Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: vpFs8nMfr3nViyarlNDBdn+FNbvgMil2sXtwfdn2Eo4=
Subject key identifier: 26:9F:8B:AA:B3:F9:45:BB:DE:51:B4:D7:EC:8A:39:67:6B:44:23:BF
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 0199FB7CB7CE54F6D623079C3A9155B0F573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 1147
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: Qeh6EjApmMLLiPYVMCc2OZgJWkkMr1ihYShzBxVtGlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b7:ce:54:f6:d6:23:07:9c:3a:91:55:b0:f5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=269f8baab3f945bbde51b4d7ec8a39676b4423bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:e1:5b:8a:cc:3e:79:cf:87:55:6b:42:96:
5a:72:76:8d:f6:1a:cf:6c:30:56:2f:ca:18:1c:d7:
d5:5e:a7:da:af:a7:b2:c3:d8:ff:06:8f:43:d2:77:
d3:be:97:81:93:82:64:7b:76:11:f3:91:fc:46:45:
de:f6:b8:c2:c1:f0:57:68:c7:39:89:69:fb:a0:43:
5c:1a:ad:db:5c:9f:39:e7:b3:34:e7:6d:bb:a0:b8:
75:42:bf:0c:e0:70:82:2d:5e:eb:20:d7:61:9e:f4:
a9:15:2d:5d:c2:f5:ce:62:c7:24:31:1d:6b:91:75:
45:f4:92:5b:f1:4b:77:d4:66:a1:a2:e5:79:96:30:
7c:b6:75:bb:8f:56:b1:59:73:69:96:92:9c:37:ed:
e4:87:ff:d0:30:be:b0:46:42:4c:04:64:52:76:f8:
1e:57:4d:78:8f:ea:45:ba:91:52:6c:95:dc:ce:8f:
95:08:b4:2c:07:e3:90:64:45:eb:fd:87:f1:7e:0b:
53:56:f4:77:cd:56:3a:1a:dd:06:a5:46:ad:75:96:
42:0f:e9:31:e4:c1:99:3d:75:57:f4:fc:7c:c7:c8:
22:74:cc:9e:cf:0e:bf:62:dc:2f:1f:2a:71:7e:51:
de:74:3e:81:ab:6d:4d:8e:e0:b1:a1:6d:d2:83:aa:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:8B:AA:B3:F9:45:BB:DE:51:B4:D7:EC:8A:39:67:6B:44:23:BF
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:30:b4:28:ab:ee:aa:01:ed:42:91:53:a7:54:da:0e:57:36:
46:d1:2f:ff:52:16:3e:d6:3e:55:5f:cd:dd:b6:5a:74:c3:4b:
f9:5b:b9:e5:43:a7:b5:bb:97:3a:56:c2:33:88:cd:7e:bc:2b:
ce:e8:8c:79:7e:bd:47:47:66:93:0a:6b:98:c7:c6:15:bc:b4:
12:a5:e9:be:51:c8:30:fb:d4:7b:a8:b5:50:7b:70:c1:e1:08:
10:37:13:5d:d0:ba:f4:47:97:c7:2f:1a:b1:17:4d:ab:f2:61:
98:63:a0:16:06:51:c1:ec:c2:f6:5d:9a:b2:d6:aa:95:a1:21:
29:89:be:45:74:ad:86:62:44:9f:d4:8e:74:0d:48:6a:05:e3:
70:56:86:f2:31:85:4e:b1:26:41:d6:ec:fd:d6:e8:27:da:90:
6e:87:f1:1c:fa:97:12:0b:4e:e6:5d:c5:8d:f9:48:8e:45:bb:
e5:61:fd:41:60:80:5e:d6:c4:84:83:60:70:f8:2c:00:66:9d:
fc:53:64:0f:1e:11:f9:9b:e9:bb:3f:41:26:c8:25:7b:50:c6:
f8:40:72:80:d0:47:89:cd:e4:09:ed:26:38:cb:52:54:8e:bb:
6e:ce:2a:61:2a:9c:87:90:a7:f5:cb:03:f4:ad:dc:bb:c8:6e:
0c:38:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:50 2025 by rpki-client