Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: U/b2Y532D3VrvaJYUKSXI2bgIMSmm2eV1EliJBO4+NM=
Subject key identifier: F1:E9:C4:78:64:43:DE:A0:3E:70:3F:39:4D:67:AA:0F:40:5D:78:34
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 01984A0A27E93DE92EA83A00907229A9AED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 1342
Signing time: Sun 27 Jul 2025 04:00:36 +0000
Manifest this update: Sun 27 Jul 2025 04:00:36 +0000
Manifest next update: Mon 28 Jul 2025 04:00:36 +0000
Files and hashes: 1: 4shZBDKZZPGnSQMfuQiOImBHql8.roa (hash: Jfoq3n1s/kyNKvCWlVGyWbHUx4CSO8/9+CCCYgnc/Us=)
2: FA2h5OHRpegZzdAFMMwkYVBg-BM.roa (hash: 9GzazJbnHKp6+I1Ph8x2q38kHV8Nlnih0rihfAr5aBo=)
3: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: Ua7iPnXaebnaQ1qFCJagvT0dzAC80lxVN9EumpoTV6g=)
4: ZEOW67E73LjGkhRbjT8p8HAuQ7g.roa (hash: 3byQhC85THLNsX/WfVA4T3mVllKuuMpO1Ynx6g/Ksak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:27:e9:3d:e9:2e:a8:3a:00:90:72:29:a9:ae:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Jul 27 04:00:36 2025 GMT
Not After : Jul 28 04:00:36 2025 GMT
Subject: CN=f1e9c4786443dea03e703f394d67aa0f405d7834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:7b:df:b4:65:cd:10:14:b7:3c:65:9b:0b:
9b:7b:4d:db:17:18:2a:ac:3a:c1:f7:21:95:96:96:
eb:43:c0:23:1b:e6:4b:ca:58:42:98:fb:f2:a9:ab:
62:b3:89:47:ee:f3:cb:89:4d:87:38:ae:f5:74:7a:
32:af:48:be:b3:21:48:80:b8:04:c5:72:17:fb:0e:
7d:e6:29:00:4b:64:2c:03:b3:df:7c:f0:04:7c:90:
39:c2:63:95:9d:b3:ac:96:44:ce:32:3b:f7:b6:41:
41:99:69:6d:a1:08:2d:6d:e6:41:d9:91:b8:fb:60:
fd:be:ca:6c:44:aa:c5:1f:bb:c2:9d:c1:98:6a:ed:
4e:96:92:86:f6:51:1f:dc:db:30:51:42:5d:7d:96:
bd:e1:ea:1c:97:9d:f0:06:e2:93:16:cb:43:bf:a2:
fc:ea:f2:bf:f3:6a:ff:9e:04:2c:54:ee:46:d9:d3:
a0:0e:ca:16:74:8a:3b:14:c8:95:1e:01:d2:89:e0:
08:45:49:81:a1:3e:d9:3a:94:0d:fa:60:da:56:c2:
36:63:4e:48:d8:e0:fc:89:da:c2:e1:2e:77:14:ac:
26:eb:06:6e:9d:8b:b9:05:28:a8:d6:81:9f:f1:7d:
7c:bd:7e:bf:ba:7f:2c:db:53:ed:11:71:43:d9:65:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E9:C4:78:64:43:DE:A0:3E:70:3F:39:4D:67:AA:0F:40:5D:78:34
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0a:a5:da:9e:21:b0:3d:2a:c4:81:2f:d2:27:91:b6:0e:df:
9f:e4:90:ce:19:ef:4a:cf:d1:8b:80:fd:63:dc:82:20:2d:a1:
e4:47:8a:23:ea:f4:c1:06:c1:60:56:77:f8:5a:bc:47:73:d0:
8b:fc:56:c2:49:dc:81:70:b2:2e:10:3b:f9:05:a4:56:f8:59:
96:f9:cb:51:87:2f:e6:8a:e9:b4:ba:03:db:96:78:6c:81:4f:
fd:2a:ca:c8:ad:fd:8f:b8:49:51:62:6a:01:e2:10:30:90:ef:
36:aa:0a:d6:42:d1:dc:a0:9e:93:93:fc:24:31:ad:b9:c0:97:
5e:be:a6:05:75:cf:e3:56:41:08:5a:6e:02:7c:d4:be:f8:e0:
04:f3:ab:cb:ec:75:bf:b9:05:e9:d4:bd:de:3b:ff:41:f5:fc:
3a:34:cb:c6:7e:5e:85:b7:9f:bf:01:28:2c:69:51:4a:16:a2:
79:d0:90:f2:1a:3d:33:14:87:e8:f2:a1:9a:93:40:57:78:d4:
01:c0:73:c6:62:7a:92:74:5f:ea:a8:a7:95:3a:a0:bc:2b:52:
b6:45:48:58:01:d0:9e:8c:dd:81:37:54:e9:22:f5:60:9a:dc:
73:62:5b:78:e1:82:54:df:21:09:c9:65:0a:31:47:f8:48:cb:
82:9b:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:42:03 2025 by rpki-client