Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: 0/FaYFqiRKM4yrISHSjeJFyFnLFQMRWDJVW+oJVaNzg=
Subject key identifier: 7C:1C:D9:A0:39:A0:41:62:AD:A1:E5:E8:E6:1F:6C:A1:A9:BD:ED:76
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019897130EE0E8729C3B1505496F0A6772C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 0DC3
Signing time: Mon 11 Aug 2025 03:01:05 +0000
Manifest this update: Mon 11 Aug 2025 03:01:05 +0000
Manifest next update: Tue 12 Aug 2025 03:01:05 +0000
Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: Q/snsaFwZmltoNVw6qd25c1X1DTzFoGjVOsuBV6tPOw=)
4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:0e:e0:e8:72:9c:3b:15:05:49:6f:0a:67:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Aug 11 03:01:05 2025 GMT
Not After : Aug 12 03:01:05 2025 GMT
Subject: CN=7c1cd9a039a04162ada1e5e8e61f6ca1a9bded76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:b8:69:21:dc:29:58:62:c2:6a:e9:e5:07:
6f:22:32:d0:43:1f:d7:98:73:75:b9:98:fe:87:c2:
0a:ee:aa:68:a5:5d:b6:f3:e9:2b:21:9f:c4:f4:69:
65:07:5f:52:86:e3:6a:eb:79:18:06:51:a1:f1:9e:
fa:60:27:72:48:79:3d:59:76:d3:d4:97:7d:23:7a:
5e:97:05:eb:c2:63:6e:f7:88:64:75:99:46:1c:62:
2c:a7:88:c6:7f:02:a4:09:bf:80:58:42:e5:53:71:
eb:c4:00:b1:27:86:19:84:8d:90:7c:7f:be:47:28:
31:ba:33:41:81:a6:86:d8:91:91:10:76:9f:38:87:
c5:0b:a8:8b:4a:a2:8f:01:b9:1e:e2:09:fa:fa:62:
b8:d3:69:44:43:25:0e:7f:4a:b3:99:2d:c4:d8:f0:
e5:e1:9c:d7:16:ca:df:82:30:61:87:c6:92:a4:0a:
34:7c:4c:7d:92:67:1d:d7:4f:bb:0f:e6:cc:c1:48:
02:8d:78:16:94:99:93:35:89:42:6b:90:de:54:46:
eb:59:f3:67:ea:15:0e:da:e0:15:6b:df:a7:24:e2:
f7:9b:d0:2a:0d:a9:05:f2:5e:00:12:2f:97:43:e9:
66:b4:06:0c:1c:72:ca:4d:f3:4e:72:7a:3f:28:e1:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:D9:A0:39:A0:41:62:AD:A1:E5:E8:E6:1F:6C:A1:A9:BD:ED:76
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:10:dc:4c:cc:08:97:ba:35:3d:ad:3f:4f:32:4f:a4:9d:9b:
e5:c2:f6:d2:b0:2f:b4:86:d8:60:a1:44:0f:24:b6:7b:93:43:
12:23:5f:f3:28:eb:a4:6d:10:89:30:48:7f:f9:fd:d2:24:b1:
58:1d:30:8d:c8:28:69:0f:4f:5a:3e:2a:46:a2:d6:66:23:5d:
e7:e0:3b:c9:b1:09:f1:65:e1:97:b2:d5:75:62:85:60:f1:2d:
e3:a1:5b:11:9b:60:f2:b8:6d:0e:a9:ef:2f:3b:ad:36:9a:ca:
78:d5:9f:55:a7:d1:cb:3f:fa:ed:72:cd:bf:50:d6:b3:a9:74:
24:92:59:e4:51:0c:2c:a8:27:5b:e6:3f:fb:bd:ee:62:1c:ed:
10:de:48:14:7d:4d:97:dc:a0:4a:37:9c:55:c1:67:9f:3b:9c:
b7:3e:87:ca:2b:36:d7:d2:f7:30:7b:45:37:3e:0a:50:4f:bd:
f2:f3:b9:52:34:10:98:ee:0b:fd:11:2d:76:8c:7d:cf:7d:9a:
b5:77:4c:89:8d:56:5e:b1:7c:1e:33:eb:ae:dd:05:12:e5:6f:
a7:9b:43:a8:4a:89:d7:14:9b:e3:e4:8c:35:3f:dc:63:ef:eb:
93:8d:0d:b9:90:5c:d7:c1:ec:42:d8:47:1e:63:13:b1:0c:14:
f1:d3:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:49 2025 by rpki-client