Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: b7/3p16A30YperF51TpVZumb1IOK+zUFkzrP/GgWNlI=
Subject key identifier: FD:B7:C2:B2:86:E5:CF:FC:F8:33:C2:72:4A:13:D8:F9:C9:5D:01:E4
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019873E3208CD3C4DECD653A0F34B1FF2AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0633
Signing time: Mon 04 Aug 2025 07:02:01 +0000
Manifest this update: Mon 04 Aug 2025 07:02:01 +0000
Manifest next update: Tue 05 Aug 2025 07:02:01 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: 39EH3A0TeHEDx9+2+zWyvTnBMwF+pKIbeIJc+zJtQlQ=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:20:8c:d3:c4:de:cd:65:3a:0f:34:b1:ff:2a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Aug 4 07:02:01 2025 GMT
Not After : Aug 5 07:02:01 2025 GMT
Subject: CN=fdb7c2b286e5cffcf833c2724a13d8f9c95d01e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:ea:48:db:96:31:a3:80:55:e6:40:4c:6f:
f7:99:6e:78:84:6c:8d:45:38:46:45:47:54:c2:4e:
6f:01:b4:10:9f:cf:f7:a3:87:54:8a:06:e2:77:cc:
ad:42:30:b1:f2:15:51:e0:af:70:0f:04:e6:29:23:
66:73:9b:17:8b:77:1f:c4:7d:b6:cb:f7:dd:e5:90:
08:d2:8c:d5:5e:28:fa:38:ca:db:f3:16:04:bf:7f:
d5:6f:15:2e:25:41:8d:37:c3:10:42:80:41:01:52:
d4:39:6a:33:1e:3e:31:1e:4d:f6:f2:57:72:98:83:
e5:7d:7d:fd:cf:c2:5d:7f:26:7f:d5:a7:49:3b:39:
6d:54:b1:98:d9:26:a1:26:ec:e9:1f:c6:18:bd:d2:
52:61:4a:1f:d0:f5:82:b8:b1:06:9d:00:15:12:74:
27:f5:0c:8d:89:30:c0:4d:43:41:4b:ae:54:00:af:
8a:f9:95:76:04:69:9a:9c:f0:d8:36:06:d1:b1:eb:
fc:a8:8b:b8:b0:96:be:c1:87:44:c6:32:de:23:02:
64:3c:31:4d:77:a4:2d:77:05:eb:fe:15:32:dc:67:
ad:8b:24:c5:84:ad:0d:1a:bb:3c:ac:ff:5f:b3:fe:
08:83:d3:0b:6d:ea:82:28:a5:75:a1:30:fd:7f:8a:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B7:C2:B2:86:E5:CF:FC:F8:33:C2:72:4A:13:D8:F9:C9:5D:01:E4
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:de:dc:44:bf:85:70:ec:08:b2:07:e0:3e:72:b3:db:51:4c:
66:9e:36:eb:5d:fc:d2:e2:a8:ae:b7:b8:62:38:32:81:ba:26:
33:0d:7c:f0:b4:0c:91:ce:4f:07:36:85:83:3a:5e:cf:64:52:
28:1a:13:aa:10:b7:6e:ee:2c:45:02:15:98:96:f7:fd:9c:de:
0d:f7:56:b9:cc:e0:97:c1:4a:51:08:d7:80:8d:2a:3f:bc:9a:
34:65:a6:d4:7d:05:33:77:09:d4:6e:0e:29:76:a8:d6:c9:37:
7a:8f:fb:67:09:c0:b1:fd:5e:95:44:39:62:8a:11:7e:7a:12:
a9:01:d0:14:a1:15:7d:50:55:63:94:52:50:a4:2b:64:b3:3d:
28:9a:94:a6:72:fc:e3:bb:b9:c6:24:ff:85:9b:59:18:74:03:
ef:28:5b:76:83:29:9a:25:65:58:ad:59:0f:46:07:b0:a5:e2:
e4:24:95:d7:96:ff:4d:81:10:b9:a9:3c:21:f6:99:45:b6:95:
a7:83:1f:f1:49:98:57:24:28:2a:79:4c:28:ea:3f:0b:e0:b5:
29:00:f7:ce:68:91:8b:81:50:cd:2e:78:1e:9a:95:ab:0d:6d:
ec:d6:a0:54:da:61:a3:49:ae:da:44:f0:9f:02:ef:9c:85:dd:
5d:cd:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:11 2025 by rpki-client