Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: Dv5zdlSp2NCbae3S0BvnspPrsz0hvA7z1C5RTv1fZTg=
Subject key identifier: 20:D8:74:AA:25:9A:EA:BA:47:22:15:BF:FF:C8:60:F5:6E:2D:BD:01
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 01987DC14219FED717A7EAD734E3E6C4CD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0CA0
Signing time: Wed 06 Aug 2025 05:01:14 +0000
Manifest this update: Wed 06 Aug 2025 05:01:14 +0000
Manifest next update: Thu 07 Aug 2025 05:01:14 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: 2Q+hdR94p02gFfFDCqWtQwjhSOzKy4Ph3nWMrtMRG+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:42:19:fe:d7:17:a7:ea:d7:34:e3:e6:c4:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Aug 6 05:01:14 2025 GMT
Not After : Aug 7 05:01:14 2025 GMT
Subject: CN=20d874aa259aeaba472215bfffc860f56e2dbd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:16:b3:46:f1:55:91:8a:b2:9d:00:93:7a:
04:0b:ab:6e:a4:40:7e:93:4f:34:d9:ee:4b:61:aa:
02:38:e9:24:65:85:9b:11:a9:d6:3e:73:13:15:2d:
ab:72:f2:c3:84:ed:7d:b2:f3:d1:b4:d1:e6:cf:53:
c7:21:d2:a5:99:32:b7:ca:77:dc:64:22:6f:2a:62:
64:19:f4:34:ce:b6:4f:c9:9a:56:bb:3f:35:8b:d2:
93:f5:ae:6b:a5:34:de:71:1c:60:79:26:11:dd:18:
3b:f9:ee:14:01:2e:30:52:90:a6:ff:c9:b3:53:4b:
f9:0c:8e:e2:f7:c2:30:f6:a8:a6:f9:8a:ee:e8:c2:
83:85:bd:9d:07:be:b6:10:de:df:c1:46:36:ab:6b:
92:ad:6d:df:1b:8e:52:02:52:bc:88:34:62:eb:84:
cb:00:47:2b:c6:1b:68:4b:bf:03:70:a1:d0:8e:4d:
66:8c:14:73:6a:f7:89:6e:4e:68:c2:d6:bd:1a:96:
21:28:67:c9:56:39:ae:02:4f:0c:dd:6c:d8:4b:99:
48:ed:38:8c:29:0b:07:88:91:36:a1:13:d2:cb:d5:
26:46:ab:e1:fe:b4:19:0d:55:52:26:32:04:61:4f:
82:3b:90:96:0d:f5:48:76:68:f6:25:10:9d:df:8e:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:74:AA:25:9A:EA:BA:47:22:15:BF:FF:C8:60:F5:6E:2D:BD:01
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:19:e1:fe:73:4b:a4:79:70:bc:09:dd:8e:b7:f8:09:ee:0d:
c3:fb:c4:8c:2a:44:44:53:22:20:a5:39:0d:e6:98:d5:5c:8b:
09:67:1c:8d:5d:2e:53:e8:dc:d9:a2:37:1d:91:df:41:d4:92:
e3:de:67:ec:fa:10:9c:71:71:5d:0e:93:82:5f:51:b4:67:6e:
70:9b:d1:47:49:2c:87:a8:7e:72:ad:9e:3d:fe:b6:94:e3:3b:
3a:4e:77:0c:33:d6:46:db:42:cc:11:47:ec:c5:62:8b:fa:1c:
dc:d2:49:12:87:68:9b:47:f0:1d:c6:d6:88:c1:0b:87:a9:ba:
b9:bc:f5:38:34:0d:1d:83:ff:a1:58:a7:8d:14:56:e8:3a:ba:
38:81:82:06:eb:8f:79:b0:48:9b:e3:c3:ea:7d:c3:d1:b7:91:
fe:ba:af:9b:81:c2:a3:be:fd:03:d8:11:1b:6f:d1:0e:5e:1f:
fa:0d:d5:a7:4b:00:18:01:bf:c2:9b:33:92:e6:9a:19:d0:a1:
7d:a1:4b:fa:6d:3f:73:09:7c:be:c4:82:b2:54:48:d3:8c:6f:
34:f8:15:3c:d4:e3:18:58:c6:0a:c2:9d:e6:07:c2:cf:4c:2e:
c3:9f:2d:8a:44:e7:6e:dc:59:5c:f2:da:bd:d5:a3:10:ff:a3:
3a:51:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:48:59 2025 by rpki-client