Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: U45JKNHzmz39fuv7ebCP9+hSEHYKYvY6UyurawsXfp0=
Subject key identifier: D4:1F:CE:08:73:CB:44:3D:3B:D6:ED:C8:DE:20:D5:41:2F:5C:CA:14
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 019848C051ACB23DF8F7A4FBDFB7D9C246B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 11C2
Signing time: Sat 26 Jul 2025 22:00:20 +0000
Manifest this update: Sat 26 Jul 2025 22:00:20 +0000
Manifest next update: Sun 27 Jul 2025 22:00:20 +0000
Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: K7wR4PLMspL6sXDdtAI1BuNcLQ1tfAUZyPe2uNgnvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:51:ac:b2:3d:f8:f7:a4:fb:df:b7:d9:c2:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Jul 26 22:00:20 2025 GMT
Not After : Jul 27 22:00:20 2025 GMT
Subject: CN=d41fce0873cb443d3bd6edc8de20d5412f5cca14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:b1:b0:5b:ae:3b:a0:66:52:35:86:c2:a4:
a1:e9:38:ea:f5:6c:fb:ad:a5:50:74:05:67:dc:da:
db:6d:18:a8:64:60:f6:1b:d6:f5:c3:c7:9f:cc:4c:
85:ea:2b:e8:d8:fc:50:03:65:f3:5c:93:f7:c3:ad:
15:2f:22:8c:bb:1b:b9:71:3b:e9:22:5c:43:e7:1e:
92:71:2d:c9:40:72:ce:62:c1:1e:dc:9c:c8:17:c5:
28:ed:6b:cd:ce:2a:fb:bb:3a:c1:ed:a2:bd:22:0a:
2d:6d:d5:26:51:17:8f:3d:e1:de:0b:63:c2:84:44:
22:a3:f3:1d:44:fd:4f:90:2b:05:af:3a:bc:16:3e:
6e:5b:20:3d:5a:32:9d:a6:b3:c7:06:b0:02:33:65:
5e:1e:89:fb:dd:75:35:93:64:ba:3c:0f:76:61:7c:
08:7c:46:de:b1:b5:b0:59:7a:f1:bd:c1:a9:b2:6d:
dc:ad:a6:2b:85:e6:c4:44:97:ac:13:e5:62:80:28:
08:79:bc:3b:a2:ec:b3:43:09:20:5b:77:99:f2:9a:
ce:0f:c7:a6:79:3c:c9:bf:43:2d:da:99:e7:ba:a0:
bb:f8:07:57:af:0d:cc:2b:be:69:96:2b:56:62:c8:
f9:5f:a4:44:aa:e9:39:9d:bb:38:0a:42:8d:b1:2b:
0e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1F:CE:08:73:CB:44:3D:3B:D6:ED:C8:DE:20:D5:41:2F:5C:CA:14
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3a:08:b1:7a:10:2b:13:ba:c1:41:98:00:47:77:c1:cf:f5:
49:7c:28:c7:37:f2:75:44:fa:66:3f:97:04:8e:1f:16:29:86:
f8:86:1a:70:f3:c7:63:83:bb:d5:35:f2:c0:34:45:3e:ff:28:
d0:f1:94:ae:c8:5d:e6:fb:bc:c7:ac:a2:d1:94:a3:c0:a6:1a:
29:aa:33:85:72:2a:66:d2:7a:bd:94:3d:c7:73:6c:cb:8a:98:
93:a0:1e:73:41:18:05:ed:56:dd:f7:20:6a:ec:33:25:8f:be:
4e:4e:8e:01:04:5d:33:81:bf:b6:97:2e:39:6e:c8:13:58:71:
25:45:a3:95:76:6f:3e:2d:44:57:f1:04:9f:8a:5e:34:7a:9a:
2a:2e:15:b6:ce:eb:9d:61:73:26:68:ef:99:25:22:99:db:96:
d2:86:2f:49:cc:51:8a:e9:ae:f7:0b:d9:db:d5:eb:4b:e1:59:
60:37:8f:55:c7:eb:20:96:4b:d8:8e:96:22:78:0e:ea:2f:b6:
5f:b9:57:14:63:64:66:55:be:b5:b1:f2:eb:2a:11:e5:f6:0d:
5b:6d:fe:59:33:a9:80:4a:b5:07:df:25:a1:8c:b6:1a:37:50:
7d:12:68:9d:17:54:10:35:76:25:7d:8c:57:29:f6:d6:17:e9:
67:27:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:18:47 2025 by rpki-client