Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: kVmTCD5njDr8OQlAjzgpK65uowdSLylyjG6eHcyoZsU=
Subject key identifier: 5B:1C:E7:CF:8D:5D:88:D6:18:6B:D4:E4:1B:35:40:2B:7D:C9:45:E5
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 01984966B35DA235264F028A5D66135B3EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 0F84
Signing time: Sun 27 Jul 2025 01:02:03 +0000
Manifest this update: Sun 27 Jul 2025 01:02:03 +0000
Manifest next update: Mon 28 Jul 2025 01:02:03 +0000
Files and hashes: 1: wDvIF8IUEQhjnYm69O7DnmCZNJY.roa (hash: AHCZUkCpuvskw07HtMA8aALHO5a1ETyk504pdPIdAIc=)
2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: kZ3GA1q8KrdCKbgl0y/Sn5NE+KSQ+bmry/Hrvcanuqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:b3:5d:a2:35:26:4f:02:8a:5d:66:13:5b:3e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Jul 27 01:02:03 2025 GMT
Not After : Jul 28 01:02:03 2025 GMT
Subject: CN=5b1ce7cf8d5d88d6186bd4e41b35402b7dc945e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:b2:e6:a7:75:bc:b8:6d:c8:63:03:54:ea:
a1:ab:f4:3a:4b:d2:05:5a:92:49:46:d7:7a:85:62:
7c:52:d4:d1:1d:ec:6d:b2:0a:08:b8:eb:e5:ad:5a:
ae:a8:f1:0d:7e:8f:db:7a:43:8e:61:02:77:b8:57:
f5:b1:dc:00:34:1b:84:38:71:02:ad:a2:02:29:f4:
7e:6a:9e:0e:77:54:0b:3c:4a:64:5a:e8:e0:96:4b:
54:12:40:f2:48:85:6d:59:49:d6:63:c1:02:0f:62:
32:3d:4c:56:8a:49:5d:95:56:c5:51:d9:2d:93:d5:
0d:3a:62:54:b4:b0:0d:99:db:b9:74:2f:dc:f4:c7:
40:2f:06:2f:40:49:d8:f9:2c:ed:e2:c8:f9:7f:04:
f8:f5:87:1c:20:2e:c6:89:bb:41:de:a7:f9:90:41:
74:bf:4a:c4:10:20:d6:05:14:0c:9e:03:68:c1:35:
a9:a9:a3:1c:33:23:a9:2d:e2:02:79:0b:90:bd:ef:
12:9c:3c:0d:a1:43:6e:9e:84:c8:15:b1:d6:7f:8b:
15:70:13:6a:03:94:2d:dd:38:d3:86:48:65:f0:7b:
1c:9e:72:a0:63:32:7c:63:1f:83:74:c9:5b:67:79:
e1:a5:4d:c4:b5:e3:86:66:4c:30:77:70:cc:73:1a:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:E7:CF:8D:5D:88:D6:18:6B:D4:E4:1B:35:40:2B:7D:C9:45:E5
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:65:b4:e2:55:ae:da:dd:85:ed:90:70:90:1c:88:1f:44:8d:
78:41:74:fe:a4:16:48:00:a9:6e:eb:79:62:89:cc:87:9d:33:
de:1e:c0:83:f5:ea:2f:8a:92:fe:92:75:c6:a6:f5:83:18:ad:
22:30:fb:29:58:e4:d6:0b:49:04:2c:5b:bd:82:57:9f:a1:eb:
6d:58:8b:8f:a5:6d:83:12:c5:33:9b:f3:d5:4d:91:d8:62:32:
32:8b:2d:60:66:2e:c2:02:03:db:55:63:c2:b9:61:bb:58:d5:
61:88:e9:53:47:32:f9:29:12:43:df:43:81:aa:70:cc:a8:9f:
ac:a2:b0:d0:8f:ff:cf:c4:ef:d0:b8:aa:f1:35:46:c8:8b:e1:
c7:cc:15:10:0a:95:d3:22:30:a7:d9:8d:54:cf:b7:5f:2c:7d:
45:8f:e8:5f:3c:42:b7:d0:e5:00:0c:2a:46:c3:dd:d3:6b:79:
c3:56:14:c6:be:7b:a7:88:ae:14:47:98:8f:3a:b8:26:11:c9:
77:b7:a4:33:a7:c4:b5:f2:72:4f:04:75:99:ec:3b:a6:5d:d7:
c5:15:b3:7c:7b:dc:c2:fd:ec:04:ac:d4:fb:23:06:e9:02:b3:
4a:e7:9a:1f:33:59:f3:a3:87:ec:de:01:b5:20:a4:8e:d0:51:
1a:a0:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:41:02 2025 by rpki-client