Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: qJF8bNVZ94HlbdydD7vBjyb1TJpybQfhSrsy6Qh0A9Y=
Subject key identifier: 5A:FF:BB:62:E5:E4:D4:30:C7:7E:2E:8D:44:D6:E3:F8:C6:5B:4B:FD
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 0198752BDC8B3C4D157528592F58B7ECB940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 13:01:05 +0000
Manifest this update: Mon 04 Aug 2025 13:01:05 +0000
Manifest next update: Tue 05 Aug 2025 13:01:05 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: ByHKdv7TzdwsqEc5g36GqKzmIXQDGgrIcali7f8ksvs=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:dc:8b:3c:4d:15:75:28:59:2f:58:b7:ec:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Aug 4 13:01:05 2025 GMT
Not After : Aug 5 13:01:05 2025 GMT
Subject: CN=5affbb62e5e4d430c77e2e8d44d6e3f8c65b4bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:c2:98:27:64:fa:c5:4c:cd:94:9b:b6:26:
ed:b4:1a:19:1d:d8:f8:0d:e1:d4:70:ec:e5:f1:8b:
22:cb:97:dd:4c:f4:56:48:ce:11:48:43:af:c6:f2:
cf:d8:67:b7:96:36:66:85:25:b6:5d:ea:7a:6f:c7:
b1:75:b7:d4:4e:9a:8d:73:46:a3:37:7e:3f:e8:2c:
94:83:b0:8f:51:0c:3b:8d:26:3b:95:8b:18:57:13:
48:9e:a2:b5:44:e3:88:b3:e1:19:6b:98:1e:66:6c:
1c:41:eb:f5:86:2f:46:74:aa:f6:96:29:0f:85:f3:
f7:37:ab:b1:4b:76:6c:a6:c9:e2:2a:e0:0f:61:37:
54:6e:83:d8:21:86:b9:5e:6e:38:ea:15:9c:44:bd:
2c:14:2e:11:73:94:7f:18:dc:1b:29:2a:cf:c9:b4:
fc:fc:c0:e8:98:7a:fe:e3:2a:06:54:78:a7:45:36:
d7:3b:94:c2:42:ef:01:13:13:e1:c1:8f:7e:eb:bf:
bc:4e:44:39:a9:3b:c2:10:95:f0:2c:0e:89:bb:f9:
82:ca:ea:90:3a:c0:a4:50:bb:3b:2f:79:22:c8:66:
12:65:b9:0e:11:ef:13:c3:e1:b9:ea:74:78:3c:98:
2e:10:31:26:a4:f5:b9:60:86:56:a8:3d:b4:29:46:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:BB:62:E5:E4:D4:30:C7:7E:2E:8D:44:D6:E3:F8:C6:5B:4B:FD
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:50:83:8f:16:44:ae:68:e5:5b:f0:70:80:74:1d:81:ea:e8:
bf:e0:ca:d7:18:b9:8a:40:77:4b:9c:e1:89:39:ba:ae:e3:30:
3a:c5:c6:26:ca:76:cc:d4:3b:8d:d9:c4:04:ff:c0:4e:4f:af:
98:7e:b7:5c:ac:c4:70:46:a9:6c:52:3a:d3:86:04:b4:75:b5:
39:85:a0:cc:0e:8e:bf:71:38:b0:22:49:73:ce:47:db:a6:a2:
f1:7b:78:1b:28:46:40:ed:ba:a3:36:31:e3:b0:f3:90:bc:87:
a5:7a:88:9d:a4:c1:b0:ed:7a:d6:9d:5e:8b:a4:8a:4b:35:cf:
0e:69:6f:85:f3:a7:da:69:2a:7c:b6:67:04:d9:c1:76:a0:33:
8a:39:8a:f5:50:bb:fe:7a:70:f6:5f:95:a6:f6:66:72:a5:6f:
5e:9e:5c:83:f4:36:1b:96:92:65:12:51:30:e7:b4:b5:77:6f:
1f:89:fd:f1:c2:62:e4:65:ae:a1:86:05:72:0a:5d:62:a7:15:
11:ae:66:d3:b8:ab:d9:ed:fd:c7:53:f7:f3:8f:61:b7:8d:eb:
06:1d:79:21:55:05:cb:63:2f:e4:b3:18:75:5c:ad:ac:e4:e1:
34:2e:f6:54:98:26:dd:97:02:c3:9f:df:bb:97:6b:50:0d:ee:
b6:5d:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:05 2025 by rpki-client