Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: ZgQITnFs2UpAuIQi/Y7Y0LcCklMDQJ3CY1BvyV+Pf7o=
Subject key identifier: 61:F2:42:EE:1E:B0:83:EB:0B:FA:11:CA:FD:41:6E:6E:81:2D:0C:93
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 0199338094A130923C7180C2A61C454235F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 12:01:28 +0000
Manifest this update: Wed 10 Sep 2025 12:01:28 +0000
Manifest next update: Thu 11 Sep 2025 12:01:28 +0000
Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=)
2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: 64UMgvVNZlDuegYa2bcsX/B/f2BQ814TI1myXuBYHh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:94:a1:30:92:3c:71:80:c2:a6:1c:45:42:35:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Sep 10 12:01:28 2025 GMT
Not After : Sep 11 12:01:28 2025 GMT
Subject: CN=61f242ee1eb083eb0bfa11cafd416e6e812d0c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:05:06:7a:7d:81:17:15:5d:6c:52:3b:a1:
fe:a8:2a:76:5e:04:03:25:4e:cd:20:c5:5b:ee:1b:
bd:9a:95:57:54:0b:c0:51:ef:62:64:ce:a2:4f:71:
2f:76:1e:64:4c:bd:e6:b1:45:d0:24:c9:f3:97:2f:
72:f5:3f:17:af:c7:d7:ab:a8:45:74:b9:47:ff:94:
58:e2:b7:3b:c4:39:c6:bc:0c:fe:ce:45:68:a4:09:
60:e9:d9:b1:bd:70:64:2e:fc:4b:d7:25:16:63:a9:
0b:86:3f:f2:7e:83:a4:1b:ab:17:8e:e3:09:e4:43:
7b:8a:29:84:0f:f2:d6:04:ef:98:3f:82:89:e6:01:
59:4a:d9:a8:7d:21:1e:9b:24:7d:c0:48:40:82:55:
a1:25:ef:8a:00:08:8c:1d:38:89:91:7c:38:1a:09:
e1:df:d4:b2:9c:a3:31:4b:25:fc:08:51:9e:84:6a:
1a:9c:67:b5:f5:0d:42:dc:b1:c3:46:31:8c:5f:ef:
86:77:f1:3d:5b:b5:11:0e:1b:9e:8a:b2:f0:4c:15:
d3:91:f0:17:41:50:c0:e8:3e:07:ab:8f:b9:98:1f:
54:aa:63:8f:b4:73:28:fd:96:60:34:0b:df:1c:c0:
27:bc:7b:ad:15:42:3b:4f:81:32:99:bf:e9:2b:84:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F2:42:EE:1E:B0:83:EB:0B:FA:11:CA:FD:41:6E:6E:81:2D:0C:93
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:15:72:1f:bc:c9:f8:bd:4b:a4:02:d4:86:10:cf:2c:81:b5:
fb:85:6e:f5:7f:2d:4d:7d:2e:0e:38:af:84:ac:f1:0e:64:a9:
ad:0d:fa:a9:55:ef:44:ce:27:b0:d9:8e:b6:7b:10:7e:d0:f9:
8a:26:b5:c1:93:72:12:61:ad:fa:fc:95:83:71:90:2a:94:ac:
36:54:87:2c:6a:c5:4c:b3:15:3a:3f:c4:ee:7d:e5:a7:f0:6f:
1b:0e:d6:d8:d0:65:8b:6e:13:b2:1d:e9:29:3c:59:8d:ca:00:
bf:82:7c:50:d2:ee:5f:03:04:3b:44:b9:cd:a5:84:7a:34:c5:
8d:4e:27:38:bd:73:79:a6:55:bb:73:ea:52:f5:e0:e9:82:ce:
94:cc:16:fd:c5:d8:0f:57:a9:72:3d:57:d8:7b:df:91:31:59:
8a:ce:21:37:5f:58:74:fe:a9:9a:a6:93:95:6d:28:24:e0:48:
57:e3:70:e1:01:09:49:98:da:2f:09:f3:e9:42:a4:4b:41:4b:
0f:05:34:47:e0:c7:1c:e0:db:c1:9f:7b:cc:74:d8:c3:7c:03:
0c:c5:21:cc:be:4d:f3:87:a9:97:7c:e7:70:c3:86:29:b5:f2:
39:51:ac:7d:03:6a:aa:53:8e:0a:c8:98:8c:eb:a5:01:00:d6:
d8:36:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:07:11 2025 by rpki-client