Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: v9RFTp3S5ivqmp4oW9Ve0Su5ZfJiy1NOjPEe9TQnfok=
Subject key identifier: 48:D0:10:27:60:27:E3:3A:CF:9A:4F:FA:B3:F6:05:07:94:88:9F:A1
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 0198684BD38159062E0C61B8D97AE8DBEE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 1633
Signing time: Sat 02 Aug 2025 01:00:56 +0000
Manifest this update: Sat 02 Aug 2025 01:00:56 +0000
Manifest next update: Sun 03 Aug 2025 01:00:56 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: Fi2wwhFO97j0IC0vJxyVvx0GDE10kwetZIs1lc64mm0=)
2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:4b:d3:81:59:06:2e:0c:61:b8:d9:7a:e8:db:ee:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Aug 2 01:00:56 2025 GMT
Not After : Aug 3 01:00:56 2025 GMT
Subject: CN=48d010276027e33acf9a4ffab3f6050794889fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:85:d0:8b:9a:45:13:6e:99:73:d9:e8:2e:
ca:5d:31:7d:f7:e1:23:d7:37:89:64:b1:da:3d:46:
f4:67:fe:a7:97:31:b7:57:11:fb:a6:62:7d:83:01:
de:75:ca:92:e8:06:e9:bf:98:2e:30:16:bb:ea:42:
6e:68:d9:d3:3d:e0:0e:95:97:a0:0f:d3:2f:e4:f1:
c1:cc:53:ef:e9:ab:ed:83:8e:89:91:3e:37:ae:2e:
96:e1:6d:4a:eb:96:da:1e:04:e0:68:cf:33:ae:b1:
66:95:25:bd:ba:3c:2e:fe:0e:34:1c:f5:66:17:cf:
40:d7:42:93:4a:03:9e:6b:11:8f:ca:d5:b7:04:c2:
a9:b8:16:8c:5e:1b:03:f6:08:15:d3:64:ed:a7:7f:
0d:87:2d:a4:59:27:97:6d:d1:04:a1:02:f5:f0:20:
d9:f1:bf:c8:6b:a0:d0:59:d1:35:3d:dc:ef:2b:b5:
48:b3:39:41:25:4e:5b:ab:84:4f:9c:d3:7c:d4:b2:
29:80:97:3f:3b:31:d0:cd:a6:3c:d7:1f:a0:c4:3e:
2e:2f:5f:f4:d3:6e:00:2f:6f:74:bb:a0:ae:09:63:
3f:c4:4c:84:d0:1c:9b:b6:5f:64:fc:8a:cf:3a:8d:
9e:65:28:11:17:24:d8:dd:23:06:d7:0a:76:c4:23:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D0:10:27:60:27:E3:3A:CF:9A:4F:FA:B3:F6:05:07:94:88:9F:A1
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cc:b8:ad:a1:c5:69:c5:48:a4:41:47:70:a7:51:fd:da:6c:
72:ae:72:65:b7:f3:9b:b3:e5:a6:59:9e:67:76:84:b3:f9:c8:
1d:34:ea:61:e0:f8:28:39:ab:91:e0:6d:cd:c6:2b:87:c6:63:
98:10:11:9c:64:f0:e4:31:3d:08:32:56:b8:a6:5c:59:06:5f:
65:a2:e9:cd:52:12:f7:94:10:df:7d:be:6d:69:06:c7:d3:1c:
3e:c1:d1:79:fc:f4:e8:64:05:67:9d:2a:3d:a3:f3:01:64:f4:
08:84:98:56:80:a3:a8:de:7a:ca:0c:d7:da:59:18:be:cc:b2:
f9:f0:9a:80:46:c8:7d:aa:10:73:f5:08:49:20:b7:88:5a:f3:
9b:8c:26:33:d8:ac:eb:3a:86:d1:cd:a6:a4:34:8a:6a:e5:fb:
42:47:56:10:d8:7d:0a:55:cb:0c:f7:31:df:40:25:b3:1e:11:
7d:b0:5d:10:b5:53:77:75:6e:af:a8:d7:41:2c:04:64:14:1a:
a1:ce:7c:e4:8b:2b:13:9d:9c:52:e6:57:f9:68:37:4f:8c:f6:
d6:b8:ed:e5:cc:97:3f:a5:41:87:ad:3b:33:51:5d:ed:87:e6:
22:41:ef:15:ba:41:0a:15:8f:0a:e9:36:76:f6:48:85:64:91:
e1:7e:7c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:36:50 2025 by rpki-client