Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: 0gSa4qdlyMdcmXA4pEqvo2Bj46vCQpqD/HZROufBeP4=
Subject key identifier: AB:78:94:F6:A6:E1:28:61:BA:8F:C1:D9:98:77:EA:95:97:7B:39:11
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 019896DC25D92A9E9850E631CD0DE342A0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 02:01:06 +0000
Manifest this update: Mon 11 Aug 2025 02:01:06 +0000
Manifest next update: Tue 12 Aug 2025 02:01:06 +0000
Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: nDiDqSf0UpJuy9Z+25oSf+t7dzongCnGGJ6TZVe4FA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:25:d9:2a:9e:98:50:e6:31:cd:0d:e3:42:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Aug 11 02:01:06 2025 GMT
Not After : Aug 12 02:01:06 2025 GMT
Subject: CN=ab7894f6a6e12861ba8fc1d99877ea95977b3911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:bb:45:92:46:e5:f1:aa:00:35:80:e5:20:
7c:18:a9:4f:1e:8e:45:de:1c:31:2d:76:65:3f:d9:
13:b1:a3:a8:98:d6:fe:54:40:b8:6e:2c:fe:7e:6e:
f3:e0:3b:74:8c:c1:dc:8e:a1:b1:24:a2:38:e9:20:
64:f4:51:9e:41:25:83:fb:f2:e4:1f:f3:00:d8:99:
0f:d5:8b:74:5f:ee:7b:4e:be:3b:90:20:5b:8b:bd:
a9:52:80:5e:6f:d7:84:30:2a:1f:42:8c:8c:f1:07:
e8:ab:1e:3d:4b:e0:37:2b:c9:08:d2:ad:4d:a0:3a:
38:d1:e8:be:4d:19:62:30:00:dd:fe:45:76:21:4b:
9e:de:e3:c7:b2:6e:b9:17:34:fb:3c:b2:b6:5d:e4:
8f:d0:b5:6e:49:05:64:95:5e:85:5d:f9:82:f7:ac:
74:e5:0c:4d:fa:91:16:fa:6c:25:00:3c:04:36:24:
c6:2e:35:b8:d9:09:8d:ed:c0:e2:33:68:c8:23:a9:
2a:e1:ce:48:a8:7d:f3:2c:cc:bf:fc:7b:b5:d2:ca:
5a:64:ff:a7:5d:28:aa:05:dc:56:4f:78:f7:03:9d:
94:b6:bf:17:bc:54:ee:9e:49:f4:7c:d2:0c:61:51:
f4:10:c9:90:b5:74:86:9b:6e:b5:08:6c:ab:51:a4:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:94:F6:A6:E1:28:61:BA:8F:C1:D9:98:77:EA:95:97:7B:39:11
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:10:7c:f1:de:54:cd:05:cb:61:08:ab:f6:c0:a7:1a:a4:4f:
2c:ba:36:73:84:ec:f5:70:ba:fa:31:ed:1d:d5:69:bd:07:e5:
a6:50:0f:5c:f5:53:5e:df:f6:75:fb:3a:ea:23:45:8d:78:07:
15:ab:b2:e4:2a:73:54:9f:75:93:cc:d6:94:f2:3f:b9:57:03:
ee:11:89:b1:e7:e2:a7:9d:ea:4e:81:1e:78:69:5a:ee:4c:eb:
b3:1f:7a:cd:e2:df:b7:c5:01:98:28:ce:45:81:1d:56:09:0d:
54:c1:60:40:fb:38:16:c0:4a:3d:cd:b0:c4:c0:70:d3:7b:ac:
a9:a5:6c:f5:ec:cc:8b:4c:45:1b:74:f2:0c:e3:19:1b:eb:d0:
c4:6d:9a:df:c3:c7:bf:13:dd:45:f2:0b:99:30:0e:ca:e7:72:
14:39:f7:1b:45:51:a2:a1:ec:54:e8:b0:88:60:11:f0:ec:7d:
1c:5f:7f:e7:95:03:57:33:cf:2e:34:2b:ca:ce:67:1c:7d:fa:
c6:08:75:b3:1b:be:29:b6:1b:60:00:17:73:de:3b:ea:1d:8e:
2b:23:3f:0e:c6:24:fb:74:ec:f0:36:63:a3:b6:c0:21:47:dd:
36:54:f0:0d:6f:24:a0:45:16:a4:2d:f4:e1:a8:31:9f:9f:e5:
a4:43:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:06 2025 by rpki-client