Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: 7VflaG+sQrrouz6DISt/oogn9sy25WD/WkCIEFhfvWo=
Subject key identifier: F8:46:32:04:5E:33:5F:65:28:EF:CE:F4:38:2D:0E:A4:C0:F2:5E:1A
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 0198CB01C133FA53BF06BC8648A6E4D67B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 11
Signing time: Thu 21 Aug 2025 05:02:26 +0000
Manifest this update: Thu 21 Aug 2025 05:02:26 +0000
Manifest next update: Fri 22 Aug 2025 05:02:26 +0000
Files and hashes: 1: IjHqWxuNpJU8DaK_lff-VC_PVWQ.roa (hash: kBcWX1ntdL3bghAjxPsE3h6Q1xLnJksKwhAqQ4KHWmw=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: Qmc2W6+69IHvrfRVvfqRdu2p10AU4U1a9FGrqJYvScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:c1:33:fa:53:bf:06:bc:86:48:a6:e4:d6:7b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Aug 21 05:02:26 2025 GMT
Not After : Aug 22 05:02:26 2025 GMT
Subject: CN=f84632045e335f6528efcef4382d0ea4c0f25e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:1a:a6:db:30:af:75:49:33:05:8c:66:c5:
39:35:5b:7f:19:6d:08:11:21:40:a3:10:f8:11:05:
7b:da:4f:66:7b:0f:ad:ea:e4:a8:fd:92:ec:37:2c:
82:26:9e:b5:46:7a:43:ea:c1:65:17:f3:a0:95:32:
6e:3c:9c:1d:8d:83:ae:ad:04:08:63:1b:0b:92:1d:
13:d8:0f:41:f5:77:89:d8:0a:d9:29:54:d9:95:18:
8d:d4:c6:8a:5c:05:19:cf:02:b2:f2:10:13:20:91:
60:12:b5:ff:77:a0:9a:f1:b2:16:b7:d1:f1:59:f8:
7b:43:5f:5c:ca:15:85:22:af:68:dd:7c:d3:6b:31:
46:64:69:6c:0a:28:74:b2:87:37:b5:50:1a:4e:27:
73:7f:9e:a7:5d:80:0e:bf:bf:2d:6b:69:29:7b:9d:
35:04:14:78:3e:1b:87:f1:ab:cc:2b:20:75:52:d6:
2a:98:b1:34:0a:69:5a:a9:1b:81:f6:6d:bd:4f:a5:
66:88:9f:40:31:c0:f8:5c:e6:8d:ae:d3:4c:aa:5a:
7f:81:7c:d6:56:4c:f3:12:85:4f:09:11:0a:8a:7d:
55:e3:ce:f2:10:5e:e3:07:2a:2e:17:22:15:f6:d9:
40:40:c3:96:3a:62:1f:24:3b:8c:b9:53:7d:61:88:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:32:04:5E:33:5F:65:28:EF:CE:F4:38:2D:0E:A4:C0:F2:5E:1A
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d0:ff:c0:0b:f3:4e:00:61:ef:da:da:df:d4:22:91:f4:72:
04:d5:ac:7b:f3:8b:03:c4:ac:a4:cb:28:a2:57:b3:31:8f:1d:
d9:bc:cb:91:7e:98:f4:6f:0a:2c:8d:51:7a:7b:fb:2c:20:9d:
90:ff:a1:97:48:ef:bb:af:c8:7a:5e:97:c3:8c:2b:18:fd:a2:
5c:e1:ff:ef:1e:ad:fe:a1:07:d1:45:26:6e:58:6f:38:51:e1:
23:d4:e1:19:38:30:c0:98:20:1e:6c:37:f0:3b:b4:ba:e3:1a:
c1:de:12:ea:51:dd:30:69:a6:3b:7a:b7:1b:a7:35:36:33:a4:
87:fe:23:2c:21:e0:c6:be:86:ab:51:f2:92:75:72:55:4a:3c:
04:3f:79:18:0c:c1:d9:73:5e:88:6a:23:df:8e:cf:96:fa:6a:
7a:3d:02:50:7a:4b:c6:da:ba:76:c8:d5:70:1a:a7:38:d6:25:
a3:ed:23:51:aa:bf:72:f0:d7:6d:24:3c:f3:e1:05:d5:cb:69:
83:2e:77:2c:23:63:78:c7:e7:72:cc:73:3c:7c:e2:18:28:76:
15:53:41:d7:97:b8:4a:c7:ae:64:09:da:bf:02:a4:3a:d3:35:
10:c6:ae:eb:f1:9f:f0:e6:08:ed:8e:d3:26:79:50:42:c4:4a:
6b:bf:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:40:59 2025 by rpki-client