Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: TPvjT1oMF48+O3WqnNBT0aDR09V0W1Kkn2rVtorLX6s=
Subject key identifier: 2C:BD:55:75:C9:63:18:EF:FB:5C:C0:7A:D9:18:3E:88:26:F6:82:CF
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 0198D4733788D53EC63DACB596F00D9BEB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 0612
Signing time: Sat 23 Aug 2025 01:02:57 +0000
Manifest this update: Sat 23 Aug 2025 01:02:57 +0000
Manifest next update: Sun 24 Aug 2025 01:02:57 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: Amx/tAoGfNcRjGdJ7gtGA+PL18x9aLGlhJAhYP+FC9c=)
2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:37:88:d5:3e:c6:3d:ac:b5:96:f0:0d:9b:eb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Aug 23 01:02:57 2025 GMT
Not After : Aug 24 01:02:57 2025 GMT
Subject: CN=2cbd5575c96318effb5cc07ad9183e8826f682cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:1b:07:43:82:06:7b:02:b7:36:66:47:60:
ca:73:06:52:b1:b2:1a:99:b9:16:4b:46:70:c3:5a:
5a:e7:a2:56:d0:6e:3b:79:9d:90:81:8e:e7:5f:b4:
88:ab:04:29:1d:e7:db:5d:24:cf:51:49:65:36:ad:
31:30:0f:27:f8:d3:ab:47:79:02:50:60:ac:af:4e:
b1:27:27:e3:e8:21:70:4f:a9:48:e4:ff:b5:1e:a5:
10:34:89:97:79:0d:fc:2c:ad:d1:b6:0f:1c:97:8d:
b4:41:e4:86:81:91:59:a0:8d:15:92:74:c2:cd:de:
63:dc:24:5c:ed:9a:08:d1:87:21:f6:9c:3c:d5:4f:
7a:85:59:5b:a6:1d:54:52:10:b0:ee:52:14:52:24:
a8:78:d9:e9:80:6f:1d:a6:56:b3:59:dc:32:3c:80:
19:ad:05:8f:4b:df:5a:71:54:ee:23:aa:b8:f3:70:
c6:6b:dd:da:52:2c:fa:c1:b4:20:48:55:c2:8f:c4:
3c:18:1a:0f:7d:bf:2b:84:0c:b0:99:36:96:11:dd:
00:4a:5b:8c:90:8d:36:8b:6f:aa:c8:d3:c7:fc:dd:
d1:99:da:17:46:09:5d:81:32:c7:73:61:a6:09:1b:
05:64:7d:b0:32:f7:6d:0b:9d:17:c7:64:9a:3c:5c:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BD:55:75:C9:63:18:EF:FB:5C:C0:7A:D9:18:3E:88:26:F6:82:CF
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3b:ff:72:f9:66:e1:44:1b:06:c9:c7:0c:7c:33:7b:cd:cb:
03:8e:b0:fe:19:cb:24:9b:56:99:ec:42:83:32:a1:7b:dc:99:
8b:50:a6:cf:85:bc:79:14:03:71:a2:a8:68:64:fb:4d:28:03:
ff:9d:df:0c:6b:41:fb:6c:7b:38:a1:d7:c7:e6:17:ef:d8:86:
5d:42:e0:78:af:8c:d4:69:00:d9:bd:6b:63:ad:42:dd:dd:2a:
26:76:da:ca:26:88:9b:ad:57:f9:37:9a:ec:31:d9:25:1c:84:
a0:7d:98:31:83:76:19:b4:eb:0b:72:b3:2d:fa:bf:a0:ae:0d:
97:5a:c7:82:d0:04:35:53:36:b1:eb:08:13:61:ad:d6:47:80:
7c:a0:4a:c2:ea:a9:27:64:39:d8:97:67:fb:48:d3:7d:1f:1a:
5f:96:af:16:69:b1:97:66:6f:25:0c:f2:0d:ec:b6:3f:0c:fc:
1e:ae:54:67:0b:36:6c:33:85:9a:11:ef:e0:8e:1d:c7:e4:96:
4f:19:97:92:42:5b:ef:7c:e4:97:11:94:fa:59:8c:6d:e8:cf:
90:36:29:75:6e:1e:b7:b6:b2:2d:ce:0a:f2:95:3b:41:71:76:
1e:49:d5:7c:3a:5a:3e:6d:65:8e:97:6f:23:f6:53:4e:f3:61:
30:28:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:33 2025 by rpki-client