Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: iyrL7R8JH5IPO5XU19EWuJcDQK7wKc51v8mjz/eEcBs=
Subject key identifier: 9B:ED:01:4D:E1:2B:E2:A5:FF:1E:8D:20:04:4D:27:5F:6D:3F:2D:3A
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 019872CFAE736DA1BB346CB40211F834E8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0CE0
Signing time: Mon 04 Aug 2025 02:01:09 +0000
Manifest this update: Mon 04 Aug 2025 02:01:09 +0000
Manifest next update: Tue 05 Aug 2025 02:01:09 +0000
Files and hashes: 1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: xX5Fp4ndju6xzOGy/7gJVKx4zokJHo0IeSEo8GUyTCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ae:73:6d:a1:bb:34:6c:b4:02:11:f8:34:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Aug 4 02:01:09 2025 GMT
Not After : Aug 5 02:01:09 2025 GMT
Subject: CN=9bed014de12be2a5ff1e8d20044d275f6d3f2d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:4c:2e:40:ce:45:5b:c7:a5:ce:e8:d1:21:
5e:e7:49:cc:12:34:88:a4:6f:3e:75:76:ae:5c:ca:
62:de:c6:d8:e3:3d:d1:9b:35:88:95:4f:26:42:43:
4d:ca:24:b8:86:10:3b:d6:d7:d9:1e:e7:3f:9a:d2:
cd:a0:5f:dc:7d:09:47:3a:14:99:a6:81:78:6b:18:
77:82:45:cd:be:e4:82:44:5e:0c:45:64:96:c9:64:
e0:26:37:d4:81:c5:1e:d8:9b:88:2f:06:ed:1c:46:
8b:a5:b9:31:df:02:e2:68:60:aa:cf:d3:8b:d1:b4:
0b:64:90:81:8e:74:84:d1:25:68:5d:77:49:2e:de:
61:70:12:92:78:22:8c:fe:43:61:9c:15:c1:5f:ea:
4f:1e:98:2c:6c:ff:9c:39:06:63:99:43:be:dd:7c:
30:de:cb:47:c9:b7:c8:2f:b0:f6:7c:45:ef:e6:ff:
7f:f4:2c:fa:1b:2b:5d:1c:80:c9:ca:6f:e5:74:5a:
55:b7:d3:c5:a0:67:1e:26:3a:7e:bb:46:4a:12:49:
ed:bf:f0:84:47:b5:87:bb:75:01:22:b3:9a:c1:e0:
48:bb:96:e1:55:d9:40:72:ef:44:16:25:2d:3a:34:
d3:3f:98:0a:c3:f4:fb:12:da:aa:d1:61:6c:33:cd:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:01:4D:E1:2B:E2:A5:FF:1E:8D:20:04:4D:27:5F:6D:3F:2D:3A
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ba:c9:ed:85:0d:45:ef:5e:8a:ae:0a:25:fc:6a:f4:44:1f:
7b:b8:be:e6:c4:9b:b9:9c:ad:be:1e:46:87:47:ff:76:ec:97:
e3:2f:3c:16:fe:2c:b2:18:c9:dc:3c:d8:eb:83:fc:72:9a:07:
01:fe:5e:e4:92:dc:52:c0:bd:f8:c2:5d:87:2d:52:fd:f5:90:
7b:c3:05:72:53:65:a6:dd:4d:24:25:4e:f0:16:0a:ca:44:ef:
59:51:f1:ba:0f:4b:b8:e6:57:41:36:91:6a:5f:f1:df:8e:87:
77:9e:77:34:fa:03:dd:c4:50:2b:c8:7e:36:20:13:c9:ad:04:
a3:7e:fe:23:d2:6e:f7:9a:cc:2a:69:10:a4:2b:27:55:10:4c:
fd:f1:da:c2:e4:4b:7d:71:9e:92:5a:b7:37:6f:b1:34:90:3f:
d3:b8:5d:13:30:6a:3f:f8:10:97:15:42:70:86:84:3c:69:19:
de:9e:46:06:43:c5:9e:71:4f:4c:c3:39:87:94:3e:06:9c:39:
45:46:d0:e2:d2:c3:58:d3:be:d5:a4:c5:3a:b4:56:92:d9:f0:
e4:bd:5d:dd:8d:68:d9:57:8b:77:b4:3f:c2:80:4f:39:4b:23:
29:9f:a5:f1:d1:bb:5b:5c:a2:06:ff:fa:4e:3b:30:30:0a:5c:
f3:d7:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:10 2025 by rpki-client