Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: 4r4Jr2eO4RjUSR3Nk+KioBM1sJ6pP2S2Zq8kpWx7bUI=
Subject key identifier: 0A:62:83:7F:83:B8:40:8C:EA:F0:F2:D0:5B:DF:B4:0D:2B:6E:00:CF
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019881686835196224CAB9552670B0CC1916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 22:02:39 +0000
Manifest this update: Wed 06 Aug 2025 22:02:39 +0000
Manifest next update: Thu 07 Aug 2025 22:02:39 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: M5VGXblb+LbBmR0UI5iFn8ASiLAhnsAIkgL0xiNhsQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:68:35:19:62:24:ca:b9:55:26:70:b0:cc:19:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Aug 6 22:02:39 2025 GMT
Not After : Aug 7 22:02:39 2025 GMT
Subject: CN=0a62837f83b8408ceaf0f2d05bdfb40d2b6e00cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:3c:35:ac:94:b3:48:ff:7c:1c:d8:bc:90:
24:62:5d:e0:e4:36:d5:d6:67:b8:b1:52:eb:4f:b2:
1a:c9:68:e2:37:31:e5:40:1c:bc:d2:b3:d8:cf:cb:
23:65:df:09:dc:f3:80:d9:61:5a:6e:2c:cd:b9:5c:
bf:d5:38:4a:6c:0b:f3:58:e5:e4:2b:46:19:42:90:
38:df:56:38:91:59:96:9a:d6:f2:cd:4a:3d:5c:2a:
bc:ea:52:d7:c1:bf:ee:9b:e0:5c:1f:a8:f6:5b:1f:
e5:c1:1c:18:97:57:53:f6:50:d5:1d:48:09:0f:67:
2d:0d:3e:41:13:77:1d:3f:16:d0:4c:9b:76:29:3d:
44:9b:22:71:28:59:9b:52:64:1c:b8:45:a8:e7:ea:
f6:63:91:c4:06:c1:0f:31:b1:65:52:17:13:6b:62:
d5:d4:a9:44:a1:20:6f:f2:78:eb:43:61:40:b6:1f:
a8:ab:61:69:29:eb:7c:29:88:72:dc:07:6a:64:b0:
55:20:e7:eb:c3:20:3a:5e:63:02:34:6b:27:e4:29:
75:d5:7f:1c:4c:b0:ee:0a:5f:d3:f2:bf:f5:b2:b4:
ed:90:68:37:ea:f5:97:cf:00:28:17:26:08:e7:2b:
7a:d3:ee:c8:02:27:fd:5d:78:15:3f:f6:44:0e:10:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:83:7F:83:B8:40:8C:EA:F0:F2:D0:5B:DF:B4:0D:2B:6E:00:CF
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:f0:8b:e8:a6:04:fe:ac:76:85:5f:ca:db:30:f6:80:5a:
2f:29:1f:ff:5d:31:4d:af:ef:bf:b4:71:79:57:7b:79:09:b8:
9b:70:b9:a6:af:aa:0b:27:3c:68:dd:b3:90:37:bd:9a:b0:8a:
83:69:f8:fa:66:11:bc:39:f6:36:8e:45:ad:7c:8a:e0:83:61:
4e:7f:08:e0:22:cd:57:ad:0a:dc:06:24:fe:09:69:a7:c0:3c:
25:24:66:90:15:9a:89:58:3b:b2:9c:cb:84:c6:db:02:88:75:
61:e7:66:b4:50:de:dc:95:d2:fa:44:50:b3:61:b4:a3:dc:5f:
d9:e9:a0:fa:b4:90:15:72:db:8b:a6:95:4e:78:f7:38:5d:9a:
1a:42:17:31:55:78:ae:54:45:eb:f9:49:08:4d:06:2b:2b:69:
ed:77:ca:35:3c:52:c4:dc:f9:e7:2b:ac:f8:84:e7:43:0a:b4:
88:7f:19:d6:7b:1c:d3:77:f2:9c:e5:10:30:5f:87:59:40:60:
17:60:af:c9:8c:4b:0a:2f:a3:0e:78:06:f9:ad:2e:4c:f6:b7:
b2:af:ba:73:70:0e:27:4c:a5:93:fa:bc:3c:81:7d:e0:ea:c5:
86:5c:19:25:c0:31:e1:a4:d8:15:f6:59:d6:98:17:53:d1:da:
96:ac:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:04 2025 by rpki-client