
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: I1Z2AA9T+IIsYs5DCr7MR36Odw/vZ0Cc986sZ7Ey4tM=
Subject key identifier: 1F:3D:5E:24:1F:FE:B8:04:96:76:07:68:B0:DA:72:8D:F5:A7:9F:20
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 019885B115D3C5ECA622234A4270795CC70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 084D
Signing time: Thu 07 Aug 2025 18:00:31 +0000
Manifest this update: Thu 07 Aug 2025 18:00:31 +0000
Manifest next update: Fri 08 Aug 2025 18:00:31 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: QilAZam9c7Qx5A4NhX5J1oBxOQR6naRdoRgP1vSE7mg=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:15:d3:c5:ec:a6:22:23:4a:42:70:79:5c:c7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Aug 7 18:00:31 2025 GMT
Not After : Aug 8 18:00:31 2025 GMT
Subject: CN=1f3d5e241ffeb80496760768b0da728df5a79f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:0e:1a:9c:55:3f:bc:e0:6d:94:91:fa:dc:
52:dd:6a:53:f6:0a:4a:b6:e9:a2:32:dc:67:f9:63:
01:25:34:41:81:36:cf:81:02:62:0e:29:9e:a6:f1:
e8:67:6b:8f:1d:f6:af:b1:c6:78:04:60:89:c9:34:
77:d1:57:9a:64:a1:b7:2c:37:2d:99:19:a8:cb:66:
c2:4a:d8:58:7f:46:f7:6a:bc:34:45:fc:5a:0c:a1:
51:6c:56:01:40:86:25:3a:7d:a8:dc:b5:54:be:4a:
b0:b4:90:21:38:d4:24:58:cd:fc:9f:f6:e5:67:9b:
5e:0d:58:47:ea:53:c9:0b:90:15:4d:ba:31:de:d7:
00:b8:e0:c2:bf:5d:82:bd:57:67:8f:60:66:97:8a:
95:f2:87:d8:d5:85:87:97:ba:15:f8:0c:f7:d6:39:
0c:41:97:7d:7e:94:eb:ec:b7:1a:27:1f:1c:5b:35:
a3:66:63:4a:8b:eb:95:6e:10:9d:25:cc:9e:6f:60:
6b:88:ae:ee:20:f8:83:a7:23:c4:16:ed:e6:3f:36:
a3:30:f7:04:d3:71:54:f3:66:16:6c:ad:80:8c:02:
74:9f:bb:13:24:bf:61:4e:86:eb:dc:9b:04:94:7c:
55:a8:cb:76:59:a7:3f:45:7a:ec:79:03:e2:53:c7:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:5E:24:1F:FE:B8:04:96:76:07:68:B0:DA:72:8D:F5:A7:9F:20
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:80:1c:4b:c3:4d:b3:e3:e5:35:6c:f1:8c:b1:3f:4f:0c:ad:
e8:93:bf:dc:5d:0e:61:21:76:d7:c4:2b:c9:f7:b3:dc:37:23:
f4:95:b6:3d:3f:2c:1d:0a:58:15:ce:ca:78:79:31:1d:b0:ad:
ea:30:52:fc:4f:10:61:94:20:59:1c:48:32:be:14:29:0b:3e:
d1:7a:a8:9a:ab:93:4d:f4:95:56:ab:c3:2b:0e:60:33:ec:52:
4a:4d:b5:03:ca:2e:0b:5c:aa:11:c1:a3:82:4a:98:2c:51:29:
7f:0b:7b:b9:c7:eb:a7:d1:8f:63:9d:ba:48:12:3a:60:83:23:
05:27:57:18:f4:5f:74:82:3d:aa:5c:03:b1:5a:89:bf:86:3e:
38:e5:32:00:2d:94:19:28:1e:03:0b:07:40:5c:ff:f1:b0:d4:
ef:0e:d7:87:ee:b0:d9:ab:8a:82:b5:81:f4:6c:cf:32:85:58:
5a:44:f1:03:7c:9f:2c:41:a2:b9:ba:3b:06:ee:76:50:d8:bb:
91:ac:85:5d:67:90:96:0d:4d:d3:89:92:61:84:11:45:78:c6:
0e:be:99:91:b0:4d:5e:3f:f6:4a:94:03:8d:23:32:11:ca:9b:
cb:01:8b:d2:91:70:2e:19:61:f9:98:30:de:3e:48:df:d2:e8:
c7:ac:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:55 2025 by rpki-client