Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: 7bhSflOFfZ1VGAgoyRp58mA5oYFGhZnE/imzniuRUS4=
Subject key identifier: 6A:3E:8F:22:28:FE:40:36:C8:85:1E:B5:46:8F:0A:89:6B:D4:1B:2D
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 019848F75420615993DC63963400A11546B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:25 +0000
Manifest this update: Sat 26 Jul 2025 23:00:25 +0000
Manifest next update: Sun 27 Jul 2025 23:00:25 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: ULPVK6oEaZV1T46Y3B6ZIXPFEps8W0yOZRqMXLaAgz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:54:20:61:59:93:dc:63:96:34:00:a1:15:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Jul 26 23:00:25 2025 GMT
Not After : Jul 27 23:00:25 2025 GMT
Subject: CN=6a3e8f2228fe4036c8851eb5468f0a896bd41b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:ce:9d:92:82:01:89:ed:3b:cd:ac:b6:d3:
b3:fc:25:30:f4:b1:02:75:e2:a4:35:cd:ed:8a:66:
77:81:44:a8:83:55:b3:73:67:9c:ad:cd:36:f3:87:
61:fb:96:1f:27:ec:d0:40:51:1e:83:2e:2d:bb:14:
1d:92:3a:84:80:1e:90:af:ea:81:e7:c9:06:73:79:
ca:3e:7b:f2:17:5c:4e:4a:20:84:7a:14:df:1f:bc:
b3:aa:c3:f3:4c:a9:8e:e6:5b:6f:cb:dc:6f:07:7b:
3b:2d:0e:eb:9f:5e:d9:47:0f:ab:d1:13:29:d6:f1:
06:73:b6:5f:30:71:27:06:d8:4d:76:38:3f:bb:b0:
8e:76:a1:8a:3b:71:4c:2e:13:81:12:61:84:60:05:
63:c6:ad:ea:e5:ba:16:6e:22:f5:23:46:f8:73:af:
58:9b:fa:29:67:5e:42:fc:63:84:f2:ff:b1:4c:93:
56:21:3a:db:d9:79:53:57:18:77:ce:72:21:1b:19:
61:e1:73:51:9a:99:4e:e3:10:1a:6a:23:d0:39:1d:
4f:2b:83:ca:a2:eb:c6:43:1b:75:eb:32:11:ec:2a:
0e:58:1b:c5:af:36:92:92:70:76:47:3d:fa:18:4c:
e9:b4:0a:3e:eb:f0:56:56:fe:f8:31:c1:a2:54:e6:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:8F:22:28:FE:40:36:C8:85:1E:B5:46:8F:0A:89:6B:D4:1B:2D
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:46:15:8b:eb:f5:38:d7:c4:1b:03:af:4d:18:f9:43:e8:3d:
6a:9b:94:72:c1:f7:92:3f:16:27:77:f1:ab:d3:a8:c4:4b:40:
fc:a5:72:4d:5a:f3:67:41:7c:6f:4a:a7:c6:82:74:0d:8b:91:
76:f5:d4:3b:b4:2b:1a:b8:1f:4d:59:0e:03:8b:1c:00:8e:96:
e0:d2:16:91:3d:cd:e5:40:b5:04:3b:a4:02:a4:4c:0e:1c:54:
de:76:de:2d:66:be:9a:40:29:29:e3:4f:ea:0c:da:3d:5e:07:
f2:a7:71:48:68:37:d2:aa:b7:4e:9f:22:57:92:62:64:f0:59:
e9:3a:15:76:13:a8:75:cb:ac:e4:60:75:71:e3:94:ce:b0:73:
56:b1:9d:e4:96:f1:62:9c:84:eb:23:ab:62:69:fd:68:a4:b1:
7b:ff:b8:cd:f4:d1:48:22:74:40:b0:58:d3:e3:d2:5a:69:f9:
4e:69:9b:d3:39:ef:12:ce:67:0b:51:c4:c5:4e:24:ed:25:2c:
2b:cd:82:b6:39:72:61:17:c1:cd:c0:62:c5:37:6a:b5:28:70:
24:1c:e2:ac:c3:a1:0a:26:ea:0b:93:31:3d:9e:da:40:fa:26:
7a:74:69:6e:18:25:67:ec:b1:26:69:87:a6:d2:04:d9:5d:17:
08:82:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:31 2025 by rpki-client