Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: 9pGmhnlhBd2GTWpkOS2BisjtTNC7OfhPPvmZ8i/aFPg=
Subject key identifier: 69:25:1E:2A:22:F6:DB:EC:D6:DF:16:D6:1E:15:35:67:D1:87:1E:B3
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 0198D54DFA1F522AB10B0E926FBDA0C6D5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: 29B5gH6n6DXJ4ar9QoMzNmsK4XW/ojxtcGL4VNDeiD4=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fa:1f:52:2a:b1:0b:0e:92:6f:bd:a0:c6:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=69251e2a22f6dbecd6df16d61e153567d1871eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:9a:ba:5f:72:78:39:2c:51:1e:aa:ca:b3:
e5:95:76:73:2e:83:14:ed:cf:7d:78:53:1d:aa:87:
12:6d:74:a2:80:13:cf:2c:a3:93:45:3a:c0:9b:ea:
46:d8:0c:32:af:2c:a8:36:1c:5f:57:c4:68:1a:6a:
74:c9:86:17:bb:a2:5b:6f:54:6e:20:e6:d9:b7:34:
1e:2e:b2:af:c2:da:b6:3c:53:9a:fa:9d:2e:3f:95:
aa:e4:73:94:2f:d4:da:08:81:ba:87:49:c0:a9:f2:
c9:23:9b:35:26:d2:e6:91:4e:cc:e1:03:82:a2:a3:
d2:3e:32:21:0d:58:2c:1a:49:e8:f4:31:a2:75:d9:
0f:e4:6b:0f:ed:71:3c:c9:ce:ee:ae:a8:82:a7:17:
70:19:3c:7f:6d:29:ed:f3:2e:0f:c8:62:39:da:93:
ba:ae:26:c9:b7:62:18:df:0d:9c:dc:e9:b5:aa:08:
c6:0c:0f:6e:7b:26:96:17:02:71:aa:49:34:7d:23:
d5:9a:6f:70:f0:82:5a:a2:a3:a8:85:f8:b3:d3:fb:
f8:57:f9:59:c7:6b:12:65:27:8a:a3:63:9a:d4:2d:
6f:b2:69:21:f4:d7:ac:7d:b2:50:62:19:82:f5:ec:
f0:e1:1d:89:f1:94:c0:de:e7:8c:40:53:f7:05:a1:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:1E:2A:22:F6:DB:EC:D6:DF:16:D6:1E:15:35:67:D1:87:1E:B3
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:63:cb:e5:02:ef:f1:b2:68:5d:80:2d:fb:65:65:4f:b7:85:
12:03:1e:25:44:0a:82:f5:39:70:b0:07:2f:af:9c:65:89:42:
f0:20:91:0c:ca:1f:9d:0c:7b:27:3d:1b:dc:3c:69:61:f3:c6:
23:b4:a7:06:e0:1c:34:ef:e4:1e:03:3e:33:52:06:44:a9:ee:
39:33:ab:6a:39:11:ad:d0:61:0a:b0:ce:36:b2:7a:11:19:17:
f0:db:16:a4:fc:ab:31:8d:19:e1:8d:77:14:49:ba:2a:8c:96:
a0:e2:f7:63:22:81:41:ff:3c:66:5d:8b:1b:91:d0:c8:22:f5:
af:a7:66:bb:a3:00:50:7e:c5:e9:c8:c1:c9:27:44:c6:0b:ad:
d5:11:26:7b:6c:41:93:4c:99:86:86:90:00:46:06:0f:36:6d:
61:39:b2:06:1b:70:3a:de:98:12:2b:e9:f2:64:c8:6d:22:e8:
ec:bd:ab:3b:77:c0:dd:d2:e6:bb:db:63:90:72:8d:bf:a5:cc:
8f:0e:8f:32:b6:07:b7:0c:bc:9e:72:7f:85:a0:76:88:a7:18:
60:73:e5:45:68:b4:c6:da:ee:c0:8a:21:5d:46:90:bc:97:05:
f7:af:f1:ee:db:55:8c:c3:09:3f:84:6f:2d:fb:5a:5d:ff:4d:
a9:35:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:23 2025 by rpki-client