Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: 8myxv2dTk/2hboe2tlwb2UkoEl2felAzVKZtepQ5CSA=
Subject key identifier: C5:0E:47:F6:52:02:61:75:AA:88:8B:72:F1:A5:90:92:33:96:50:BA
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 01987562CFD7FA2F431D2FC51C1FFEA3F29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0775
Signing time: Mon 04 Aug 2025 14:01:06 +0000
Manifest this update: Mon 04 Aug 2025 14:01:06 +0000
Manifest next update: Tue 05 Aug 2025 14:01:06 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: Oz3QnhFGj5N3+KDQDwYK3p46vGEQhAZgMXGLRJD/dCw=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:cf:d7:fa:2f:43:1d:2f:c5:1c:1f:fe:a3:f2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Aug 4 14:01:06 2025 GMT
Not After : Aug 5 14:01:06 2025 GMT
Subject: CN=c50e47f652026175aa888b72f1a59092339650ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:25:41:af:5a:b3:57:01:b2:32:10:cd:62:19:
f6:18:e5:b2:dc:9e:85:e5:b6:63:0f:7f:39:8f:fd:
e1:d0:57:46:66:82:cd:f5:04:3c:52:f1:d7:1a:ca:
79:52:e8:44:b4:f0:79:68:f4:df:93:80:3b:07:df:
c1:01:aa:0b:b0:c1:64:c3:b9:65:d1:12:8a:9a:2f:
db:51:cd:b5:1d:31:ec:e1:8e:54:0a:52:cd:79:96:
7e:4b:a2:b4:f2:6a:82:ce:c4:ac:59:96:f2:57:7d:
7a:08:1d:ce:f0:e0:cb:3d:e2:bc:85:93:9a:c6:cb:
ff:92:80:39:3b:3f:27:28:5c:db:ee:23:ab:86:22:
b1:cd:30:93:54:2d:52:3d:8f:1c:d2:01:60:8b:a3:
e6:e1:a9:e9:57:9c:d3:a8:7c:a0:7b:cf:73:ce:2a:
2c:97:d4:61:7e:b1:dd:3f:20:6b:f4:b3:e2:6b:58:
9d:6e:c5:d6:61:53:d1:6f:61:f9:f1:d5:64:6a:e7:
96:b0:e5:b3:32:c2:05:0a:54:4c:f7:4f:79:a2:c9:
42:36:4a:0a:09:38:1b:fb:d1:6e:37:ad:8b:ec:0b:
a2:30:67:5f:21:0b:fe:5e:0a:9b:16:dd:31:ac:e8:
e9:2f:9e:c4:0f:13:35:ca:e0:0b:76:31:6a:3c:b1:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:47:F6:52:02:61:75:AA:88:8B:72:F1:A5:90:92:33:96:50:BA
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8b:8f:56:4e:0c:24:f7:e6:3b:79:55:8f:3c:54:53:99:fc:
da:ed:7a:eb:f6:58:b7:5c:5f:0f:85:cd:ad:a2:aa:88:54:4e:
76:d4:0b:57:a6:a0:ba:b6:f2:74:bd:da:24:c2:6e:36:e8:6e:
b6:7f:20:52:85:b7:a4:c4:78:ff:4f:16:4b:81:45:b1:40:27:
d2:56:6c:aa:0c:ea:d0:c2:f6:3f:16:1e:7a:34:1c:7c:33:47:
47:21:9e:3e:1f:fd:9c:de:d9:82:51:1c:83:53:3f:64:d1:08:
44:48:68:71:e6:d0:14:52:5e:90:88:e6:04:10:95:0a:e5:e4:
59:d3:f2:3d:69:2d:8c:ee:2d:5e:95:ee:fe:66:b4:6e:b6:32:
78:11:51:e8:28:0d:1a:44:5d:e4:ca:45:21:be:84:8c:19:01:
78:19:07:45:a8:f7:4b:e1:a5:ad:6b:5c:54:a8:b1:59:48:22:
05:94:c6:cc:bf:90:41:09:2c:ab:92:15:81:77:f9:17:e1:78:
c7:9c:c6:bb:33:73:e7:a0:6e:98:ac:6e:54:bb:b9:28:34:4f:
65:79:fb:ff:1b:4b:db:22:21:84:a2:c1:fa:77:d4:40:21:38:
13:ac:b2:17:b5:14:e3:a1:0d:7c:4c:d6:07:ce:56:32:2a:a7:
58:a0:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:14:57 2025 by rpki-client