Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: XMEA+ZVKcHKv5LKXotOGpDkSTZm4ngl3TxfZpCiD8To=
Subject key identifier: 45:13:49:A2:4B:AD:11:DD:65:9E:0A:6E:94:D2:A2:83:F0:D7:3E:BF
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 019897807061BFF313EEC38F6301853634D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 05:00:33 +0000
Manifest this update: Mon 11 Aug 2025 05:00:33 +0000
Manifest next update: Tue 12 Aug 2025 05:00:33 +0000
Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: b3RwrH7ksUIDSH/ds7VyZIrqrv8U14TpjZBNqRg7mfw=)
2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:70:61:bf:f3:13:ee:c3:8f:63:01:85:36:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Aug 11 05:00:33 2025 GMT
Not After : Aug 12 05:00:33 2025 GMT
Subject: CN=451349a24bad11dd659e0a6e94d2a283f0d73ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:13:ac:df:50:ea:a6:01:c1:b7:e9:72:f2:
ef:b8:84:70:82:35:a7:88:aa:36:42:4f:64:92:64:
dd:aa:34:8c:4c:f4:b7:cf:7c:7f:b1:ee:78:4b:3c:
91:81:e7:f1:a8:3f:c3:20:0a:e6:ca:69:06:a7:a5:
8f:99:c9:ca:d6:cb:87:52:33:f8:0f:37:d3:fd:02:
0e:b6:65:af:70:4e:83:1a:d3:eb:eb:91:10:b5:ca:
78:4b:e3:9a:85:2c:b9:9d:79:ba:19:71:cf:55:53:
65:13:91:fe:07:86:bb:19:38:53:88:ca:54:51:83:
84:af:e9:85:f5:28:eb:7e:b9:ab:6b:ec:97:06:5d:
30:6a:a8:12:01:6f:a2:06:4b:af:de:9d:87:02:f8:
58:58:f9:d6:4e:8c:bd:2e:07:43:1d:d9:80:5d:4c:
e4:e1:1a:14:4c:ef:59:1a:a6:21:15:11:b5:c8:1b:
af:c0:ff:1a:78:35:88:26:02:db:81:17:56:1b:e4:
3c:4b:cb:49:32:8b:71:56:8d:a3:a7:6b:2a:72:37:
d2:e4:c1:ae:21:87:e2:96:46:e6:07:51:31:69:60:
30:bc:1d:59:a6:38:18:51:2b:e0:e7:bb:0c:37:6b:
7b:80:8a:95:9b:24:31:f8:dd:d9:e3:6e:74:38:27:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:13:49:A2:4B:AD:11:DD:65:9E:0A:6E:94:D2:A2:83:F0:D7:3E:BF
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f1:ef:04:4d:31:86:33:e8:0b:f1:91:c8:b8:ae:65:58:29:
a7:2d:96:1c:99:13:a8:91:a5:ab:6c:1e:24:68:2e:d8:e4:40:
3c:c3:ea:7a:d3:6e:c4:66:07:d2:c7:a3:c6:8f:58:f4:f8:f3:
dd:96:da:c7:19:b4:a8:73:d3:f7:82:5e:b8:21:ab:56:66:83:
99:56:32:c3:82:02:94:9a:40:ec:53:78:9c:ad:8c:ab:36:d0:
95:3c:c7:fa:b8:cb:6a:07:4b:68:3d:d1:2c:12:5c:b9:75:c6:
df:15:00:e2:d1:8b:cf:a5:e9:29:6c:f3:16:b5:b4:52:2d:0b:
0f:b4:f3:ce:45:5e:e3:79:84:28:59:3e:7b:83:07:72:df:78:
27:13:6b:2a:2c:56:9b:0b:af:4c:fb:de:44:ed:49:45:78:bc:
91:ba:aa:9d:af:a6:57:5f:2d:8d:90:5a:93:14:b2:2e:f1:27:
a7:ca:bb:6f:31:f8:ed:31:0a:24:6a:0a:0a:01:ab:2c:b8:ab:
fd:7e:f5:e6:9b:58:7c:e0:b4:8a:5b:95:b0:0c:26:f8:fc:f0:
6d:41:41:9e:46:8d:c3:47:3a:ef:64:69:cb:fd:aa:ff:96:a8:
7c:54:e3:db:a0:b2:22:4b:b2:16:91:80:2b:2d:ed:4b:34:d0:
76:f1:70:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgHBhv/MT7sOPYwGFNjTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjQ5OGI3N2FkOTljZDM2ZTg3NmYwZTJmZWQ2OTk4MTky
YmM2MTIwHhcNMjUwODExMDUwMDMzWhcNMjUwODEyMDUwMDMzWjAzMTEwLwYDVQQD
Eyg0NTEzNDlhMjRiYWQxMWRkNjU5ZTBhNmU5NGQyYTI4M2YwZDczZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8TrN9Q6qYBwbfpcvLvuIRwgjWn
iKo2Qk9kkmTdqjSMTPS3z3x/se54SzyRgefxqD/DIArmymkGp6WPmcnK1suHUjP4
DzfT/QIOtmWvcE6DGtPr65EQtcp4S+OahSy5nXm6GXHPVVNlE5H+B4a7GThTiMpU
UYOEr+mF9Sjrfrmra+yXBl0waqgSAW+iBkuv3p2HAvhYWPnWToy9LgdDHdmAXUzk
4RoUTO9ZGqYhFRG1yBuvwP8aeDWIJgLbgRdWG+Q8S8tJMotxVo2jp2sqcjfS5MGu
IYfilkbmB1ExaWAwvB1ZpjgYUSvg57sMN2t7gIqVmyQx+N3Z4250OCeGawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUTSaJLrRHdZZ4KbpTSooPw1z6/MB8GA1UdIwQY
MBaAFGO0mLd62ZzTbodvDi/taZgZK8YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2It
OTdkY2RhM2EzY2E1LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2ItOTdkY2RhM2EzY2E1
LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovHvBE0x
hjPoC/GRyLiuZVgppy2WHJkTqJGlq2weJGgu2ORAPMPqetNuxGYH0sejxo9Y9Pjz
3Zbaxxm0qHPT94JeuCGrVmaDmVYyw4IClJpA7FN4nK2MqzbQlTzH+rjLagdLaD3R
LBJcuXXG3xUA4tGLz6XpKWzzFrW0Ui0LD7TzzkVe43mEKFk+e4MHct94JxNrKixW
mwuvTPveRO1JRXi8kbqqna+mV18tjZBakxSyLvEnp8q7bzH47TEKJGoKCgGrLLir
/X715ptYfOC0iluVsAwm+PzwbUFBnkaNw0c672Rpy/2q/5aofFTj26CyIkuyFpGA
Ky3tSzTQdvFw0A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:54 2025 by rpki-client