Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: 0KKH4BWmKbN8YxEv3QOfVusOYQ/4OWhVvzBZFBCGwYc=
Subject key identifier: AF:4A:61:BE:E0:C5:FB:99:70:46:84:49:AF:F8:E7:0D:90:75:02:8A
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 019921B2793A87ECBA296C37D256ECC2221C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 1372
Signing time: Sun 07 Sep 2025 01:02:48 +0000
Manifest this update: Sun 07 Sep 2025 01:02:48 +0000
Manifest next update: Mon 08 Sep 2025 01:02:48 +0000
Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: 8Elz/Zz6XWRlqUi4jAs8ZokD0QX/SOzxNgumrO8gaao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:79:3a:87:ec:ba:29:6c:37:d2:56:ec:c2:22:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Sep 7 01:02:48 2025 GMT
Not After : Sep 8 01:02:48 2025 GMT
Subject: CN=af4a61bee0c5fb9970468449aff8e70d9075028a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:3f:68:f6:07:9b:66:27:b3:a8:61:d3:4f:
41:34:75:e4:f3:b4:04:3a:d2:0b:db:93:84:41:c5:
a3:5b:dc:4d:1d:ba:a1:e3:58:0d:97:97:47:23:08:
c8:2a:f9:75:b6:8c:1b:3f:ee:46:8d:49:9f:55:f9:
7f:85:6a:be:c6:56:a1:11:bf:25:4d:7e:bf:3e:0c:
2a:5f:68:a0:6d:ae:14:2e:02:e5:f9:7d:a3:1c:c3:
bc:90:68:89:f0:5e:1b:fc:16:ab:55:45:64:ac:bb:
30:c2:b5:40:34:7a:18:8b:19:27:19:bb:d7:26:be:
69:9f:95:34:c0:bc:1f:4f:db:a3:da:35:3b:b7:40:
96:c5:3c:b1:26:d1:30:53:12:e3:48:ef:06:4a:3d:
e3:4d:5e:39:52:18:64:54:7c:46:7d:bc:b0:b3:70:
d0:5a:96:b1:f0:40:3f:86:2a:48:f2:5f:6c:32:cf:
44:c1:aa:24:02:6e:ae:03:a0:91:6a:d9:20:f6:07:
99:45:80:b4:c7:ee:45:45:35:71:ec:22:ef:86:8e:
3d:17:e0:ae:9d:c9:67:b7:24:07:a7:26:f2:20:25:
d9:ad:ed:38:f8:9e:58:ea:b2:a8:29:fd:2a:12:55:
ef:d7:4e:d2:6e:3b:42:50:05:69:cb:3e:cd:75:25:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4A:61:BE:E0:C5:FB:99:70:46:84:49:AF:F8:E7:0D:90:75:02:8A
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:64:93:77:7d:65:8c:04:6a:98:23:5f:3c:23:bb:44:d3:2d:
1c:3c:9b:22:62:cc:c3:65:62:0d:9f:7b:93:f3:fd:67:87:a2:
92:f1:1c:c5:2b:db:4c:46:b2:5c:df:68:0b:8d:0f:8d:b2:8b:
1f:23:62:f9:a3:28:dc:98:f7:c4:78:61:9e:6d:1a:53:98:c0:
47:e9:f7:65:4f:51:ac:89:66:80:d8:9c:4b:65:b6:7a:98:9e:
1a:ae:99:89:b7:9d:18:fa:67:d3:d5:ef:7e:08:19:ad:42:1e:
14:ea:af:2b:6d:4a:50:11:a6:3c:8a:dd:e0:c6:ea:9c:8f:69:
86:df:f6:2d:ee:84:ff:cf:22:52:92:0c:79:48:fa:38:2a:ff:
d5:ca:b2:12:59:7e:02:d2:a1:d6:36:41:3c:60:84:9c:90:61:
67:0b:4f:69:78:a5:27:ab:f6:2c:7e:a9:97:04:d1:01:7a:ee:
8b:05:44:4f:ab:7b:bb:e8:7c:82:58:9c:5f:26:d0:ca:e3:20:
5f:51:e6:5a:e7:d2:fc:03:40:aa:d2:7c:e4:d3:10:98:ba:bb:
74:82:6b:9c:57:80:3d:b9:88:96:ed:53:3b:60:34:cb:61:c5:
35:1c:68:47:0a:51:e6:00:05:2e:92:b3:20:e3:ca:9d:87:ee:
8f:69:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:41 2025 by rpki-client