Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: XZqVF3RuE1rX7Wdw8PjqyPTqyV1Nk4MI0jnP6cZiK68=
Subject key identifier: 60:88:D8:0E:73:B2:ED:E0:21:9F:BF:DF:56:8B:39:75:67:8E:BF:73
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 019848C02DA03E13B454531C281049E7B6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0ADC
Signing time: Sat 26 Jul 2025 22:00:10 +0000
Manifest this update: Sat 26 Jul 2025 22:00:10 +0000
Manifest next update: Sun 27 Jul 2025 22:00:10 +0000
Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: bFJIZIRSI4EakEbsPj+ifMIhqThu+cXS+c1eo3jvaS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:2d:a0:3e:13:b4:54:53:1c:28:10:49:e7:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Jul 26 22:00:10 2025 GMT
Not After : Jul 27 22:00:10 2025 GMT
Subject: CN=6088d80e73b2ede0219fbfdf568b3975678ebf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:3f:43:08:71:2f:4c:a3:f5:a5:d5:cf:fa:
ac:7d:f6:1a:2a:37:6d:1f:de:2f:35:aa:56:2d:d4:
3e:52:77:a9:b6:0b:0a:b5:84:3f:b4:32:f3:d8:2f:
4c:f2:9b:6b:b8:fb:58:6d:11:77:60:0b:f5:10:3b:
8a:fc:b8:b4:25:ac:c0:7d:12:09:9e:4c:a6:5b:cf:
78:64:b2:8e:ae:6a:be:5a:ea:5f:a3:4c:5b:a7:26:
d2:2f:54:62:ac:b7:d7:84:27:e3:b9:6c:45:e3:d6:
7c:75:0d:0f:a7:40:47:94:f6:a7:1c:8a:a5:35:b4:
3d:a2:4b:df:fc:35:41:20:ad:51:27:48:76:8d:88:
51:9a:06:fb:35:64:e3:2c:83:74:35:39:3e:42:e6:
67:6a:89:c9:5f:c3:67:06:24:7e:3e:68:30:e2:c6:
91:66:c7:1b:ae:6e:4e:da:6b:c8:05:81:0a:18:d8:
35:0b:f3:b0:11:fa:61:10:8b:bf:ed:5c:46:89:eb:
76:fc:85:f3:a8:f2:25:19:6c:1b:ac:81:1a:ef:14:
d0:cc:af:25:a2:c4:a9:d6:6d:db:40:59:6a:5d:61:
63:6d:e5:ad:3b:a3:06:cf:83:45:a4:d4:b2:41:6c:
64:54:50:73:7a:51:18:4d:ab:14:5e:7b:ee:65:d6:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:88:D8:0E:73:B2:ED:E0:21:9F:BF:DF:56:8B:39:75:67:8E:BF:73
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:15:5e:ec:8c:23:02:4b:2d:b2:f6:17:a1:b3:15:5a:88:f7:
5a:47:11:22:14:46:fc:a2:36:4b:fe:5c:96:4f:6e:54:a3:9b:
09:e4:d3:a7:9a:68:a2:92:54:34:32:02:a8:33:b3:d0:6c:6f:
d5:f2:35:d3:3f:9d:d3:16:fe:9d:f6:7f:6d:1b:1e:37:b0:8c:
6a:7c:a5:d7:9c:55:12:2a:b9:dd:af:89:6c:0a:96:f1:e0:bc:
b2:1b:bc:d6:25:b9:f3:2b:3d:f1:4b:e8:90:7e:b6:d8:fd:30:
15:8e:a8:8d:e3:cd:04:e7:a4:88:dc:ff:e8:81:f1:06:e0:b3:
a1:ec:fd:05:85:41:b9:66:81:8d:f5:97:9c:3e:50:51:83:2e:
2b:ca:bc:10:4c:d8:fa:0e:2c:3e:f5:75:bf:37:c2:3c:9b:c4:
44:8a:48:63:73:fd:25:53:1a:8a:dc:13:11:11:d8:73:28:fb:
fe:b4:49:5e:b8:b6:f9:0e:cf:bf:dd:57:7a:33:c0:7e:9f:55:
4a:75:1b:10:d6:69:f9:03:52:72:21:b5:6a:31:14:38:68:04:
65:fd:a4:6d:3f:a7:64:a4:ca:7c:bd:21:b6:6c:d3:08:f2:0e:
d8:a0:81:9e:52:99:b9:92:9b:84:84:8e:b4:bc:40:7e:42:34:
66:a0:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:02:08 2025 by rpki-client