b5:c1:ba:b4:37:6d:ce:40:db:21:9d:
84:51:7a:17:9a:69:b0:78:fd:d4:76:97:1e:9c:41:
bd:4a:98:ac:e3:8d:7d:0b:75:36:3a:37:f0:c4:00:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:66:01:6C:F5:78:07:FA:43:46:90:13:BE:CB:01:D3:CA:EE:7F
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:15:ea:a3:d3:5d:32:9d:98:c9:13:5f:50:50:8a:21:81:
21:60:65:0f:72:f9:1b:d4:dd:9d:8f:09:36:97:04:7d:5d:4c:
65:78:df:02:fe:f9:a2:aa:dd:e3:2f:13:68:35:dc:88:75:b2:
0a:97:1e:1f:9f:75:c4:66:a5:3f:ee:58:c8:af:05:5f:64:1d:
ca:2c:34:fc:ee:16:ef:1e:84:b1:86:85:9f:8f:ce:6a:6d:e8:
a1:1f:40:df:52:34:ee:f2:4e:be:43:4c:80:be:06:4e:0f:c2:
a3:02:fe:a3:78:9e:a3:f5:a5:49:6c:6d:23:44:db:ad:f7:76:
8a:67:77:20:2e:5e:63:e9:d6:10:d0:dd:9d:65:07:c5:f7:6b:
34:43:e6:e8:46:23:df:a3:69:ec:e6:44:aa:3b:3d:1a:e0:24:
1f:2f:dd:56:15:9c:b8:46:39:d2:7c:c9:11:40:ee:aa:d5:69:
05:4e:27:3d:da:56:f4:3e:f3:5e:52:f6:d2:05:37:85:2a:63:
db:91:7e:9a:e0:fa:9d:b4:c3:87:08:ad:2c:fe:09:74:43:cb:
9f:2a:b8:24:37:71:cc:e5:0d:30:e9:66:9b:c6:80:92:06:9c:
68:bd:66:27:20:57:8e:d3:19:3e:e3:07:1d:42:1a:c8:db:c5:
1f:77:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:42 2025 by rpki-client