
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File: Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier: dZ/c8zOB+SdH6ipkPIGHcd/N4IAe44VScrKgHAEVz8I=
Subject key identifier: 51:21:09:AB:CD:01:BB:9B:A0:13:24:30:DD:37:76:BD:FB:96:19:56
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer: /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial: 019873741B2B42161EA85074554E46BAAD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number: 131B
Signing time: Mon 04 Aug 2025 05:00:45 +0000
Manifest this update: Mon 04 Aug 2025 05:00:45 +0000
Manifest next update: Tue 05 Aug 2025 05:00:45 +0000
Files and hashes: 1: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: dvQMEmZ3pJ9qJ1SUiY6ETVr9O3Rg3y5Nrs3+DUa0GWE=)
2: uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa (hash: EwwfvCJkfqVqVmU0gYHOqumHmaTFzwTDUQGR86XAOZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:1b:2b:42:16:1e:a8:50:74:55:4e:46:ba:ad:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Validity
Not Before: Aug 4 05:00:45 2025 GMT
Not After : Aug 5 05:00:45 2025 GMT
Subject: CN=512109abcd01bb9ba0132430dd3776bdfb961956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:89:37:41:d4:53:78:5a:c9:f2:e3:45:22:
2c:9b:b4:b8:d7:f1:44:46:36:8a:4e:fc:cd:a9:43:
8e:a5:4b:50:3c:57:fd:a5:c1:30:9c:f4:3e:f0:a8:
5d:57:e8:51:ad:b7:32:90:17:cf:6e:83:7c:2f:71:
ec:8f:25:76:0a:4e:6b:84:80:67:75:ce:41:1a:96:
4f:f3:fc:5a:1e:c6:48:d7:28:35:e1:f7:d1:d8:dc:
6a:09:bc:c8:92:bc:50:34:52:44:e7:26:1a:f9:05:
d1:1f:e1:f1:13:61:8f:9c:8f:da:58:a4:35:1c:ab:
e4:32:ef:0d:9f:d9:2c:3c:9d:63:01:34:9a:06:33:
25:6d:6e:b1:80:e0:34:d9:30:cd:f4:2c:22:d9:de:
b2:02:81:06:dc:c0:1b:09:f1:9a:af:c3:a1:bd:4d:
14:7e:69:ea:e1:a9:ab:6f:87:34:01:73:ff:ba:d4:
7b:c5:22:33:df:89:4a:e7:56:63:dc:b8:e4:44:9d:
6b:27:8a:81:34:29:74:a1:de:e6:35:9a:dd:79:4a:
fb:63:b3:72:be:2a:01:51:53:7d:12:84:85:77:31:
c8:50:27:7e:0a:47:26:2f:54:fd:f9:bc:a0:f3:7c:
85:e2:db:ab:29:ab:77:04:ff:01:1a:e7:60:3b:6a:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:21:09:AB:CD:01:BB:9B:A0:13:24:30:DD:37:76:BD:FB:96:19:56
X509v3 Authority Key Identifier:
keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c8:97:e2:4b:0b:c3:33:ba:51:97:98:37:0a:e5:3e:ff:68:
20:22:67:39:3f:30:b8:16:7b:57:84:e8:55:79:3b:ba:33:f5:
c2:05:e1:2d:f9:fa:22:44:95:a8:d0:5d:6b:20:18:6f:9f:82:
ad:65:23:bc:16:6c:02:90:a0:75:32:16:fa:24:ef:25:4e:25:
f1:74:5e:39:10:9a:6b:83:15:15:51:0b:4c:82:2a:c1:9b:ac:
a0:ab:2e:ee:e3:92:ec:a3:56:f7:0f:dd:48:df:34:ed:88:a4:
c1:96:86:49:f1:88:9a:a6:82:0d:2f:01:9c:32:33:b2:de:2b:
8a:77:46:b4:2e:5c:3f:69:18:2f:a4:21:01:22:12:e1:1f:b4:
bb:73:d0:4a:28:c9:28:59:aa:1c:1c:dd:f0:b5:51:3c:dd:e7:
4a:36:35:8b:69:c4:78:9b:db:89:b3:79:05:87:c4:64:c9:ae:
e9:2b:5b:ca:2a:62:83:31:3a:07:a3:58:3e:93:1b:08:1d:de:
99:26:11:9b:0a:1d:ba:47:10:29:20:9c:79:a4:9a:28:ae:a4:
07:ea:69:de:f5:75:c5:6c:e1:da:03:52:e5:d7:a0:ba:c0:45:
30:3a:49:7c:de:66:06:5c:e9:15:20:9e:22:d1:54:62:4e:8f:
93:d7:b1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:59 2025 by rpki-client