
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File: Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier: gYuoVSzSPAc0RNKurh4Rx3B6Jk5R+l5clyITCSa9Eq8=
Subject key identifier: E9:A6:5F:79:8F:52:21:2E:4A:8E:7B:1E:0D:D6:3C:4A:CE:5B:06:11
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 01987298CC4AAF6EFDDA53F47652E49D13AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number: 08A8
Signing time: Mon 04 Aug 2025 01:01:13 +0000
Manifest this update: Mon 04 Aug 2025 01:01:13 +0000
Manifest next update: Tue 05 Aug 2025 01:01:13 +0000
Files and hashes: 1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: XhVzbxci4q5wLd/b0BtlxDxj1rGGFplumlrP3hCRKmQ=)
2: empt_DtsxXPAB8Pr68RMQjz57Hk.roa (hash: NP64KpVgnNbjP2xtIMghVQIieRDbN+Hw1J+jKW8Qdjw=)
3: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=)
4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=)
5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:cc:4a:af:6e:fd:da:53:f4:76:52:e4:9d:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Aug 4 01:01:13 2025 GMT
Not After : Aug 5 01:01:13 2025 GMT
Subject: CN=e9a65f798f52212e4a8e7b1e0dd63c4ace5b0611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:e1:25:d3:2e:d7:06:9d:de:96:76:0f:67:
3d:b1:ef:b2:1d:ee:1f:70:2b:09:ab:5b:b4:0c:29:
6c:59:36:9f:7b:40:69:ba:98:6a:58:89:d5:65:89:
78:c3:c6:67:1d:1f:2a:b1:06:aa:c3:d0:32:45:c0:
d7:84:af:34:fa:5a:8a:06:6f:3e:cc:80:7d:8e:d7:
29:05:b3:a0:50:1d:28:15:19:50:ff:94:25:2e:73:
53:ba:09:bf:e7:57:d1:62:77:ec:b0:90:5f:bd:48:
82:c9:f5:e5:33:be:db:ad:f8:ce:d9:2d:e9:be:2f:
bf:f3:96:1d:b1:0c:f4:c7:0c:74:24:34:b9:c6:65:
11:56:c6:88:07:26:29:35:ca:e9:56:fb:64:e2:1f:
12:12:d1:99:b0:3e:41:6c:11:6a:7b:e3:c3:22:69:
27:63:ad:0c:a8:d8:09:3f:35:22:68:27:45:fa:9d:
bc:73:e7:d5:96:f4:ad:dd:29:cf:4d:e3:02:4f:3e:
cc:53:49:3d:dd:b1:ff:30:93:37:1a:78:ee:8d:1f:
cf:d0:d1:00:3f:79:9b:04:c9:f0:55:50:ac:37:9a:
a9:23:f2:ba:54:c2:75:e4:8c:02:81:69:8f:18:23:
46:76:1a:a8:cc:73:b5:ef:82:26:ec:80:b4:38:a9:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:5F:79:8F:52:21:2E:4A:8E:7B:1E:0D:D6:3C:4A:CE:5B:06:11
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8a:af:88:ff:0e:9f:64:da:ef:14:aa:77:73:2d:dc:03:ef:
85:64:bc:eb:2c:0d:f9:65:54:4f:93:69:d4:a5:f7:81:55:5b:
89:66:5b:2a:a0:2f:b7:aa:3e:57:b2:5a:85:b7:79:79:8c:8b:
0d:ac:a5:e7:ef:43:fb:d4:1e:ed:6a:ac:79:ef:f9:da:0d:44:
e1:6e:fc:4a:7a:90:80:56:59:10:0c:73:19:e5:d9:61:26:7d:
db:93:41:d6:cf:ee:e8:c2:c7:fa:c6:2e:17:70:a2:2f:df:26:
6c:50:7d:b5:33:2e:93:ef:f7:1b:cd:77:6e:59:86:21:5c:90:
10:dd:70:8d:7e:c1:bf:47:c6:4a:a5:e2:34:00:d1:71:69:6d:
77:c3:cd:e1:a2:16:e2:42:45:0d:94:ed:9b:1e:41:94:1c:38:
65:57:69:03:28:d2:5e:8a:0c:00:32:eb:b8:a3:fd:14:1e:e5:
c4:f5:a8:a3:70:1b:f7:34:72:f0:03:ca:0c:18:ed:e4:5c:a2:
6f:bd:a4:dc:79:b4:eb:77:1b:1a:2e:6b:a3:ea:28:ff:e8:bb:
f3:74:55:dc:d6:8a:fe:79:dc:11:c7:4f:89:e3:3a:d0:18:f8:
07:58:95:95:bd:68:9c:62:e6:1d:52:77:d7:63:02:38:a0:3d:
c2:af:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:15 2025 by rpki-client