Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: +ZXCHshQ6dG5BVMwn+RNrBDMwYeQdoDwq6VYyCRKAb0=
Subject key identifier: 4C:E7:EA:A3:34:8B:9A:41:2E:0D:A2:A5:AA:E8:61:47:C9:A8:F5:2F
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 01988DD8F6236BF5EEF5CD7782425F350907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 1106
Signing time: Sat 09 Aug 2025 08:01:02 +0000
Manifest this update: Sat 09 Aug 2025 08:01:02 +0000
Manifest next update: Sun 10 Aug 2025 08:01:02 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: Az+y/LiMJtW2BE1hUuYrMttvzDf1JJqTYuTwozB+0/A=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:f6:23:6b:f5:ee:f5:cd:77:82:42:5f:35:09:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Aug 9 08:01:02 2025 GMT
Not After : Aug 10 08:01:02 2025 GMT
Subject: CN=4ce7eaa3348b9a412e0da2a5aae86147c9a8f52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:a2:4e:f0:97:85:d9:d8:2b:1b:40:f5:b7:
26:f0:a5:10:b5:9b:98:43:07:18:f8:8e:12:ba:58:
be:2e:1d:12:57:6c:e6:63:0e:22:db:74:5f:9b:63:
ff:54:1a:39:3f:f5:86:79:49:34:3f:df:dc:82:54:
b9:fd:ef:49:fa:f8:82:48:ca:a9:64:71:0b:2d:a4:
36:cf:92:53:87:57:18:fc:89:33:dd:74:f3:c5:36:
be:5b:75:f3:28:41:02:52:4f:9e:e8:97:38:ef:d3:
70:32:a2:4d:80:fb:17:e1:e1:7f:47:f7:a2:0f:83:
95:e4:36:ea:01:ae:7b:96:37:06:d5:c2:10:65:64:
eb:dd:4f:28:bb:d0:ae:2b:8c:f7:73:4e:d4:74:d6:
43:bd:c5:89:35:a4:a8:b0:39:fe:ed:8e:e6:f3:92:
95:1a:32:15:44:63:33:43:da:b7:80:12:54:21:fa:
34:30:1b:5d:1d:a6:b1:56:a9:f6:6c:0c:8c:ab:db:
f1:4e:fc:a0:3e:2b:77:41:5b:6b:4d:ca:54:53:5f:
ba:ef:98:0b:fe:0f:8b:6c:a0:18:3b:f9:ff:5b:93:
7f:87:d0:11:c6:6c:f1:c5:09:65:23:e7:eb:96:bd:
9a:70:76:84:43:f1:09:7d:8f:a3:39:56:56:7b:5b:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:EA:A3:34:8B:9A:41:2E:0D:A2:A5:AA:E8:61:47:C9:A8:F5:2F
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:88:98:73:3e:13:ea:2a:a7:a1:20:49:7d:9f:39:20:c5:c9:
36:f2:d2:fc:d9:83:d2:32:45:14:8a:96:90:51:4c:bb:ae:d5:
b1:f1:78:8d:b0:e4:af:36:6b:6a:13:4a:52:fe:83:2a:e7:06:
29:d3:8a:22:18:28:6c:be:55:c8:09:94:33:82:a3:fb:9e:39:
52:57:cd:c2:73:60:d4:f4:58:61:bc:94:df:82:1b:9d:2e:10:
bb:bc:ce:d1:9a:7a:7e:03:06:cc:29:f9:b4:79:dd:9e:9b:e3:
49:c3:c9:4a:72:a1:3c:43:59:77:1f:76:a1:45:9e:39:02:bc:
b4:76:fe:34:c5:e7:e0:85:e2:c5:ec:b8:97:70:48:3b:43:f5:
28:a0:a2:10:c7:d1:5e:63:16:21:c8:4e:c9:c6:59:75:7a:1c:
38:d6:2b:03:89:81:a2:0b:69:67:71:e1:41:e3:bb:b0:05:e2:
b9:f6:2b:a4:12:c1:67:01:73:a6:64:05:ce:3c:d2:44:a2:39:
29:6f:c2:65:e3:3f:b2:65:67:32:22:dc:a7:b6:c5:be:51:0a:
dd:52:e5:9d:e4:f9:0f:c1:5b:9e:2d:13:4e:f6:6e:e0:16:aa:
b0:e6:c2:15:24:bc:19:35:4d:f3:1b:4f:c3:25:e6:21:42:0c:
ac:84:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:09 2025 by rpki-client