Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: RuTgo5DHnI7W2G1LJGjiPZqxrVah1EiiBfbZUwC7swU=
Subject key identifier: F9:0F:1A:7F:F6:CE:A4:B3:B6:AF:86:1C:A5:60:C4:8D:1B:C4:1A:64
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 01988844E923ED052CEA3B6175A8C5BBE967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 06F9
Signing time: Fri 08 Aug 2025 06:01:14 +0000
Manifest this update: Fri 08 Aug 2025 06:01:14 +0000
Manifest next update: Sat 09 Aug 2025 06:01:14 +0000
Files and hashes: 1: 7NPjy0_LNEtrF1BCG60HRzqdKlw.roa (hash: QFPKpHBMjVle5FlNRbqdK60lHpC8YmYJkA7cV7MHx8U=)
2: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (hash: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=)
3: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: GJqsEWeVXi3dGFVVv+8vCN3G5i74evCIIP38W3r+3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:e9:23:ed:05:2c:ea:3b:61:75:a8:c5:bb:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Aug 8 06:01:14 2025 GMT
Not After : Aug 9 06:01:14 2025 GMT
Subject: CN=f90f1a7ff6cea4b3b6af861ca560c48d1bc41a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:ed:4f:66:1e:25:52:29:bd:6a:f9:33:f6:
55:10:00:cd:25:a7:c0:c1:cc:e6:80:e8:87:4b:3a:
6e:8b:d0:d4:e9:d9:cb:be:37:a6:cc:15:e1:7c:ed:
ce:1c:6a:33:aa:88:3f:82:70:ed:d1:47:38:4e:98:
e9:2d:88:e9:32:ea:75:ff:52:b4:9e:54:dd:e8:0c:
d9:78:43:71:c6:e5:d5:23:68:31:b7:4b:1b:57:0a:
dd:9d:3c:81:69:df:99:83:b8:3e:3f:2b:7f:a2:71:
6d:83:2b:71:cc:97:3e:51:d3:87:c2:d7:7f:b5:1c:
df:7e:2e:f7:4a:8b:66:94:cf:de:50:ce:7a:1b:78:
a5:03:62:ae:9f:be:9f:49:82:3f:a9:4d:cb:f6:7b:
21:c1:23:1d:04:58:54:36:ed:60:db:ee:73:0d:59:
70:e7:68:75:d0:d8:c4:7e:08:21:4c:c9:6b:fa:94:
e7:04:ed:3d:02:64:e5:d0:a3:b0:bf:6e:ba:7b:3d:
27:1e:3d:70:61:f4:c9:e5:be:01:b2:39:47:5f:6b:
bc:b3:58:a9:9b:0c:32:50:3c:ba:fe:97:70:83:7c:
16:0a:31:ad:d4:67:b6:4f:a5:1b:a9:b6:bb:35:04:
60:e9:b4:64:13:a2:dd:c4:b7:b9:3d:d2:d6:4b:60:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0F:1A:7F:F6:CE:A4:B3:B6:AF:86:1C:A5:60:C4:8D:1B:C4:1A:64
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9c:b4:8e:3b:50:1a:af:ce:2b:f9:10:a2:c4:13:02:4f:43:
36:19:2e:36:e9:9a:8a:e8:37:8d:11:fb:fd:a7:a4:f9:f9:9c:
a2:79:1d:b2:fa:62:fc:78:d5:c1:05:d0:10:4a:cd:dc:34:6a:
c2:e8:f8:16:bd:89:9a:b3:49:30:a5:b9:da:c7:db:99:96:59:
c2:c6:49:93:b4:3a:bc:6d:bc:1d:9f:7c:23:4f:2b:b9:f7:59:
5a:80:6b:9e:8e:a7:ee:6a:66:28:bb:c9:d5:aa:8a:3f:8b:4a:
9d:f3:c6:eb:b5:16:22:c8:ce:03:c0:e5:e5:91:4b:0b:4c:9e:
16:ac:0e:87:13:a7:c5:da:c8:11:5b:0d:45:ad:ab:64:44:38:
12:fb:7a:f5:e6:6f:a9:6b:9c:bc:19:a5:7c:b3:ae:64:e2:f6:
6d:b1:e2:4b:c5:be:dd:b5:5f:c7:e6:14:b3:ce:6e:5b:bb:2e:
6c:af:5d:5a:00:9f:e5:24:69:06:a2:b1:f7:2e:50:ba:d7:01:
e7:36:45:65:1e:9c:76:0b:a5:e4:29:b8:4a:e9:bb:50:cd:d4:
f2:41:58:12:cf:ab:3b:a2:ad:30:14:56:73:16:e0:4a:2d:51:
76:52:e5:f8:43:da:49:e2:53:9c:eb:ab:46:30:4d:1e:94:73:
cf:fd:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:47:55 2025 by rpki-client