Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: k9935+Xqas1GI7algQkWoyHqoBedSpOAzeCiFpqglEg=
Subject key identifier: 91:E2:15:C3:CA:47:D4:E0:5D:2E:EA:CC:70:4F:D5:22:EC:8C:AA:03
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 0198D65F09D4EB1C004D6D3E047D14FB89C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 0134
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: jqlqKX6SO0KNnGy49HtRTjgGpnKREKMG8eGWUwbtUGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:09:d4:eb:1c:00:4d:6d:3e:04:7d:14:fb:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=91e215c3ca47d4e05d2eeacc704fd522ec8caa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:9f:b3:ba:11:5e:a1:3a:fe:b5:39:01:6d:
cc:fa:1c:86:ca:1a:58:a7:f7:2e:03:75:07:4e:5e:
0d:44:b5:2c:f3:ed:c7:ca:25:83:c7:b2:bb:16:df:
08:71:61:6b:7c:eb:99:fc:82:10:c8:00:10:67:54:
97:ac:de:a2:9f:f7:05:cd:20:f0:7c:02:3c:c6:31:
7a:ce:51:a3:c6:5b:d3:52:d1:33:14:bd:b2:10:35:
b0:7a:18:f4:b9:5f:a9:0d:c7:9b:52:03:19:b1:ba:
c6:8d:18:d5:6c:f6:00:04:24:ea:af:1f:33:3c:79:
f1:1c:9e:0b:97:eb:c8:94:40:96:33:ff:9b:3d:08:
36:54:06:c0:06:fa:0c:40:73:33:6b:1b:7a:55:f0:
c5:02:dc:f8:7d:c4:51:45:9d:05:ce:18:8b:37:f6:
63:eb:da:c9:a3:f7:03:72:71:87:cc:65:05:72:c6:
23:d3:f3:7b:04:0e:1b:0d:de:a7:a8:25:ba:98:c1:
55:02:24:95:d1:b6:b5:a2:e6:64:c4:12:10:4b:65:
85:8d:d5:f1:c6:e1:f7:a9:3a:db:b5:c1:16:46:ee:
81:88:cf:af:f6:34:8d:16:3e:87:66:b6:89:e2:da:
01:6e:66:18:18:48:9c:b5:b4:4b:3d:97:96:5d:69:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:15:C3:CA:47:D4:E0:5D:2E:EA:CC:70:4F:D5:22:EC:8C:AA:03
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c0:c0:c8:cd:c9:88:de:42:32:49:48:20:78:3f:79:76:51:
d6:0c:4a:a0:10:d0:bf:38:74:71:ec:11:7d:fa:e6:50:8f:c8:
76:34:a2:b8:8b:43:07:90:b2:86:40:2c:19:bc:d0:02:27:bd:
d4:43:1e:3f:3d:07:76:e9:b6:f6:2d:4a:61:ea:cc:d0:1c:61:
3d:95:63:71:6a:dc:f3:74:cd:c5:33:70:27:46:4f:91:ea:44:
71:b4:d3:dd:27:aa:0a:6e:e4:9f:8e:49:9f:d9:61:18:87:ab:
ac:25:f4:1f:e8:5f:04:06:28:6e:06:23:1d:81:7d:4c:cc:c0:
d1:1f:11:32:99:47:4e:e6:b7:e5:fd:09:07:d6:f7:24:44:9d:
8c:7d:8a:e2:32:f5:14:73:01:5c:3d:c4:d3:d3:77:fa:2c:3c:
c2:37:71:d4:31:23:91:9a:21:b0:de:39:52:1a:7e:4e:9a:e6:
2a:d6:5f:de:c6:2d:3f:73:19:e4:51:0e:c1:0a:65:53:d8:7a:
58:9d:6c:56:79:e5:8c:c2:1a:b1:3e:c2:2f:92:00:79:40:be:
5e:5d:f2:c0:61:af:65:a3:6f:c8:52:2f:c2:9b:eb:36:d5:cf:
a8:a9:8f:4f:bb:22:ef:b2:fe:5c:33:f7:e8:b2:0a:de:f8:d2:
73:68:45:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:43 2025 by rpki-client