Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: BLluJmEKCC/y6RPybj9dA6FaP0W0x310n2Pr7G3am6Q=
Subject key identifier: 6D:5F:78:0C:5D:1D:78:C8:AA:60:AF:7E:47:01:8B:8B:5A:4C:A1:29
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 01984B553FFD97FCEBB61779C00190DF5E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0813
Signing time: Sun 27 Jul 2025 10:02:14 +0000
Manifest this update: Sun 27 Jul 2025 10:02:14 +0000
Manifest next update: Mon 28 Jul 2025 10:02:14 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: 1ZlMsk00yM0DWZqL4gHnVxXmYndO58lANGkeKuljiKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:3f:fd:97:fc:eb:b6:17:79:c0:01:90:df:5e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Jul 27 10:02:14 2025 GMT
Not After : Jul 28 10:02:14 2025 GMT
Subject: CN=6d5f780c5d1d78c8aa60af7e47018b8b5a4ca129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:60:b2:80:c8:49:d8:37:5b:3b:7c:0c:cf:
4f:14:92:cd:90:08:af:65:cb:64:9e:f6:93:6c:cf:
82:08:c3:41:4c:5d:25:56:fe:2c:5b:ef:10:ad:4c:
1c:c1:76:cb:65:b5:80:b3:28:97:f4:44:f0:5c:d0:
74:23:db:66:44:20:27:2c:55:18:81:02:7c:b0:57:
60:d4:60:98:c6:da:0e:05:00:a7:56:66:f9:5c:ae:
9b:c1:b7:51:19:a8:cf:7c:58:9b:ff:3b:60:a1:e8:
3d:6c:16:86:0a:d1:48:02:4e:3a:42:b8:94:e1:37:
b0:40:5e:97:26:60:e3:bb:2a:be:aa:78:08:3d:8b:
09:eb:08:1d:56:37:85:43:42:49:5d:db:1b:d8:ce:
03:89:3f:2f:fd:98:03:3b:45:51:29:20:fc:c5:a3:
81:cb:ab:6b:ed:02:49:8a:81:9d:96:d8:c9:20:43:
1b:34:aa:ae:02:21:a4:a9:5b:cc:83:3c:af:01:8b:
c1:fb:4f:e7:06:08:31:71:5a:f3:08:e6:84:df:0f:
7f:ac:20:fa:9d:fe:9b:a9:1e:98:b3:fc:60:c0:a0:
48:db:47:2d:d6:18:20:b8:49:34:8f:17:71:1a:53:
f1:5e:fa:8b:a6:27:37:66:f5:80:db:7a:c2:64:24:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5F:78:0C:5D:1D:78:C8:AA:60:AF:7E:47:01:8B:8B:5A:4C:A1:29
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:59:4e:42:4b:c0:e8:cd:7f:45:08:e6:54:b0:8f:b0:27:5f:
8d:58:50:0f:8a:4f:be:0d:4b:39:91:9c:38:72:e4:eb:50:58:
a6:e2:01:73:14:9d:cf:42:0b:12:31:d2:b5:80:ba:c1:4f:9d:
6c:64:83:76:3c:d5:76:90:56:6f:09:cd:01:a3:8d:0a:b5:a4:
b5:b3:5f:10:88:f0:f8:75:3b:d5:f7:12:01:aa:0d:96:c5:29:
0e:07:35:1a:51:37:ff:08:5b:60:19:24:24:2d:26:ef:64:77:
5d:3d:71:9d:1f:b6:33:a9:f6:8a:9d:78:6f:68:8a:26:c4:bf:
45:15:bf:be:ac:53:df:23:d9:60:52:05:62:78:1d:46:fd:3e:
4a:74:f9:31:00:d4:e7:21:5c:11:cf:af:1b:fd:c8:6d:69:c0:
81:9d:ed:fd:28:4d:cd:76:1b:94:c9:bb:e3:16:75:03:75:13:
dd:3c:77:57:67:78:a7:f6:91:8b:0a:d4:7d:8f:1c:f9:86:9c:
b0:ec:32:6d:42:0a:2a:ce:45:3b:92:9d:85:c4:0a:a4:2f:6c:
84:23:54:9f:21:d9:ae:1d:6a:cb:d8:61:b3:d9:a9:0c:30:68:
74:c2:cf:60:c2:81:9b:db:02:3b:6a:1a:13:e0:b9:65:7c:f5:
71:ae:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:12:02 2025 by rpki-client