
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: zvhaQchhsP18SB9WcDS3ny64/64SeJ3cbNuglPLygJ4=
Subject key identifier: 09:7E:8F:CC:5C:37:6C:69:DA:24:D4:2A:2C:D2:F6:39:C6:40:93:CA
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 019896A585B8C9F7F68D04F7F344F2FF4F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 05F2
Signing time: Mon 11 Aug 2025 01:01:26 +0000
Manifest this update: Mon 11 Aug 2025 01:01:26 +0000
Manifest next update: Tue 12 Aug 2025 01:01:26 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: BDFyJBvahOuG/IS7a7r33yXCn2FDHZJKPFOot00s/mg=)
2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:85:b8:c9:f7:f6:8d:04:f7:f3:44:f2:ff:4f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Aug 11 01:01:26 2025 GMT
Not After : Aug 12 01:01:26 2025 GMT
Subject: CN=097e8fcc5c376c69da24d42a2cd2f639c64093ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:50:80:20:62:b3:97:20:aa:8e:a4:95:60:
94:b4:73:09:3e:29:49:30:d5:4c:55:9c:e5:c6:27:
02:e8:b5:c8:97:da:cd:3f:46:3b:c2:65:11:e4:a8:
ca:1b:52:1d:a3:6b:24:07:22:a3:fe:a0:4e:1a:5f:
e9:70:f5:04:97:24:61:bc:89:08:78:51:4a:c5:4e:
76:1e:9a:5e:f5:fc:2f:a7:43:37:17:7d:61:8f:49:
be:ee:6b:f0:71:b1:fd:e8:8c:ff:31:02:ac:e6:a3:
e7:f4:50:12:46:e9:40:23:ee:90:12:2d:21:db:0e:
90:df:87:8d:bf:7a:a8:11:10:88:c5:6e:08:d4:27:
eb:c5:2b:6b:23:71:d1:77:df:34:dc:64:7c:32:4f:
f6:5d:3b:a9:bb:45:89:ae:90:78:e9:16:36:2e:8b:
35:01:e6:86:b3:f7:df:e4:a9:d9:b3:21:4d:3e:ad:
16:f1:8b:92:f9:ab:1f:fa:78:9d:82:34:06:30:ce:
a8:df:5a:e0:21:de:56:2e:4e:98:81:bf:06:39:03:
1d:ea:cf:b5:31:6f:37:6f:c2:21:94:7d:f6:0d:ee:
53:c5:c8:18:8d:c4:d4:e6:27:9e:ee:9b:e0:bf:2d:
b6:ca:e8:23:34:d1:0f:fa:e7:65:08:f5:6f:7b:a9:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:8F:CC:5C:37:6C:69:DA:24:D4:2A:2C:D2:F6:39:C6:40:93:CA
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:11:ae:14:2e:3d:da:c3:29:bd:f1:9b:4d:3e:b6:24:d6:a2:
c1:ed:65:b2:1c:ae:d4:77:e6:98:19:61:f8:45:27:b7:e8:cf:
c2:88:62:e3:57:a9:4d:1e:9f:a6:84:2a:b5:27:9b:96:0d:5d:
ce:0c:db:d3:f1:47:77:70:f4:fc:9a:b8:fd:18:dc:a5:0c:2b:
17:fd:5c:82:04:9e:b8:1a:3d:e7:d9:22:73:9b:ce:dd:5d:15:
a6:2a:af:52:37:2f:16:87:c2:30:f6:23:41:1c:be:e0:b6:2b:
fb:06:9a:a6:b3:82:a8:3e:49:0b:8f:99:2e:62:a4:9a:81:40:
25:2b:ff:b5:6b:21:9f:04:b1:be:ae:67:8b:b9:6b:5e:e9:a2:
3a:e2:e5:04:c6:28:ae:4f:3f:48:44:58:f1:41:2d:d7:5c:3e:
fc:6d:fa:ba:90:b5:8c:b9:45:22:ec:b7:82:93:ee:f2:db:13:
74:c4:3c:fc:f8:63:87:94:a1:b0:97:70:26:ac:85:a5:fa:47:
ab:c8:e2:42:ee:33:e8:f6:e4:88:9a:d6:93:f6:11:6a:f7:1e:
bb:47:e7:51:70:30:d6:97:5e:b5:39:db:37:9a:f6:09:ad:ec:
76:41:97:22:a0:cb:1d:3d:35:46:26:64:d6:74:ca:a4:1f:c0:
7a:77:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:46 2025 by rpki-client