Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: neWsgMHf8gup16VQY5oPnmd6j1gk2iIT7L9R4AxK2qg=
Subject key identifier: 80:44:35:B8:4B:6C:BD:98:B9:50:92:B1:05:40:D6:69:29:EF:8F:F2
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 019849D3AB50C344456452DBFF243BA54593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 03:01:05 +0000
Manifest this update: Sun 27 Jul 2025 03:01:05 +0000
Manifest next update: Mon 28 Jul 2025 03:01:05 +0000
Files and hashes: 1: M6Kiusoj-vmcX-l1FvQ-whelTCY.roa (hash: PZnmBtue/4j7K73vwfKaOFXRKwScBqdnVIvN9DoCZyQ=)
2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: yuMuZmP8qzbVbOZt7OZFM5mIQfJFUWw5zcioJCGoU7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ab:50:c3:44:45:64:52:db:ff:24:3b:a5:45:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Jul 27 03:01:05 2025 GMT
Not After : Jul 28 03:01:05 2025 GMT
Subject: CN=804435b84b6cbd98b95092b10540d66929ef8ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:54:44:45:62:6d:16:4a:bf:7e:cc:80:fc:
22:e2:dd:9e:07:e0:95:03:c2:0d:93:04:dd:ce:1d:
39:e6:31:45:bc:7c:51:30:69:8b:28:0e:2a:ec:1c:
62:32:f8:70:b0:53:43:c2:bb:57:b9:5a:77:86:1f:
7b:8b:eb:55:1c:7e:c4:86:2d:a5:08:12:39:af:1c:
e7:36:ed:79:fd:ca:9f:ee:b8:bf:44:3b:67:43:a7:
c5:ec:2b:5e:c2:ae:2b:dd:3c:80:cc:58:be:9d:47:
db:45:62:b8:f8:95:e0:42:36:b8:7b:e7:d2:12:2c:
7f:0b:9b:1b:63:ea:73:66:0f:65:87:2c:97:e8:96:
22:80:bd:65:15:ae:09:4b:ff:66:77:d4:a9:59:45:
25:14:d3:e6:69:5d:3e:08:e0:20:01:10:1f:47:ce:
cf:f9:95:d9:98:17:81:72:6f:93:04:73:e3:73:3f:
c5:a5:7e:8c:d1:f6:96:42:8b:ea:88:c1:47:38:70:
6c:82:4f:0c:d1:dc:51:0e:e9:47:45:49:91:9d:a0:
3d:e9:fa:9f:57:de:bf:49:90:6e:bc:e9:3a:0d:84:
fa:6f:c8:ad:31:a3:5d:47:28:d8:9a:ae:1b:08:96:
7d:b0:68:9d:93:6b:96:c9:59:8e:c1:88:f8:63:3f:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:44:35:B8:4B:6C:BD:98:B9:50:92:B1:05:40:D6:69:29:EF:8F:F2
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:07:c8:f3:46:c3:a2:b1:f3:66:2a:73:f1:34:72:d5:e7:3c:
b7:ea:d1:e0:6a:6a:89:df:d6:60:e4:3d:fc:92:37:f3:d9:83:
d5:8b:82:19:56:8b:43:e5:f3:9f:0e:86:27:88:18:c5:06:16:
c7:d8:f6:4e:56:64:0b:7e:ac:97:9c:90:1f:ee:ba:10:8d:1b:
2f:9e:87:33:77:f6:a5:aa:6c:7b:1a:79:72:1a:06:d0:88:0d:
2a:bf:96:ff:b9:ec:ce:0d:78:b1:29:62:e4:56:21:d3:65:ce:
1d:5b:27:fd:8b:23:7d:ac:43:8e:79:c0:98:6f:51:7f:17:a8:
c3:4d:35:08:f3:ee:7a:3e:2f:58:e3:5c:ea:69:ae:87:82:17:
f6:bc:2b:6b:71:bd:52:b5:5d:41:78:55:2c:38:66:a4:95:f7:
de:ce:28:48:be:49:f5:5f:44:0c:0f:d9:a1:50:5f:b8:33:e9:
a5:2e:95:bf:42:85:61:ce:d7:ce:46:16:df:e7:f2:29:18:43:
2e:e9:93:ec:71:96:fb:a8:38:f7:71:a5:c1:41:d7:fe:d0:96:
60:80:19:2a:aa:71:9f:25:7e:5e:e0:13:6b:f4:e9:36:d0:a6:
b3:7c:cb:91:e0:54:af:d7:59:12:e9:a7:8a:4d:c7:3a:85:58:
d8:e0:5f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:02 2025 by rpki-client