Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: 5ebSzK8n9W0EnJSWRBSu+pnr05zybrCyMLNDil6L8Fg=
Subject key identifier: F7:1A:13:4F:88:E0:B6:CE:6D:B1:29:1A:65:BE:1E:B6:D1:23:BF:66
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 01988355BED2F6BDEBC7F588C90820DEB612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0954
Signing time: Thu 07 Aug 2025 07:01:31 +0000
Manifest this update: Thu 07 Aug 2025 07:01:31 +0000
Manifest next update: Fri 08 Aug 2025 07:01:31 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: rflAjLYK9VJfXFxwo8VTinfW1t5zVJvT2P/FdF7EqtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:be:d2:f6:bd:eb:c7:f5:88:c9:08:20:de:b6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Aug 7 07:01:31 2025 GMT
Not After : Aug 8 07:01:31 2025 GMT
Subject: CN=f71a134f88e0b6ce6db1291a65be1eb6d123bf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:3c:44:b8:27:13:5d:6c:0d:4c:af:48:95:
dc:36:28:bd:f6:fd:4d:6b:43:ca:9b:e1:9a:be:c1:
98:2a:cf:4e:b8:b7:22:d6:55:26:56:0b:8a:99:f8:
63:02:bf:6d:e3:14:c3:95:b0:a3:50:42:2a:32:4a:
d2:21:47:29:aa:a4:e6:87:a5:d1:9f:5e:84:22:1e:
14:ff:ff:b0:a5:f9:25:b5:09:bf:17:9e:17:f9:dd:
52:47:be:2e:82:4c:eb:1d:57:ef:52:0c:a4:a9:8e:
fa:6d:8b:0e:47:6e:e0:9f:34:3d:5e:9c:5b:3d:e2:
db:e1:62:d4:4b:7e:d4:5c:33:27:e5:a6:f9:5a:3a:
db:b6:d5:92:48:51:88:6d:1b:34:9b:d9:75:16:30:
18:07:4e:1a:e0:64:aa:2f:52:da:e9:08:6a:95:9a:
e4:f0:48:d2:08:5c:19:a8:82:1c:2e:78:b4:76:ee:
f6:77:d8:8e:0d:f6:b3:cc:35:2c:a7:b4:21:d9:bc:
53:36:bc:df:16:fc:ea:c3:3d:ff:5c:9a:39:49:90:
ae:48:78:f9:1a:83:c1:e5:58:78:04:34:38:32:fd:
e6:ac:06:07:2c:88:cf:71:cc:35:a2:9d:a3:9f:66:
25:58:b7:fb:b4:25:b7:43:f1:e6:2e:00:b2:76:b9:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:13:4F:88:E0:B6:CE:6D:B1:29:1A:65:BE:1E:B6:D1:23:BF:66
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:98:32:61:29:3a:52:91:70:f8:c4:78:bd:f1:61:78:55:
dd:1b:5e:7b:ce:fe:29:12:a1:51:40:f2:2e:e5:be:8b:0e:dd:
ec:c5:8b:c4:b0:30:be:11:6b:35:ef:a4:e1:94:5f:7c:bf:d1:
8f:0a:3d:5f:12:40:4e:2f:ae:86:50:68:e5:0e:89:eb:a7:e3:
12:73:fe:cc:f3:d4:4f:f4:39:8b:db:fd:86:93:14:a3:23:da:
d0:dd:3e:7c:b9:a7:07:4e:ac:12:63:17:73:d8:a8:e2:7d:e3:
00:27:5e:84:56:28:02:ce:db:f7:a3:5f:19:26:8c:7a:50:28:
30:68:9e:0c:91:f9:b8:be:de:33:da:99:65:ce:11:06:df:70:
d4:98:a3:f3:b6:19:e5:fd:48:e4:bb:c6:68:2a:44:49:60:e6:
bc:6a:89:d2:95:39:f3:71:55:b0:17:2f:fe:3a:5f:90:92:ba:
c5:d0:0b:3b:1b:ce:15:17:1b:97:a6:35:b9:4c:9a:60:6a:bb:
2c:47:d8:4e:ad:dc:ee:cf:57:df:ed:74:4c:7b:bb:c2:64:44:
f7:ea:83:94:a1:dc:6a:26:51:87:d3:da:85:51:fb:94:38:74:
e4:87:9e:e3:bf:25:24:46:63:a0:f8:f0:cd:3f:43:20:27:28:
91:75:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:24:53 2025 by rpki-client