Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File: tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier: W9h0YzxRhRZrSyZpY5rRQQIwBcUN2Ty6/IoPTTFwbtU=
Subject key identifier: B4:B9:26:B5:0F:4B:0D:A7:61:13:3C:98:76:EF:D2:5A:0E:13:AA:BB
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 01984966307892AB49139BFC94FC6EFE2B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number: 11AA
Signing time: Sun 27 Jul 2025 01:01:30 +0000
Manifest this update: Sun 27 Jul 2025 01:01:30 +0000
Manifest next update: Mon 28 Jul 2025 01:01:30 +0000
Files and hashes: 1: M5OG91JsCAL60eSIC9Ad8J1tKCQ.roa (hash: 1YIYjfLNUonn/y5DvRwWqNtN3UGauHay3fPvlHRKB78=)
2: NLZJeEG7B459T5HRjzbaryRo4U4.roa (hash: D+Zc3p+KtPQCrkhD8NK/RsRz3Ozk8j3l3fx+in8YU8k=)
3: SX0Et8xCJ-oQPSZhA1vLwpgECss.roa (hash: GtBoUqmPl7+e01rEjLRBIu11uahmgFfyYOp4+G1ts2k=)
4: g3mWLx3QHER7jvUWO9_K86XjFvg.roa (hash: CQjC54kUHdxygPOZtU3D7Ni2Q4FQ2f8Z6SwCWy0D9f0=)
5: hvqfOijr6dDuZ5bH5DmTLJBSNC0.roa (hash: wnrweN82zW3L/i2kjShP1DGJ6lX6f745nj23KDLcERg=)
6: pkTSWC0kyyJmikpwefrKy0hYNBc.roa (hash: uJAe5aUPI71DUshehwa1+fSKLZdP9CODCdcESePQJgY=)
7: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: n1Pp4pbt4TMTl4KGTCVcyfzlq8b9ZXDl91wy5QlY0iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:30:78:92:ab:49:13:9b:fc:94:fc:6e:fe:2b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jul 27 01:01:30 2025 GMT
Not After : Jul 28 01:01:30 2025 GMT
Subject: CN=b4b926b50f4b0da761133c9876efd25a0e13aabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:eb:d1:4a:ea:36:8f:95:b4:c2:ea:65:08:
45:51:ad:f5:33:45:58:28:9a:d0:4f:87:d7:be:6f:
ea:8f:29:79:5d:30:9e:e1:d8:0c:e4:b7:56:e7:a9:
2b:e6:9e:06:2d:4f:d5:b9:a0:79:4c:5c:1d:3c:84:
c3:f7:8c:18:32:93:d8:ff:10:fd:10:4d:bc:cc:01:
cf:a1:cc:62:1b:03:3c:5c:49:d6:ca:60:76:d1:f6:
f3:d9:b8:8d:5b:b4:51:ec:7d:a2:f7:9b:b7:d4:63:
73:c7:db:71:4a:e6:d2:de:9a:e5:09:6d:1c:46:a3:
f2:11:5e:f6:ee:d1:d3:10:cd:02:b7:b2:62:e4:45:
b7:06:8c:79:8e:d3:5a:27:6d:ac:04:df:32:57:1a:
8a:7a:34:bc:f7:bb:af:fe:62:1c:98:27:1e:b9:6c:
ba:1a:c1:89:43:e9:16:78:88:cf:95:08:61:fe:79:
9d:23:ad:06:a9:ee:46:a9:d5:cf:6a:c0:9b:82:db:
16:af:dd:7b:28:9a:b9:de:89:cc:5e:c1:a2:f4:8b:
45:49:75:2b:fa:5a:4b:ac:a4:f1:27:5b:06:20:3c:
11:02:e4:da:7c:ee:ba:1f:b1:37:6e:11:5d:cc:37:
9d:fb:ec:48:83:5c:94:4d:11:83:8a:cf:24:ce:11:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:26:B5:0F:4B:0D:A7:61:13:3C:98:76:EF:D2:5A:0E:13:AA:BB
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a5:40:08:14:68:19:c8:b8:ed:34:01:72:67:7d:8b:40:58:
9c:15:15:57:58:72:f9:96:92:8d:ea:aa:8b:1c:92:e2:c1:e8:
af:a7:a1:6b:2c:1a:12:cc:fb:95:0a:52:ca:6c:51:1d:5c:70:
c5:a3:0f:2f:2a:f7:da:b4:8c:22:39:a9:a5:cc:12:99:7c:25:
df:17:d2:db:37:4f:3b:a8:8f:56:1c:ea:37:36:5b:26:1f:f8:
07:25:e8:04:f6:6f:eb:75:83:fd:30:ec:51:c9:a6:76:7e:75:
07:50:dd:15:74:08:d4:8e:1a:31:57:24:48:f1:85:bb:cf:33:
60:8b:59:cb:8a:79:84:a8:00:75:25:20:39:8e:25:14:ac:fd:
81:95:fa:52:b4:c0:ab:19:02:9d:84:23:96:10:29:96:b9:e3:
ad:73:e3:4e:54:74:b7:98:89:f8:6a:5f:9d:10:8d:55:60:89:
e4:f6:cf:f5:30:f0:e2:1b:25:50:43:3a:95:23:48:32:de:d5:
1a:1b:c0:e1:13:b9:9c:c1:bd:ef:cb:ff:c7:f4:37:1b:5b:46:
06:ae:15:5a:de:1c:c6:c4:cc:f4:5c:49:39:63:68:b9:22:07:
13:3e:b5:92:08:80:a7:56:7b:f2:2c:a8:18:84:42:f2:16:3c:
66:ed:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:44 2025 by rpki-client