Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: qrocMBc6Hg3F9QFvWWtLorZNdw/McmUBH5uGf9ga7Ag=
Subject key identifier: 8A:1F:DC:B8:6D:38:EC:F5:4F:42:46:96:F7:3F:07:54:9C:6C:F1:47
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 01988D33C6F2219CE8FA2B10B3DE27623489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 05:00:37 +0000
Manifest this update: Sat 09 Aug 2025 05:00:37 +0000
Manifest next update: Sun 10 Aug 2025 05:00:37 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: lZh485tIV0RD6TulDoVWHWXZO+m2XzLWLRuBlUFyqUQ=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:c6:f2:21:9c:e8:fa:2b:10:b3:de:27:62:34:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Aug 9 05:00:37 2025 GMT
Not After : Aug 10 05:00:37 2025 GMT
Subject: CN=8a1fdcb86d38ecf54f424696f73f07549c6cf147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:15:b5:8c:09:ab:61:1d:5c:33:81:5f:23:
7a:6f:39:33:82:00:b7:58:22:fc:7e:a3:a4:06:06:
a6:86:c4:82:49:41:43:b3:73:7c:fd:60:b8:da:6d:
8f:10:27:59:e7:6a:8c:c0:ec:04:9e:9a:ef:4f:f1:
d0:6c:25:b1:80:bb:25:00:aa:fb:b2:6b:bd:1a:84:
79:12:f1:1e:38:dd:67:a9:f4:66:49:bc:93:ce:52:
24:ae:be:88:1c:a4:aa:cb:8e:83:5c:76:78:af:59:
71:a9:12:e2:4e:0b:e7:0f:d4:c7:d3:e4:5c:6e:d1:
36:59:e0:a3:e3:a0:75:de:ab:a6:80:18:46:75:d0:
1f:3d:2a:51:d9:93:55:a7:6d:63:5a:f0:5b:eb:b8:
d1:e1:0b:4b:2a:4a:8f:86:e9:f9:78:74:ba:29:9c:
e4:d1:e5:af:93:d9:e0:0d:c7:96:a2:70:34:9d:2c:
7b:95:f2:76:e3:d6:49:9c:03:5a:0b:c7:53:cf:15:
04:e8:06:92:f5:ac:e8:16:c3:29:15:43:6a:6f:72:
c1:cf:c4:99:3c:dc:47:83:5a:69:ed:23:6e:bd:6e:
2f:19:40:b2:1d:19:17:2d:4e:82:49:25:a2:e7:69:
b5:5d:b6:f9:41:49:4e:7c:b7:69:35:b2:20:d2:22:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:DC:B8:6D:38:EC:F5:4F:42:46:96:F7:3F:07:54:9C:6C:F1:47
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4d:59:b7:72:6e:33:c6:6e:55:50:46:75:f2:62:6c:9c:b2:
34:2b:b6:6d:c4:7e:9a:5f:b7:d0:6f:98:5a:32:4b:eb:3d:cd:
4b:e3:d8:8e:dd:02:cd:b6:83:42:2d:18:9e:c7:2f:2d:d7:57:
e7:dc:5f:4b:e9:73:97:33:ed:ed:05:fa:17:ee:ff:aa:c9:6f:
8e:da:d2:d9:2f:50:d0:84:ac:46:bf:f6:4a:a4:f5:e2:3e:71:
7b:4c:e5:1f:0b:e1:a7:33:7a:3c:06:b4:6a:9a:24:ff:41:a2:
76:ba:18:db:65:27:8c:d1:78:6c:e5:16:5d:61:0f:24:dc:65:
11:63:94:6f:ce:bc:4b:e6:89:7b:66:e1:41:43:1d:78:4a:ad:
f1:b6:9c:97:54:ed:ea:2b:22:af:cb:5f:8f:b8:17:c6:87:da:
07:15:e6:2d:fe:87:4e:ae:b7:4f:48:8b:74:33:ac:2b:f8:ed:
27:3f:48:17:17:44:7d:e6:9c:c8:4a:43:38:64:9c:0e:71:bc:
5d:1e:58:48:77:5a:28:36:af:fb:a2:ac:c5:3a:d9:07:89:df:
15:82:23:82:d9:e8:53:e7:e8:f7:9f:af:ac:b5:c3:ba:e7:10:
35:8c:6c:30:48:c1:7e:85:37:48:fa:e4:c9:63:75:15:14:10:
9c:14:47:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:31 2025 by rpki-client