Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: e9MRPzv7k+uWyxHptJjMl3mphX7vC1xcG3hX8cFWBKQ=
Subject key identifier: D4:C3:10:5C:66:5E:26:76:A6:B3:65:48:3D:38:8F:6A:97:16:99:0D
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 0199221E6B0C86212F55B9BF5E3F1042A87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 1277
Signing time: Sun 07 Sep 2025 03:00:42 +0000
Manifest this update: Sun 07 Sep 2025 03:00:42 +0000
Manifest next update: Mon 08 Sep 2025 03:00:42 +0000
Files and hashes: 1: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: /25Y0n/2iglnTwhAc7wGbetMjA9l1x6QilO4hRn0LAU=)
2: yueP6aik06BPwcnmsnEIlj3ek5g.roa (hash: ouDcttk3dQ7QbY0vNsL4yJQH9X2H2u4pj98A+2ZbC4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6b:0c:86:21:2f:55:b9:bf:5e:3f:10:42:a8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Sep 7 03:00:42 2025 GMT
Not After : Sep 8 03:00:42 2025 GMT
Subject: CN=d4c3105c665e2676a6b365483d388f6a9716990d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:f7:ca:35:77:b9:b6:3f:ff:32:30:dd:05:
06:e9:64:0d:0d:d1:f4:ba:0a:a6:63:73:ef:83:8f:
39:4e:bf:60:23:d3:36:53:80:3c:d1:30:a6:5a:31:
78:a0:11:72:51:6a:b0:aa:eb:0a:c8:fb:c8:33:dc:
69:1c:f0:3d:f2:be:d8:94:ce:03:93:b4:53:e9:7e:
87:a5:ab:d1:92:03:ec:15:41:a7:ff:fb:e8:eb:be:
80:9e:82:e1:74:04:4c:58:58:cb:b1:3b:29:4a:41:
0f:46:80:cb:6f:cf:c8:af:87:af:0c:55:87:26:d5:
41:e3:bc:7f:50:d0:87:82:77:4c:dd:1b:d9:17:4c:
c3:5b:6b:4c:b3:a7:d7:6a:b1:3c:83:85:47:6c:65:
4e:58:ed:d6:ad:0e:18:15:32:04:3e:7d:61:9e:52:
d3:41:83:79:5b:05:8a:b8:3b:43:76:a9:2b:4b:00:
8f:8b:2b:b8:7d:91:40:dc:0d:70:20:f0:8b:d8:82:
79:f7:18:05:f9:42:2e:c1:6f:78:21:2b:e4:c1:22:
ea:6f:43:56:37:b2:9a:df:af:5e:a7:e9:af:c7:e8:
ef:c7:f9:47:cc:a5:6b:ef:4f:93:7e:c7:73:04:d5:
91:74:48:5a:74:bc:a5:37:28:78:9d:ca:16:a0:5e:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:10:5C:66:5E:26:76:A6:B3:65:48:3D:38:8F:6A:97:16:99:0D
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:91:95:7c:c1:8f:bf:ab:38:d7:83:18:41:ed:f2:e0:2d:9b:
80:1d:2c:bb:c9:69:9e:cc:cc:ff:1e:38:80:4b:01:67:dc:77:
5c:8f:85:c5:73:7d:f7:fc:50:f8:26:4f:26:fd:4c:0d:24:b4:
a0:52:d0:e2:c3:2a:e9:01:c4:20:9c:79:ac:2e:b5:bc:7e:fc:
25:b1:6f:f7:50:dd:5c:8f:e4:b3:7b:95:49:23:76:0c:99:28:
f2:b9:68:4e:49:20:be:9f:e8:40:5e:4d:b4:04:8c:11:50:ab:
1d:72:e5:8e:5d:2f:4c:65:8c:7d:c0:1a:2b:cc:11:62:c8:47:
f0:f9:bb:f3:91:bc:ce:6c:6d:94:d3:f1:1e:58:c4:f8:32:85:
c7:83:9b:a3:26:08:02:97:2b:2f:3e:24:1a:f7:68:26:84:bd:
d1:b0:67:6c:a3:ee:d5:3a:8d:f3:6e:75:48:b6:44:45:df:15:
97:28:f7:a1:48:ce:a8:a1:5b:fe:28:b2:4e:36:4a:86:98:a4:
cf:70:83:75:9e:d5:90:a7:f9:a1:03:80:98:b7:c1:3a:9c:ad:
be:4e:57:c2:b7:60:58:84:79:71:37:13:dd:9d:fc:e1:47:65:
e8:71:d4:ab:13:27:cb:8b:d1:fc:71:bd:58:b1:91:9d:d3:7c:
4b:fe:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:21 2025 by rpki-client