Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: gd8pkMIgNPL4jxiTU5ugAvblF8Fpj+JetB1sHjQWmYw=
Subject key identifier: EC:C6:9A:7E:40:68:57:06:98:93:7C:7D:14:C8:3E:61:02:25:14:A8
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 019873E2A7759C24198F061A45DD774B8916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 1547
Signing time: Mon 04 Aug 2025 07:01:30 +0000
Manifest this update: Mon 04 Aug 2025 07:01:30 +0000
Manifest next update: Tue 05 Aug 2025 07:01:30 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: H1KDkc924Q+IP6axuzFDHwrIpNa+P8DNCoRGNuqJbyg=)
2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a7:75:9c:24:19:8f:06:1a:45:dd:77:4b:89:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Aug 4 07:01:30 2025 GMT
Not After : Aug 5 07:01:30 2025 GMT
Subject: CN=ecc69a7e4068570698937c7d14c83e61022514a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:05:39:69:e7:d5:98:bb:b0:72:b6:a9:21:
2a:b2:cf:c9:99:e9:cf:d4:a2:2f:5e:c0:40:0c:6c:
52:d1:7c:6f:5d:1b:09:f9:13:b1:7f:87:29:6f:58:
64:1a:97:75:2a:ca:d3:27:07:d4:a2:e1:19:81:19:
75:71:69:91:5d:76:5e:7d:5f:1c:44:76:d2:22:34:
77:c7:27:25:28:a0:d5:ba:3e:2b:01:1e:fb:3c:f7:
02:f3:67:3d:fc:ca:fe:16:f2:ed:15:e8:17:9f:42:
23:78:45:12:54:a7:40:65:36:a7:21:a3:8a:f2:12:
f1:9e:22:fa:86:38:b5:56:62:7f:fe:14:26:45:e1:
bb:82:43:de:e4:fc:d6:5e:af:9e:ce:9f:c3:bc:a6:
f5:25:b3:7a:ec:e3:4c:79:01:80:01:41:7f:fb:91:
bf:24:e1:82:e9:6c:2c:3f:99:46:97:a1:a8:a1:93:
d4:60:47:f2:61:da:80:d3:db:ce:4f:03:26:38:78:
62:e1:9f:87:d1:0f:d3:47:a7:5c:90:33:8b:5c:79:
91:56:60:9d:5c:86:0e:86:12:ed:c8:f3:e9:0a:62:
8c:cb:ae:9b:81:36:3e:6e:6f:c1:84:a7:4d:6d:bf:
25:33:35:4f:67:f0:db:a1:7a:cf:37:b7:fc:b3:00:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:9A:7E:40:68:57:06:98:93:7C:7D:14:C8:3E:61:02:25:14:A8
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f2:2e:55:f3:3a:75:73:94:0f:72:6d:bc:c3:3c:f5:f9:84:
66:c0:ea:42:13:a1:6c:0c:5e:0f:98:b9:bf:64:a2:6f:c9:0a:
90:a8:6c:1e:8c:28:22:1a:56:13:24:90:de:d6:98:b2:ed:9c:
27:82:ef:a6:98:2b:6f:52:7b:52:4f:5b:de:52:c5:e4:f3:85:
31:75:12:52:78:93:60:7e:b4:1a:b1:54:61:db:14:6f:c6:c8:
9a:04:75:50:24:0b:bd:ec:0b:52:1a:68:0a:5f:4a:66:2b:68:
4a:d7:3e:d3:26:76:ff:ec:58:66:ad:2f:aa:d0:01:f1:8d:c0:
10:7a:a3:63:cd:6e:60:4d:26:20:f0:b6:2d:c4:ab:60:f6:53:
a8:6a:9f:46:66:2d:a0:5f:20:da:d5:e4:0b:3d:0d:a3:38:46:
6d:67:38:e7:3e:fa:da:ca:62:88:6f:8c:78:fa:f7:ed:d1:d7:
2d:39:96:b1:cf:69:d4:86:76:dc:35:23:fa:c0:09:55:6d:92:
52:3c:3f:34:9b:b1:c9:c1:f3:ae:35:d9:cb:de:73:ee:29:70:
b9:15:d3:dc:ea:fb:e9:bc:52:2f:20:1c:b9:75:b7:d6:84:c7:
c6:50:1c:d6:48:2d:7e:db:ce:c5:1c:cb:91:ae:aa:12:f1:71:
05:3c:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:12 2025 by rpki-client