Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier: uAdXH1N0LsmTXhnr99YgHSgMfW//ygfS5YMGQBhnmKM=
Subject key identifier: 4A:FF:42:12:84:08:FB:1E:4E:54:04:5A:FE:9B:BA:FB:73:0D:7E:0E
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 01984AE5EB8502C6417316D289521E3ECC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number: 087F
Signing time: Sun 27 Jul 2025 08:00:38 +0000
Manifest this update: Sun 27 Jul 2025 08:00:38 +0000
Manifest next update: Mon 28 Jul 2025 08:00:38 +0000
Files and hashes: 1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=)
2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=)
3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=)
4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: krrO3PjRsSUu7rJtT+JItNvo4urr/AzEZqfDv7imDWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:eb:85:02:c6:41:73:16:d2:89:52:1e:3e:cc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Jul 27 08:00:38 2025 GMT
Not After : Jul 28 08:00:38 2025 GMT
Subject: CN=4aff42128408fb1e4e54045afe9bbafb730d7e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c5:0b:8b:13:90:2a:19:b7:aa:64:4e:4e:3c:
f9:cc:64:ad:cb:37:f6:f0:7f:42:fa:a8:c1:a9:17:
1b:e5:5d:bd:0d:5c:94:db:20:4e:a3:11:da:71:18:
44:7c:6d:81:4f:59:47:56:97:1b:ee:d2:78:05:06:
65:de:f1:37:67:34:5b:bc:9b:55:eb:97:13:2e:b6:
20:08:e1:10:4d:29:34:d3:b3:c6:b5:dd:06:00:6c:
50:47:8b:e8:3d:97:4c:31:e2:dd:83:57:d7:16:61:
75:3f:12:37:d8:c9:e2:4e:84:cf:0f:16:39:09:e5:
f0:86:b5:7b:eb:3b:f8:c5:44:9e:c2:c4:3c:b6:60:
0d:97:21:d1:5a:ea:ab:2a:4f:fc:5f:bc:d0:da:67:
c5:36:15:b6:bf:48:c8:fe:3e:8d:06:ec:82:8d:f9:
78:d1:15:6c:65:51:09:5e:da:6b:76:6d:2b:fa:f7:
43:62:eb:f6:79:90:9f:f9:39:a3:91:e8:be:82:52:
41:ce:3e:49:77:8c:ae:26:6e:b9:80:49:13:7c:8d:
bc:90:51:a2:5f:08:74:bf:10:6d:81:dd:5b:65:a3:
2c:8c:88:de:d7:19:f0:97:e5:ee:ef:a0:ee:ae:59:
97:4c:b4:71:5f:94:fa:7e:3a:a8:70:b7:cf:8b:4f:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:42:12:84:08:FB:1E:4E:54:04:5A:FE:9B:BA:FB:73:0D:7E:0E
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:77:ad:7d:09:fe:ad:97:a8:08:a0:49:07:66:42:86:d2:cd:
cb:4a:ec:2d:56:a4:65:ca:30:b4:26:ab:d1:e6:a4:6d:04:4a:
7a:f4:e7:af:3e:35:72:35:ca:79:8a:03:af:71:b0:b6:f1:43:
91:e9:15:b4:11:79:81:42:4d:9a:16:e9:e8:c2:b6:2b:49:71:
e4:42:5d:2a:36:24:c9:16:07:6c:c0:42:02:67:77:a5:3c:31:
23:77:e2:35:14:73:a1:20:c1:51:1d:c3:ed:9a:1f:bc:e3:c9:
bb:1c:24:88:1b:a6:2b:34:56:5d:e1:65:0a:1b:23:4f:34:c6:
47:3a:38:bc:5a:67:60:ab:d8:29:59:29:31:2c:ee:1b:09:05:
ad:e2:37:87:9d:21:d3:3f:ce:78:bb:30:98:19:52:9c:27:3f:
80:01:05:3d:8f:e9:f5:7f:f9:c2:06:e5:a6:5a:45:45:29:57:
41:37:b2:61:90:a5:57:b5:a2:36:4a:97:83:74:45:fe:40:5e:
07:56:96:1c:46:40:1e:94:aa:bd:70:99:56:b7:a4:f6:ff:d3:
cd:e4:e6:e2:5d:89:a4:1b:59:df:d4:0b:43:c5:b8:e1:9d:79:
e6:9b:12:84:9d:43:e3:0e:49:62:6c:43:4c:bd:a0:94:b1:5b:
2e:64:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:07:20 2025 by rpki-client