Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: OWBZcLlraIGwurYIHftNrSweY1gz5OBwSN4dmxLvKLA=
Subject key identifier: F3:0E:7E:66:76:E4:D8:BA:92:EA:10:F7:92:09:D8:C5:D7:BB:DD:98
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 0198880D4A182F7CC33048D813669D143DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0AF4
Signing time: Fri 08 Aug 2025 05:00:28 +0000
Manifest this update: Fri 08 Aug 2025 05:00:28 +0000
Manifest next update: Sat 09 Aug 2025 05:00:28 +0000
Files and hashes: 1: 67MB3uIiPBNhFM08ZckoWW6iFi8.roa (hash: JV/MdthgHrxhWbvFQASmk0ngMZHEyExozVaoGSmnqvc=)
2: 9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (hash: HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: uhL5fW5jsN7ilcTPIFb0ZMTxz/ec/HdHA0W54dnIha0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:4a:18:2f:7c:c3:30:48:d8:13:66:9d:14:3d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Aug 8 05:00:28 2025 GMT
Not After : Aug 9 05:00:28 2025 GMT
Subject: CN=f30e7e6676e4d8ba92ea10f79209d8c5d7bbdd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:39:2d:de:a2:00:c1:5a:b5:ba:bf:47:17:61:
a8:10:22:32:e7:8b:65:c6:3e:23:90:fe:26:3d:6c:
53:c0:62:16:c7:16:78:17:e6:d8:be:f5:d1:e0:71:
0b:ab:a6:26:d7:51:7b:1a:c6:91:46:0e:f1:26:03:
14:9a:87:fb:15:33:22:1b:47:ba:cc:d3:2e:c0:a9:
cc:57:a8:04:67:13:94:1a:4a:d8:d4:95:6a:5b:04:
ec:bf:49:34:a2:f6:1f:1c:14:25:22:b2:fc:3c:66:
1b:d8:8e:bd:df:24:40:82:e0:29:8d:d1:47:7d:8f:
7b:45:13:aa:42:32:23:50:d2:23:21:b3:69:01:bd:
a7:55:ed:5f:fb:83:32:8a:a0:23:f6:a8:cc:1f:9d:
b8:67:84:41:72:ba:39:7f:60:e1:9a:cc:f8:41:ff:
88:45:b0:6d:8d:8d:99:f8:69:99:1c:38:ed:6f:34:
91:52:44:89:04:9e:9a:d8:a6:68:de:2b:de:95:a4:
9c:14:6c:cf:81:79:0a:cd:32:8a:27:59:28:41:8e:
2f:af:0c:a1:fb:e4:70:48:26:15:b6:d0:5a:38:0f:
64:37:84:fc:f6:e3:60:5a:3b:39:a1:55:7d:7e:4c:
d0:84:7a:f6:41:b0:39:e4:6d:5b:c9:80:b9:bc:ab:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:7E:66:76:E4:D8:BA:92:EA:10:F7:92:09:D8:C5:D7:BB:DD:98
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cf:55:64:1f:fc:b0:86:c6:f0:12:59:99:bf:75:5c:bd:a9:
cd:d8:61:ed:29:80:5a:8f:cd:29:b9:c7:02:e6:1c:f8:d2:2e:
04:82:65:29:64:35:ac:7e:71:06:14:f5:65:ba:ac:44:bd:36:
7e:eb:7a:27:46:51:5e:dd:83:ad:c0:80:98:d1:0f:39:d0:b7:
e5:1c:f0:b5:fc:b0:ed:10:3b:ad:15:a8:4d:12:06:5e:23:47:
1a:5d:d8:b6:1f:ee:c7:5a:3a:f1:b3:3a:40:da:2d:65:92:95:
ad:7e:cc:7a:6c:9a:be:62:de:4c:bf:9a:ec:50:42:14:c1:aa:
6f:93:70:95:b5:a1:c4:05:d1:f7:ae:5d:a5:6d:c1:e8:26:11:
90:f3:68:7a:3a:ff:4c:e7:6d:90:e0:64:9e:d4:c6:9c:11:3b:
c2:b5:8c:a5:ae:8f:76:1e:fb:01:f2:f1:bf:3e:6d:ae:fd:0b:
5d:52:14:de:d1:76:1e:1e:29:34:1d:b7:64:8b:21:ea:40:de:
75:d8:8d:ed:dc:74:20:ec:f4:14:86:8f:bc:de:f5:bb:a4:73:
7e:99:55:19:6e:ad:30:54:a5:8a:1a:7b:15:b8:8e:69:ec:0b:
22:0b:42:13:e3:6b:3d:25:db:93:70:90:0b:59:63:94:59:e4:
91:cf:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:16 2025 by rpki-client