Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: z6kVu1NhQ93y3y6lEMAtMLzX2sHmijRHkTBf2LSu36M=
Subject key identifier: 1D:D4:FC:B7:FF:86:05:FE:E7:47:C5:29:61:97:7A:DC:87:D0:35:2D
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019879AF221B01B506FCDB5695D3A942E61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 0104
Signing time: Tue 05 Aug 2025 10:02:57 +0000
Manifest this update: Tue 05 Aug 2025 10:02:57 +0000
Manifest next update: Wed 06 Aug 2025 10:02:57 +0000
Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: JTafhzUXHRQrtubfoDrhkO1/ySaYu08XEJz9rSFdZxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:22:1b:01:b5:06:fc:db:56:95:d3:a9:42:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Aug 5 10:02:57 2025 GMT
Not After : Aug 6 10:02:57 2025 GMT
Subject: CN=1dd4fcb7ff8605fee747c52961977adc87d0352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:1f:2e:77:82:3e:1a:53:3e:af:e2:c0:6a:
7d:fc:ed:d0:b7:2a:cd:6c:0c:28:0e:2f:ed:b4:fb:
e8:62:82:ac:63:1a:1e:ff:26:a9:a4:38:73:f0:2a:
80:56:d6:34:9c:8c:b4:a5:d2:46:f7:31:de:61:8a:
9e:c7:2d:31:1d:48:ed:ba:41:32:13:9d:0f:63:20:
5a:63:f0:ca:b7:3b:af:08:ba:21:e7:37:81:1c:9f:
63:13:38:8f:20:37:f7:da:2b:84:c2:13:a8:62:38:
fa:09:2b:18:aa:87:46:2e:b2:ef:6a:a4:c8:b8:38:
f5:82:c6:7b:e2:b8:85:e6:5d:40:e8:f3:c1:41:4f:
4b:73:04:c8:88:92:56:b0:e4:dd:08:2b:13:d6:3b:
88:72:61:40:a4:63:89:8f:28:2b:69:f9:81:5b:60:
3b:f3:85:18:df:8b:dc:20:2e:5d:6a:34:f5:c6:4a:
3f:19:42:5e:a3:61:eb:b6:ee:9a:49:08:01:d9:43:
6c:81:b6:a1:50:00:48:82:7c:69:b0:2b:4c:43:de:
6d:37:66:44:60:cf:1c:09:22:03:77:50:f2:bf:9e:
39:65:1c:fd:d6:6d:99:71:ac:48:7d:a3:f0:e6:f2:
71:56:ec:0f:6e:e2:5a:03:35:c5:de:7d:52:aa:f3:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:FC:B7:FF:86:05:FE:E7:47:C5:29:61:97:7A:DC:87:D0:35:2D
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:86:a4:5c:12:7a:63:dd:62:d8:e4:64:4a:d9:a9:38:86:e0:
38:e7:11:61:c0:47:81:6b:05:d4:90:ba:82:3b:06:6d:85:ab:
2b:24:61:28:0a:69:5c:27:3c:ec:bd:71:a2:67:b7:8a:10:99:
99:36:5f:a1:fd:db:5f:b3:03:dc:fa:5b:1b:db:c5:81:fc:2c:
39:f1:7f:a7:55:ab:51:08:dc:74:3e:4b:4f:54:0e:9d:d6:21:
ac:ff:88:08:8c:a0:e0:17:2e:f8:0f:5f:7c:ef:cb:c3:d7:11:
1b:6c:07:c4:c6:33:42:dc:37:35:fa:2a:cc:c5:c6:34:5d:8f:
26:0c:20:89:0d:bb:f4:94:36:99:f3:77:10:5d:3a:71:e6:b8:
bb:ff:77:72:cb:ac:24:f9:d2:cb:88:ed:94:ea:51:a5:63:45:
2b:8a:58:d6:43:63:c5:92:7c:a0:f5:a3:b6:f2:ee:ad:8a:9b:
3b:ea:73:45:7a:3d:bc:15:f7:dc:18:3b:f7:40:06:c2:d3:9f:
05:ba:00:67:af:a1:8f:c3:f1:9c:5d:3c:40:b6:2c:d2:b3:a7:
41:94:1c:79:29:f1:de:f4:05:fd:71:39:3a:6a:65:26:a5:b3:
7f:18:49:c7:65:9a:82:1b:3d:f4:76:e1:3f:e2:84:1a:97:b2:
11:13:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:08 2025 by rpki-client