Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: 3KIbLDgHAk3WqPXhez4e9mMOYVf2JeJ/0aGBDMmoylw=
Subject key identifier: DF:76:A5:9E:C4:D3:7F:F4:94:81:DE:4F:DE:F7:4C:34:3F:7A:C4:6D
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 0198745086959B3D9192B9FB4AB3930B3BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 0A27
Signing time: Mon 04 Aug 2025 09:01:31 +0000
Manifest this update: Mon 04 Aug 2025 09:01:31 +0000
Manifest next update: Tue 05 Aug 2025 09:01:31 +0000
Files and hashes: 1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: nJGYrCXzfBNq9Btf93QRxk80ovPLwMqOUo49b4o5yh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:86:95:9b:3d:91:92:b9:fb:4a:b3:93:0b:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Aug 4 09:01:31 2025 GMT
Not After : Aug 5 09:01:31 2025 GMT
Subject: CN=df76a59ec4d37ff49481de4fdef74c343f7ac46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:59:65:86:5b:90:f9:8f:19:a2:11:c7:5d:cd:
43:9a:0f:81:04:0a:4b:54:4d:e5:4a:8a:85:dd:2e:
aa:22:ab:80:6a:f3:9f:43:9c:c4:fe:ce:99:62:d8:
75:28:18:6c:48:11:26:80:7d:d7:df:f0:35:60:fe:
e9:29:3b:c7:36:f0:53:7e:ba:4b:6d:35:06:50:a1:
5f:da:36:07:d8:45:d0:3d:f8:7c:92:e7:8f:a0:d8:
5e:19:c2:5f:b0:c4:9b:f7:d6:3a:00:2c:49:2c:01:
aa:b0:76:f4:d8:9b:08:42:fb:73:63:50:f5:71:a8:
4c:01:20:38:7a:29:4a:5e:b2:40:7b:cc:35:7e:b5:
09:45:9a:be:fc:3f:5b:7a:63:45:ec:06:8c:93:d8:
87:99:ac:df:60:d8:4f:3c:66:4a:46:f2:93:ba:41:
09:81:fc:b9:ba:a0:e6:7d:69:79:51:5a:a9:60:12:
c9:bd:cb:55:df:ad:ad:f5:02:4a:62:1c:f0:96:30:
62:4f:5f:b3:1d:12:d4:44:03:60:82:59:4c:23:67:
b3:72:db:07:b6:5a:13:f4:67:cd:07:f9:48:ef:be:
12:11:db:bc:b2:7c:0f:a4:42:c6:2f:3a:8d:40:2e:
7f:b6:7d:ef:f7:dc:25:84:3e:1b:3d:7e:a2:74:95:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:A5:9E:C4:D3:7F:F4:94:81:DE:4F:DE:F7:4C:34:3F:7A:C4:6D
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:62:5a:2c:97:ee:0c:b7:8b:14:96:ad:5e:b1:51:31:b8:d5:
fa:0e:1c:08:b8:3f:02:3f:55:2c:17:f3:7b:84:ef:62:67:06:
fc:ac:fa:f3:fd:84:db:12:64:71:f7:5e:07:07:db:28:20:3b:
c2:f3:ec:8f:31:9f:5b:d1:dd:80:11:63:86:7d:b8:6d:8f:2b:
9e:cf:cf:df:97:23:a5:9e:6c:d1:ab:f4:ef:e4:e4:c9:04:bd:
8f:da:c4:3b:69:76:ef:2b:bc:f7:21:97:df:30:1a:66:63:da:
54:ea:3d:5e:be:60:74:90:1c:49:49:2e:22:f5:28:54:86:91:
2b:19:2d:ce:2d:d4:15:72:a7:8b:b7:1f:34:2d:04:b2:3a:2b:
54:39:67:f6:0c:27:ed:09:56:70:14:20:09:b0:e2:7a:88:85:
97:c3:42:e4:26:4f:2a:c2:d5:ff:0d:68:f6:cd:85:78:f6:a9:
61:fd:eb:c9:f1:01:39:b0:9d:4f:b4:aa:b4:b3:e9:4d:a6:f9:
9f:b3:ed:20:62:fd:c9:e3:28:f0:9b:7b:b0:01:cf:a1:1e:83:
17:d8:e2:76:92:2f:8f:50:52:48:41:b7:32:64:1f:06:0a:8f:
a9:84:7e:d1:89:8b:8c:4c:dc:5a:d7:e2:61:72:b4:77:b1:1a:
7d:e3:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:40 2025 by rpki-client