Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: LLqXtUzXE3xz7felfekI21E75miB1qbRr02YfLne6TE=
Subject key identifier: D2:3D:5E:08:D6:98:AB:57:38:8A:9C:45:D0:D8:9D:8F:B3:78:A4:87
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 0198D54DE35852650816152C453AC1894FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0B1C
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: 67MB3uIiPBNhFM08ZckoWW6iFi8.roa (hash: JV/MdthgHrxhWbvFQASmk0ngMZHEyExozVaoGSmnqvc=)
2: 9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (hash: HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: RjgLAQhFkytPz+CGZcJSPNRnC23yYCJTkzWBzRcvHnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e3:58:52:65:08:16:15:2c:45:3a:c1:89:4f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=d23d5e08d698ab57388a9c45d0d89d8fb378a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:91:9c:89:b9:78:8a:19:4c:ca:b9:9e:15:
14:02:4f:10:81:1e:e2:ea:fc:4b:86:43:4b:46:a6:
47:a4:03:25:26:6e:f8:06:2d:65:f6:51:11:f0:48:
52:1f:0f:9e:c3:6f:cf:f3:44:6b:d1:4f:e8:3c:e2:
aa:03:d8:80:66:e2:1f:28:1a:0f:bb:c5:ee:ed:3e:
ea:b9:79:4e:09:d6:cd:94:4e:30:c1:11:bd:0e:05:
ef:95:c9:cc:f8:e7:1a:29:8b:93:97:2c:e5:d7:0e:
a2:e2:b2:82:0b:a0:37:e1:2f:95:1b:75:46:13:3d:
10:e7:ba:cd:e7:aa:14:94:e2:10:23:1a:19:0d:e5:
1b:39:44:33:9c:56:59:e7:f6:7b:7e:68:bf:22:dd:
bd:c2:71:33:22:ee:7b:7b:c8:ad:cb:52:19:ec:7e:
d5:c6:c2:7f:cc:9d:14:8a:fc:77:72:77:41:67:84:
e4:4b:4a:ee:20:9f:b1:9d:47:62:fe:3e:6d:ac:95:
e3:f0:66:08:df:2b:f5:78:05:e7:df:8b:59:a2:45:
02:12:66:84:a1:cc:57:98:92:77:b0:8d:cc:72:fc:
98:a7:9c:db:b8:b3:32:20:d1:b0:b0:ac:df:a3:44:
01:3d:85:79:99:b1:60:2b:84:a7:6d:b6:ca:69:e9:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3D:5E:08:D6:98:AB:57:38:8A:9C:45:D0:D8:9D:8F:B3:78:A4:87
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0c:ce:6b:b2:a8:2a:1c:a9:65:ff:24:77:19:da:2f:b1:99:
7a:95:49:81:e4:7d:fe:d4:9f:a1:9d:01:cf:ac:68:bc:2a:81:
df:3e:2f:29:02:d6:e7:42:7a:50:ed:14:93:14:77:77:12:76:
25:fb:e6:95:64:14:67:15:7c:f7:3f:74:8f:7d:73:bc:f7:11:
43:b9:d5:1f:17:d9:7d:52:33:b7:a5:b9:4b:b3:1f:08:8c:da:
6f:b4:46:e6:af:e0:29:a7:c1:2d:fc:a7:52:1a:b8:a6:3e:dc:
63:3f:9a:6d:e9:65:e8:2e:e2:9a:13:c9:eb:c8:d0:de:0b:73:
ff:a3:ef:f3:7b:14:d0:ea:2a:c7:33:06:3a:27:8f:69:c6:79:
d7:a8:70:bb:76:df:b0:31:b2:ed:17:f5:40:33:dd:a8:a3:18:
c2:68:46:43:2e:fd:e7:04:f8:ee:93:fc:5a:ce:35:86:61:af:
5b:70:37:ce:98:86:df:61:bf:2c:1c:d7:ac:af:be:85:06:96:
a1:12:13:76:32:ca:f4:c0:d1:e3:29:7e:e2:4b:bd:69:ab:9d:
9a:ed:e6:60:a5:84:c1:44:85:4b:b9:56:ee:4c:ca:52:73:ac:
0d:49:c1:67:36:74:27:be:c0:18:0b:a8:0a:7f:6d:f1:41:d6:
70:c5:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:27 2025 by rpki-client