Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: h3egH6QgVKFZfS4REvJrfOeFSLFHTbzzPJa4Vxf7MrQ=
Subject key identifier: CD:04:23:33:BE:08:17:DD:E3:90:AF:67:24:D0:C9:5F:11:A9:D8:87
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 01988C8F7931172A3C459518420DAB8E6BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 02:01:09 +0000
Manifest this update: Sat 09 Aug 2025 02:01:09 +0000
Manifest next update: Sun 10 Aug 2025 02:01:09 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: TlauKomF4nkOJVhrjduf6K7/6yAhl4XPCdYtzS0ZZ80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:79:31:17:2a:3c:45:95:18:42:0d:ab:8e:6b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Aug 9 02:01:09 2025 GMT
Not After : Aug 10 02:01:09 2025 GMT
Subject: CN=cd042333be0817dde390af6724d0c95f11a9d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:15:6c:79:87:fe:53:e3:70:33:c3:9e:19:
9f:8b:9f:a9:c6:28:a3:c2:8e:f4:1a:5d:ec:24:1b:
e7:c8:27:b0:c4:0e:3c:af:73:22:e6:ac:14:27:8e:
29:f1:71:d2:90:65:08:e6:06:ef:54:1a:74:4b:c8:
e0:6e:15:a0:65:c6:40:39:b9:9c:f1:93:0f:da:61:
a7:74:ab:5b:bf:9f:2c:61:2f:96:f0:f5:45:70:32:
2e:ac:43:2d:38:b4:38:6f:dc:81:38:ab:f0:a3:0e:
4e:45:c1:ff:1d:4a:66:b4:e9:67:2e:6c:03:dd:16:
1d:72:85:00:62:a1:d2:45:bb:2d:c1:e7:69:c0:ba:
57:b9:1e:ce:f9:ee:66:86:5c:71:7d:da:63:71:3b:
5c:81:26:00:76:61:ea:82:4f:a3:db:3f:86:11:6d:
96:58:34:0a:0e:78:31:be:5c:a4:07:1d:8f:ec:37:
08:5f:05:e3:c9:b5:f6:bb:01:e8:86:b5:f5:55:b5:
be:91:d5:2d:f4:f9:ab:e1:ea:20:51:81:54:58:e4:
9d:62:38:6f:88:51:07:fc:5c:d6:d3:10:59:38:c9:
cf:34:8e:ca:8f:1c:90:8b:41:02:a1:14:f5:37:92:
56:cb:5f:a7:c2:4f:0d:de:44:e3:c7:0d:4b:cb:36:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:23:33:BE:08:17:DD:E3:90:AF:67:24:D0:C9:5F:11:A9:D8:87
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1b:25:84:7b:35:ea:45:90:e7:9e:1d:de:d3:83:9d:4b:14:
f8:fd:c9:e5:96:73:d4:aa:56:f2:4b:a2:d0:2c:90:10:a8:e8:
44:d5:07:fb:da:38:8d:7e:97:28:30:61:ae:34:7b:4b:cc:17:
36:4b:68:93:fd:d9:48:6e:47:d0:9b:ce:9b:09:b2:0c:1b:73:
1c:37:71:75:38:f4:1e:36:03:36:54:79:c0:10:ef:f2:7a:89:
c4:ea:47:d8:3a:28:7f:7b:fd:0d:a1:b7:df:98:df:60:e8:35:
dd:d0:34:48:2a:8a:ee:1b:23:47:49:90:c0:31:e4:f3:49:6f:
43:22:c8:e2:cf:12:e5:f7:f7:11:4b:db:71:c1:2a:98:45:0b:
f6:46:7a:c7:fa:09:84:4f:08:5c:5c:ed:c4:e2:73:0b:2e:ee:
83:14:1e:cc:00:ca:11:21:7d:cd:f4:b4:a6:4b:da:af:66:94:
d3:ff:32:71:3f:b6:eb:f9:2a:26:6f:24:fe:85:86:76:00:a3:
81:86:0f:5e:38:34:f4:90:6d:e0:c0:d8:e6:e5:91:d8:95:04:
e4:c2:b9:b6:4d:52:1a:a0:ea:48:f1:ba:ac:fd:db:a8:a1:6a:
87:4f:b2:f9:a1:dd:1b:ab:1f:b9:e0:5d:da:cf:8d:54:5a:52:
52:b4:26:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:03 2025 by rpki-client