Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: 4rBgHanFRbSAHuI/RoGBu/ZEyosYZghBSgSq6W1vCR8=
Subject key identifier: 75:AA:5C:81:16:1A:DC:06:4B:89:CC:C5:FE:50:E4:13:01:F2:46:3D
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 01989FDEE48DF7CCB71116D16716334880FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0817
Signing time: Tue 12 Aug 2025 20:00:41 +0000
Manifest this update: Tue 12 Aug 2025 20:00:41 +0000
Manifest next update: Wed 13 Aug 2025 20:00:41 +0000
Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: H8A9SrivNXo5f0EUHemAZAyG26jF6KjONY1kXheOqDQ=)
3: e9Z_8CtChGt4iClYaH_YgcqeT1k.roa (hash: 2K2jsaRk3MeR/R/Hwsml8Lc+ehwc8rBqNjGIvU2lgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:e4:8d:f7:cc:b7:11:16:d1:67:16:33:48:80:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Aug 12 20:00:41 2025 GMT
Not After : Aug 13 20:00:41 2025 GMT
Subject: CN=75aa5c81161adc064b89ccc5fe50e41301f2463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:09:61:cc:27:f2:d9:38:12:4a:9c:fc:71:
7b:49:20:54:a2:74:d1:b4:37:a8:39:54:e0:fe:c6:
e8:d4:7d:30:83:04:3b:ec:75:52:de:ca:47:42:26:
61:e5:9b:14:93:5c:89:75:f9:95:eb:58:f0:e4:6c:
dc:a1:10:28:33:a3:92:b8:fa:22:83:81:f1:94:0c:
20:9d:b9:32:9b:cc:19:c4:a9:cb:4d:78:9e:70:29:
18:4b:5b:1c:89:ab:68:1f:e7:4d:98:ac:c2:43:b3:
fc:f7:92:12:bd:66:0c:8f:42:0d:36:f0:b1:6f:dc:
77:1b:f9:43:9a:50:09:a8:dc:50:f0:3c:fd:11:30:
30:c2:31:78:8c:c7:fe:07:0e:b4:30:ff:bd:06:b8:
c4:b4:36:04:63:af:59:da:82:a1:03:5b:64:7c:75:
b0:ae:cb:92:0c:51:c0:8d:ba:94:57:a4:07:38:6b:
b7:ff:5e:f1:7f:21:63:51:78:da:46:16:62:61:58:
fa:17:4a:d4:37:b5:0c:b5:5b:98:88:bc:72:6b:3e:
14:ed:b7:89:6e:9e:ca:4b:0f:73:bd:62:12:9e:11:
13:43:05:03:f2:09:13:39:56:1b:20:c2:c6:72:37:
bc:f8:37:e4:ae:71:b9:21:db:3a:1f:63:67:f6:dd:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AA:5C:81:16:1A:DC:06:4B:89:CC:C5:FE:50:E4:13:01:F2:46:3D
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e4:39:10:77:5c:ca:9f:15:98:a0:0d:f2:e2:cd:96:76:a1:
74:26:a8:83:5d:92:a8:5e:5f:4a:0c:33:a1:0f:fc:e1:a5:30:
94:6c:9b:3f:9e:7b:ca:4a:6d:7f:21:3d:0c:b4:2d:da:df:d0:
f5:76:bd:24:d8:24:9e:83:86:ae:bb:f0:fc:32:91:5b:a3:ae:
e3:ce:5e:11:6c:19:cf:a9:85:12:10:67:e4:72:f7:1c:f4:8b:
7f:39:47:d5:ff:79:fd:90:92:74:bc:13:ad:cc:95:b9:40:b4:
ac:c5:8b:de:25:24:81:e3:53:09:4c:9b:c2:0f:f7:71:9b:77:
67:3c:0f:cf:52:dc:b7:d7:c2:bd:77:12:47:5d:9a:5c:00:ce:
21:d9:d6:1b:54:b0:79:9f:37:4c:81:42:f2:9f:ea:ee:f0:a0:
eb:ab:a0:7d:09:6f:bb:d5:5f:87:b5:7a:7c:b2:d8:e5:19:12:
3d:0a:2b:96:7f:fb:b7:e8:70:45:de:88:37:80:fe:8f:b6:06:
3e:0c:bc:34:19:75:6f:d4:6e:92:e5:32:f3:18:14:1c:5a:2a:
0f:14:49:c5:07:38:ec:48:4a:b9:3e:15:4f:cf:01:ad:f2:f6:
4c:70:06:46:de:f3:b3:df:67:19:be:aa:6e:54:83:10:0a:d6:
f6:1a:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:24 2025 by rpki-client