Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier: v3xHvvBf09VoQrTFsh7upHjjMMrJ6/kUCZJCYz4zleQ=
Subject key identifier: 37:38:E2:A4:19:E8:76:32:1D:61:C6:D1:55:F1:4D:79:90:E9:9D:DC
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 019889574797D4CCA4A119544D2434AA5D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 11:00:55 +0000
Manifest this update: Fri 08 Aug 2025 11:00:55 +0000
Manifest next update: Sat 09 Aug 2025 11:00:55 +0000
Files and hashes: 1: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (hash: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=)
2: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (hash: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=)
3: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: sY8DapFx9VALWLSj10gcrKQaXoN02iFP7C46OJecDSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:47:97:d4:cc:a4:a1:19:54:4d:24:34:aa:5d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Aug 8 11:00:55 2025 GMT
Not After : Aug 9 11:00:55 2025 GMT
Subject: CN=3738e2a419e876321d61c6d155f14d7990e99ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b9:8d:5d:d6:a8:59:fa:76:a6:0c:2b:76:72:
45:3f:90:91:db:0b:59:73:80:82:b0:d1:6c:75:d0:
41:69:df:af:1f:59:fb:ca:35:b6:40:8f:b1:3d:4a:
8b:0b:ee:4b:80:c5:61:e1:5b:ac:db:60:16:b2:11:
9f:df:39:7d:5a:cb:e1:4b:26:c6:dc:f3:30:d7:d0:
b1:be:97:bb:5f:2b:d4:3f:82:ce:47:e9:5a:ed:83:
85:a9:b2:fe:c5:26:4a:de:71:90:c6:f6:22:20:bc:
b8:4b:80:c9:97:6b:f5:ea:10:da:41:74:7f:42:28:
61:e2:50:81:d2:58:83:b9:a7:9e:e2:6f:e9:f8:cc:
22:38:52:a2:ce:f6:39:c1:77:2c:44:6a:2d:f8:d7:
39:c7:cd:af:0d:2c:c5:59:03:bb:05:17:0a:c2:9b:
4b:94:3f:98:b3:d3:56:48:c2:40:07:a8:10:9d:88:
05:e5:03:0b:11:e9:be:0f:a9:ee:d1:b7:65:f2:5a:
f1:d9:2a:34:84:94:1a:d2:69:f6:04:f8:6c:60:1e:
13:c8:7e:d5:4d:cb:2f:05:e5:af:95:6f:6a:80:42:
7c:3d:d5:d0:44:c2:17:56:20:99:4f:4b:fd:85:ba:
e0:7d:83:66:21:d6:fc:9f:0b:3c:5c:8a:dd:32:e7:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:38:E2:A4:19:E8:76:32:1D:61:C6:D1:55:F1:4D:79:90:E9:9D:DC
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d3:62:77:27:df:6a:a5:8d:f9:48:f9:85:dc:d5:a0:6f:5c:
c4:82:12:d7:5b:7b:1e:bf:3c:2e:0a:bc:93:e5:20:58:a0:97:
bd:6c:b1:d2:c0:2c:39:37:74:ea:bc:ac:25:f4:44:19:e0:79:
fa:b7:ba:24:30:68:46:b0:65:93:74:07:c1:90:8c:23:b7:63:
93:a5:ff:52:19:70:61:ae:8c:e3:5e:97:e0:00:2a:8b:c1:43:
72:83:1b:62:b7:3b:21:5d:d1:b8:36:ad:2a:75:08:db:0d:f1:
a9:90:1b:d2:73:e6:da:1c:b9:08:af:4a:af:d8:52:b5:6a:63:
74:4e:4e:c1:dd:eb:42:c3:77:c2:78:01:5d:04:c9:9a:99:04:
01:d1:2f:90:a3:df:0a:67:dd:ce:c6:a4:df:7a:09:b1:df:f0:
54:1a:84:90:c1:9a:ae:c1:f1:4f:55:2a:fb:a6:34:e9:05:56:
71:3b:93:a5:32:80:fd:29:f4:ad:fc:4b:30:e7:0c:85:66:8c:
08:92:8e:35:c5:d1:b3:40:69:5a:a0:3d:2c:64:8b:e7:ad:6f:
50:57:c0:1e:a0:c8:1f:56:42:69:f2:95:de:0d:0f:89:89:a8:
c0:34:09:02:54:a0:8e:1a:26:c3:74:4d:bb:10:ee:76:27:43:
56:b9:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:30 2025 by rpki-client