Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier: VGltHjRUBLGbcrdgDyadE57Qo0NSc9/SfrK9YCdg0dc=
Subject key identifier: C8:E2:C3:DC:51:E9:5E:4F:27:6D:79:C6:3E:AE:CC:1F:7E:96:6D:2C
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 0198D8848406CEEE0D31791FF3CA734CDE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 20:00:19 +0000
Manifest this update: Sat 23 Aug 2025 20:00:19 +0000
Manifest next update: Sun 24 Aug 2025 20:00:19 +0000
Files and hashes: 1: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (hash: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=)
2: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (hash: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=)
3: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: d4wHTetGwSMTfTEVnhhg/2y+4OZ6b+tfNwZJizzPGYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:84:06:ce:ee:0d:31:79:1f:f3:ca:73:4c:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Aug 23 20:00:19 2025 GMT
Not After : Aug 24 20:00:19 2025 GMT
Subject: CN=c8e2c3dc51e95e4f276d79c63eaecc1f7e966d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:d8:3c:bd:0c:6a:6f:22:9a:0a:2d:7f:d2:
15:96:66:c8:a4:7c:51:4f:85:27:08:bc:e7:88:96:
cb:c1:6b:9f:36:f9:90:d7:c7:29:df:25:04:72:74:
12:d4:e4:8a:d2:fc:2b:56:ff:ab:ac:29:f2:f0:b6:
97:8f:07:36:92:0e:d8:9d:55:99:e7:5f:bc:64:47:
f8:fb:65:e2:4d:0b:07:04:02:96:da:14:8c:e4:2f:
9d:bd:a5:b8:76:83:63:e4:6d:cf:76:b2:1d:12:72:
a6:a0:ac:e8:64:91:1f:74:64:8c:a2:22:7c:e1:c5:
52:2a:67:60:d5:20:89:a4:73:88:64:80:e3:cd:76:
52:ac:7a:24:29:43:43:4a:23:4b:8b:4f:e1:39:ac:
ef:f4:df:f5:0f:76:c7:07:a4:ca:dc:16:30:00:34:
16:1e:e8:8d:a3:69:a8:38:b5:d2:d2:08:85:f8:46:
10:d3:fe:b6:25:71:6f:73:46:9b:b3:b9:42:66:69:
4e:61:25:55:ca:d6:bf:5f:d9:09:59:39:df:09:1b:
bb:53:92:21:19:a1:68:04:d8:20:7f:a0:50:91:a9:
b2:00:67:82:27:4c:f9:83:ae:67:21:4b:92:df:78:
fd:e1:7f:63:a9:da:3a:fe:07:36:f5:38:bc:5a:a4:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E2:C3:DC:51:E9:5E:4F:27:6D:79:C6:3E:AE:CC:1F:7E:96:6D:2C
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:47:64:21:06:5d:ae:bc:3e:1c:46:5b:cf:46:07:cd:89:ce:
82:f2:81:3a:b3:cc:a1:ef:72:d2:75:e1:17:7b:d3:6a:c5:2e:
16:be:2d:e5:4d:87:b3:cd:b9:28:7a:85:45:9a:e8:98:db:2e:
d3:df:a5:a5:7e:53:b2:05:ca:46:c7:68:d7:da:4f:f3:c7:13:
25:f4:7e:07:62:70:cc:43:81:5a:d7:fd:b9:75:6b:0b:7d:bb:
8d:56:8d:d8:35:0a:90:10:be:a9:cd:33:78:87:0d:de:a7:6d:
ca:d9:f7:56:59:61:f1:9f:20:14:93:06:d2:d7:a6:81:bb:c2:
03:fc:4d:21:20:ad:65:78:85:58:db:3b:dd:a4:55:cd:f5:80:
3f:e1:53:1f:6f:af:ce:63:26:20:d8:78:fa:05:ad:d3:fb:8c:
ff:2e:9a:f0:8a:5a:7a:58:89:d0:02:7c:f1:5f:54:0f:9d:28:
35:28:8d:4e:50:02:0b:36:bd:b8:c2:12:8e:88:a0:0a:c4:27:
95:0a:12:47:05:af:d2:6a:32:fa:fc:cf:b2:32:4f:a0:48:94:
71:24:5e:dc:31:69:04:ee:72:d3:6b:c8:ff:89:ac:db:dc:b9:
29:8d:2f:f3:d9:ad:6b:e7:e6:c6:ba:a0:90:3f:d1:49:b7:df:
e1:58:16:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:33:55 2025 by rpki-client