Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: xSnDR66YzeBj5/ETXEULBeWug7wMdn2MtuvjulCxrNo=
Subject key identifier: D9:DB:6F:71:43:EA:1B:A6:09:F7:EA:B6:16:C8:BC:E2:23:5A:05:2C
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 019849D37C44486353289924BD617695E4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 03:00:53 +0000
Manifest this update: Sun 27 Jul 2025 03:00:53 +0000
Manifest next update: Mon 28 Jul 2025 03:00:53 +0000
Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=)
2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: Ci2foHXHxZM5rdN0JrPHGUSFI25u1xqAE2eCDQXxnJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:7c:44:48:63:53:28:99:24:bd:61:76:95:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jul 27 03:00:53 2025 GMT
Not After : Jul 28 03:00:53 2025 GMT
Subject: CN=d9db6f7143ea1ba609f7eab616c8bce2235a052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:62:73:2c:84:af:5b:fa:26:3b:9a:c0:04:
1b:77:0d:94:c1:a0:df:35:f1:51:73:d9:9e:4e:21:
7b:71:ee:3c:15:66:44:8f:4a:2c:4a:32:60:73:1c:
fb:a1:7d:06:2a:17:e3:46:39:a6:86:93:33:8c:41:
49:21:c3:e4:73:0a:62:55:36:57:57:73:8c:9b:74:
73:89:61:0b:9e:74:29:08:16:2a:f2:ab:06:64:ee:
56:be:0e:ec:32:dc:75:cc:ee:c8:9c:78:bc:d6:a1:
5a:68:f6:d9:80:89:d2:da:ca:b2:90:36:cf:61:2a:
a7:b2:49:74:18:f1:3c:2e:4b:e6:26:61:81:d4:39:
47:fd:20:f3:6c:8f:55:72:43:70:14:24:60:25:c9:
c3:83:b6:b7:a5:6f:76:f0:2a:e9:3b:d9:6f:26:62:
3f:60:b6:63:29:8c:e4:31:6d:95:4a:2a:7a:d3:7d:
fa:c3:f6:93:2a:60:9f:48:4c:d7:6e:3f:b3:f7:82:
da:57:78:bf:93:ff:75:7e:7a:aa:51:65:8d:9e:b1:
3c:f2:5e:52:8c:88:18:b0:9c:84:29:12:4c:46:02:
01:59:44:56:c7:59:26:52:3e:05:9d:e6:e2:7a:7b:
53:57:4a:a4:d9:12:c0:13:f9:70:1b:8a:29:40:2a:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DB:6F:71:43:EA:1B:A6:09:F7:EA:B6:16:C8:BC:E2:23:5A:05:2C
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f7:ac:a1:2a:08:3f:7d:83:0e:58:cd:11:d6:cf:c9:38:2b:
e0:f6:89:40:3e:82:94:57:1a:99:94:48:1f:c2:10:23:f1:40:
c0:3d:85:22:3a:2e:e0:5d:cb:3f:46:35:d1:5c:e9:6a:fe:6e:
50:7a:ad:eb:8d:cc:16:a1:3e:63:7c:66:0b:5d:6b:22:04:49:
94:84:2f:07:da:19:29:1c:d2:17:66:a9:1f:5c:0a:c3:c1:9b:
1c:c3:a0:80:db:d8:30:0a:4c:17:74:43:3f:b3:f8:5f:f5:e9:
64:db:e0:1b:d6:0b:06:a5:97:00:c5:e3:00:7b:94:46:9c:b1:
3c:5e:f5:52:01:2c:a8:d2:85:ac:0d:28:ad:85:54:41:76:65:
2c:93:99:9f:1f:53:f7:0b:b6:d0:41:61:3d:2d:35:53:2a:d3:
4a:04:e1:4b:51:05:d9:20:e5:b8:83:68:eb:28:11:f5:41:b6:
33:d3:f9:db:b6:7a:8f:8e:e8:4e:fe:fb:b6:4b:ec:89:0d:08:
c6:41:be:f6:5c:a1:f3:84:a0:bb:88:f5:a4:34:d6:50:fd:59:
cb:5f:b2:fc:6f:06:52:ec:10:ac:c0:6a:37:87:6b:98:8e:9d:
c7:c0:d9:6b:93:a5:39:aa:a4:fc:67:f2:20:dd:8b:0c:20:6a:
9f:17:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:30:36 2025 by rpki-client