Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: KpVwLFfyWVatrsBI1HwArrrEfumFb5fgp7HHzV1xMgc=
Subject key identifier: 23:B2:9D:36:7F:C6:A5:73:39:4A:5E:88:28:08:37:A2:70:C2:3D:3F
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 01989034B54DD23FD462B83A1A4286778E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 09E2
Signing time: Sat 09 Aug 2025 19:00:30 +0000
Manifest this update: Sat 09 Aug 2025 19:00:30 +0000
Manifest next update: Sun 10 Aug 2025 19:00:30 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: L+D2EBz5UN4vc2tlHvv36bQqPuoKMP1g3JVx5fHcJ2w=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:b5:4d:d2:3f:d4:62:b8:3a:1a:42:86:77:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Aug 9 19:00:30 2025 GMT
Not After : Aug 10 19:00:30 2025 GMT
Subject: CN=23b29d367fc6a573394a5e88280837a270c23d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:dc:57:f4:93:21:5e:30:14:ef:ca:80:f5:
b4:e1:41:6c:88:82:82:48:b8:e0:de:a7:cd:34:48:
b7:75:2f:4e:b3:ea:ef:37:a4:6e:a6:e8:ef:46:70:
cf:60:4b:2d:e3:39:15:4e:d4:a9:d0:88:5a:75:ce:
06:f7:f7:21:f2:f1:64:fa:44:28:c8:db:f6:b7:39:
df:a8:3c:2e:a2:a9:d8:ff:a8:81:3d:79:a2:f8:ce:
e7:1d:cb:b9:de:d8:28:2c:e4:5b:a9:de:87:3a:fd:
05:d1:01:0e:5b:02:ab:66:82:40:ee:61:21:26:3b:
71:5c:d5:67:53:23:06:62:31:9b:26:b4:93:2c:ba:
93:d2:2a:00:c1:37:35:ab:73:2d:e3:56:58:c2:ab:
2e:06:f1:85:52:1c:58:3a:31:89:2c:8a:f4:9f:82:
99:05:58:55:a3:ac:e1:3b:71:62:0e:ab:51:03:43:
13:ba:ee:b2:16:ae:31:fd:02:ca:21:c9:67:b7:40:
92:f9:bf:e0:56:f6:19:a7:40:f1:cb:cb:c3:76:51:
42:f4:26:66:0f:46:fe:f3:cf:46:0a:1b:64:8e:de:
ef:08:46:88:80:c5:2a:b9:f4:8a:61:29:09:75:81:
4e:76:fb:c2:72:d1:0a:c4:d7:ab:21:bb:4b:d9:cc:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B2:9D:36:7F:C6:A5:73:39:4A:5E:88:28:08:37:A2:70:C2:3D:3F
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c2:87:b7:34:57:08:c6:7a:6d:90:d8:97:af:a1:61:47:7e:
38:88:4f:55:08:67:41:45:74:c2:a8:20:d6:a4:ba:ba:a6:e3:
61:15:ee:40:5f:ba:5a:96:d3:91:46:e5:3e:a5:ed:19:be:42:
73:1d:7b:10:cd:62:3d:3f:44:4f:b8:6b:ae:01:24:3b:2b:50:
43:0e:a8:c1:a0:03:d7:72:eb:2a:cd:00:59:e1:5b:01:30:fd:
1f:b8:90:d0:77:0a:83:67:e0:42:74:f8:1d:4f:9f:d2:cf:f0:
7f:1e:b2:38:ea:43:3d:84:2d:f2:c7:b0:5c:59:e1:62:ac:bd:
1e:cc:ca:a1:60:3f:66:9b:e8:45:db:2e:e0:75:b4:0c:75:84:
1b:0c:14:5c:52:a5:7e:f9:6d:68:09:62:6e:d9:7e:6f:a0:40:
3f:eb:a7:cc:3d:7f:55:e0:55:15:05:0e:86:09:0b:4b:2b:75:
61:76:ad:d6:e1:ab:8d:58:bd:8e:e6:a6:af:75:d6:16:23:07:
51:84:34:dd:b6:81:91:6b:cc:af:0b:7d:13:7b:ba:40:8a:32:
fc:78:d9:d9:70:24:05:a6:f4:66:48:20:91:d4:ee:aa:3b:c8:
b9:c2:09:45:ae:7e:d7:bf:8a:68:d7:cc:fa:2a:4c:70:2e:d7:
40:d8:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:35 2025 by rpki-client