Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: Q71OEHOSMrQ9T/8W8eUY6gDeKoybxCKCn51t6CYi7F0=
Subject key identifier: 36:81:BF:B2:D0:DF:3F:13:5D:6B:E6:97:F0:AD:92:24:36:74:FC:FF
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019896A4E71623FDF2173818FF5B79584F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 03C2
Signing time: Mon 11 Aug 2025 01:00:46 +0000
Manifest this update: Mon 11 Aug 2025 01:00:46 +0000
Manifest next update: Tue 12 Aug 2025 01:00:46 +0000
Files and hashes: 1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: F6eOO8jPLtuydUGCxqj9nFrttGKdUQe0UEF1Et8Adls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:e7:16:23:fd:f2:17:38:18:ff:5b:79:58:4f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Aug 11 01:00:46 2025 GMT
Not After : Aug 12 01:00:46 2025 GMT
Subject: CN=3681bfb2d0df3f135d6be697f0ad92243674fcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:72:c9:df:2d:96:11:28:2a:02:95:28:50:
49:8a:7d:ed:9c:fc:86:59:07:e9:9a:ae:2e:97:47:
94:9d:5f:c6:6e:1f:72:7f:53:49:ea:50:d2:e0:57:
09:87:0d:e0:a0:1c:6c:b0:00:31:51:35:88:2d:04:
ba:9c:32:9b:e8:37:4d:03:40:c2:b3:b4:ca:91:c5:
da:c1:56:4e:cf:18:60:e5:57:f8:7d:82:1a:13:13:
81:c1:20:ab:73:a9:3c:eb:2e:71:35:dc:74:0c:9a:
6c:57:bd:77:9a:eb:13:d2:08:6c:20:89:a7:71:52:
45:27:72:78:9c:2e:84:67:53:f4:74:4e:84:d4:b5:
d8:89:54:a8:5b:45:a1:ae:b0:9a:74:1b:fc:db:d2:
4b:c3:98:3d:27:65:5f:01:79:1a:72:52:d8:66:59:
a0:b0:dc:3d:65:92:2b:9e:39:9e:2d:7a:71:d6:9b:
7a:8d:12:74:b6:53:60:ad:27:5f:9d:83:7e:c5:e1:
67:e1:80:43:ec:ef:99:c4:7f:a3:f6:02:33:71:e8:
4b:17:f4:ce:26:39:78:60:fe:10:c4:fb:f3:26:fe:
50:0e:cf:14:52:b2:46:1c:32:e6:ab:05:63:de:c3:
2d:07:34:92:ff:4d:9c:2a:fe:c8:15:a0:c5:ba:a2:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:BF:B2:D0:DF:3F:13:5D:6B:E6:97:F0:AD:92:24:36:74:FC:FF
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:38:80:80:88:4d:bc:d0:d9:db:bd:3c:82:e6:e1:89:ca:05:
04:84:dd:97:29:b6:f7:8e:b8:b1:22:ef:9f:9b:9f:02:90:d2:
d5:d6:51:48:cd:d0:d9:29:80:96:f1:2c:6a:d4:ed:27:8d:a1:
d6:0e:69:4b:61:04:3a:c0:b7:32:91:48:3d:23:ea:0b:fd:1a:
f9:43:2a:1e:c7:23:0f:9e:63:0a:7b:2d:3f:67:7d:55:bd:7d:
14:bc:54:5c:93:a5:c5:e9:7a:0a:b0:32:7b:ba:53:3f:dd:da:
b5:6b:d3:86:db:ae:b9:23:59:26:7b:be:97:31:cd:cb:1b:78:
65:83:3f:fd:be:c6:ec:cb:76:c2:7e:0e:28:fc:c4:ac:0e:8e:
d0:c1:3c:f6:a4:ed:f0:3f:8a:52:3b:4e:3d:d2:a4:a2:57:d7:
48:85:93:9f:6d:f9:57:71:8d:47:b8:03:fc:72:9e:e7:1e:74:
3a:4a:f4:e9:32:4c:15:33:9b:71:10:3e:90:e7:dd:cf:c4:a6:
e9:50:0d:97:e3:26:11:fa:0b:ce:fe:bc:87:a4:7c:ac:60:ee:
ec:4f:1b:36:c3:57:00:35:8c:2c:e7:1d:1e:a8:cc:9d:0c:97:
5e:da:98:42:83:29:d3:71:c1:10:70:3d:3a:50:b7:03:55:fa:
96:aa:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:14 2025 by rpki-client