Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: nOWHt1Vt+KpIjqxi+B3Hj5CHcMop5z0ItL34fVaHreg=
Subject key identifier: F0:3B:93:CD:06:1E:1C:88:7B:BC:DC:69:9A:66:6C:CF:CE:83:B3:91
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 019872CF48F8AD78B9DCA5402C8DADCD9D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 1628
Signing time: Mon 04 Aug 2025 02:00:43 +0000
Manifest this update: Mon 04 Aug 2025 02:00:43 +0000
Manifest next update: Tue 05 Aug 2025 02:00:43 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: Jb9eitKpPFOV/6MLjyrZue04lMGgcZiA9ftA0QYPkfI=)
3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:48:f8:ad:78:b9:dc:a5:40:2c:8d:ad:cd:9d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Aug 4 02:00:43 2025 GMT
Not After : Aug 5 02:00:43 2025 GMT
Subject: CN=f03b93cd061e1c887bbcdc699a666ccfce83b391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:f3:d2:7c:cf:c0:fc:85:63:a8:34:5c:33:
33:f6:8d:6b:52:54:2f:46:5b:dd:5f:e5:20:8e:b5:
7c:f0:8a:e9:60:b9:84:a0:d4:e6:01:88:91:04:23:
78:08:2b:68:a9:a0:62:8d:e2:50:dc:4c:c4:14:12:
dc:34:8e:ca:59:f9:08:5f:2e:d9:51:fd:22:c7:7c:
1a:0d:3a:48:b8:76:3d:b8:ee:b9:40:91:db:09:1c:
9d:b5:71:81:97:55:42:a3:9e:98:4f:b2:7d:77:68:
18:43:3f:ae:56:b5:ed:f3:62:ac:be:1a:81:27:a9:
5d:37:5e:47:c8:92:00:86:85:17:10:1b:3b:89:5a:
89:1b:3b:03:61:31:86:bb:af:0c:48:12:6c:f5:89:
02:8a:8e:1a:f8:d2:ad:34:ac:1b:d7:33:d2:8d:f1:
84:50:53:50:78:95:19:88:c1:1d:c1:5f:03:69:03:
81:d7:24:da:c1:78:58:ca:8c:c5:b8:e7:2a:fe:e2:
f3:2a:72:fd:b0:a0:ef:49:91:a3:fe:3a:9b:60:bb:
9e:f8:b1:36:a3:59:1a:11:46:a2:71:6e:2f:12:39:
92:80:63:05:ef:37:8f:5c:4c:e7:3a:f4:7f:50:94:
ee:4c:64:c1:6d:79:5c:c9:ea:58:b8:f1:7c:2b:97:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:93:CD:06:1E:1C:88:7B:BC:DC:69:9A:66:6C:CF:CE:83:B3:91
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b4:b4:b3:9a:47:7c:f0:4f:c4:7f:06:56:11:cc:d0:19:f3:
d1:7a:de:38:8b:9d:18:e3:3e:91:0a:6a:2a:aa:e1:83:fe:61:
b2:a2:34:ab:d5:11:c8:50:a4:aa:6e:f8:c1:5b:e6:6f:69:10:
bd:b6:f2:94:a8:49:69:c0:bc:5e:fe:a1:71:d9:98:22:c1:0d:
39:68:3b:c5:e0:0b:51:38:0b:10:bc:68:1d:74:51:8b:30:f5:
cc:b6:ef:1c:38:d4:90:e5:c7:93:82:55:b5:f4:2c:50:1c:a1:
fa:b6:41:60:80:9c:75:e4:f7:92:8e:97:b6:fa:4a:eb:38:55:
2f:c8:dd:ca:54:f2:e5:08:b9:1c:a7:df:e2:07:f5:c3:81:1d:
95:27:dd:75:cf:e3:52:7f:43:3b:bc:18:d5:ca:a8:52:49:fd:
77:02:86:80:af:ff:a7:20:10:4f:f0:cf:d9:40:81:2e:7f:30:
c7:59:91:9b:81:d0:78:ad:c7:0a:81:20:75:b3:3e:e0:27:f7:
e0:41:14:12:c5:cb:c3:0c:12:b1:b0:43:6a:c4:5e:1f:3f:99:
b1:59:2c:fa:c8:96:1c:a7:20:96:7f:1d:ba:36:16:45:7d:5d:
f1:7b:0a:8a:94:d5:35:87:5c:4d:e0:98:d1:77:70:8f:f8:b8:
9d:ab:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:40 2025 by rpki-client