
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File: 1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier: nMsF82f+Y8XN2JNqOKmzrtUSpKoXA0waoVuJkMAf4/o=
Subject key identifier: 95:BC:0F:9B:18:BB:F7:39:E7:B9:C2:93:AB:64:12:72:BC:B5:16:3C
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 0198D6298A50BA1D458455ACF4DE18AFF645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number: 1428
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: +0UjwUgNdXsTtR7jiae+XUXiMt9ZU6Md1VPK7jMwbMo=)
2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=)
3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=)
4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=)
5: hlJjKHJFeD3j4Nr8Kn0Ft2J4O1E.roa (hash: Fv/393RUKDmiuBI9kyyedtNaYIDs37je0cMv9FMaRSg=)
6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8a:50:ba:1d:45:84:55:ac:f4:de:18:af:f6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=95bc0f9b18bbf739e7b9c293ab641272bcb5163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:2d:f5:47:de:ad:a0:c8:0f:4b:d9:b9:21:
9f:52:75:b2:69:15:0c:16:fb:f2:cd:13:f1:9a:35:
e1:f3:8c:81:23:1e:c7:dc:ae:82:cd:b1:5f:05:c0:
21:ac:5d:32:4b:48:88:19:66:7d:f1:22:c0:06:c7:
2d:e5:f2:e3:6e:7a:4b:29:5b:43:1d:1a:a6:41:dd:
a5:bf:cb:ea:6e:44:19:97:84:0e:ee:c2:e9:d2:77:
57:35:ba:28:9e:59:2b:46:fb:5c:ff:15:dd:0c:32:
99:4e:29:12:0b:d7:52:d6:17:8a:eb:90:ec:71:66:
f5:71:a1:8b:02:cb:06:ba:e5:3f:fe:34:b1:c0:4a:
d0:c5:f4:ef:d3:d5:ba:fd:4a:70:ea:0f:a5:2f:cd:
9a:1a:7c:e3:e7:67:bf:cc:3b:5f:cb:6f:cd:83:0e:
fa:60:67:fa:52:bc:2f:15:c1:90:73:93:a6:29:9d:
7c:4e:39:59:ad:60:a3:a7:c1:7c:82:61:43:1e:57:
61:c4:56:b9:77:9b:42:9b:73:8e:90:66:c6:05:72:
23:1a:37:92:65:b7:c0:1a:b2:47:bf:25:cc:61:df:
76:96:a6:c7:19:15:0f:48:bb:7c:11:02:27:4f:cf:
07:d0:59:05:a9:aa:5f:79:5c:70:04:33:52:11:86:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:0F:9B:18:BB:F7:39:E7:B9:C2:93:AB:64:12:72:BC:B5:16:3C
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:49:0d:f5:79:bf:a9:0d:5a:dd:c8:c1:d8:8c:d4:78:c5:dc:
6b:64:5b:e4:f4:94:8a:6a:b7:54:6b:53:3d:38:56:49:d4:75:
28:2c:86:f0:42:54:bc:58:e9:f4:52:21:60:94:76:48:02:98:
a2:98:1b:80:05:3f:6a:9e:3c:d4:33:63:31:5e:72:c0:59:15:
0f:71:6f:5e:f2:84:4b:a6:b4:57:a3:3c:c5:41:89:7b:38:23:
84:c2:80:0f:92:91:28:bf:4c:82:b0:12:08:52:22:dc:aa:7c:
0a:d6:09:d0:21:82:fb:73:ce:f2:f8:15:10:4a:cd:40:be:e7:
da:4d:7e:4b:b9:48:8d:e9:83:ef:e9:ee:5b:bf:61:71:6d:de:
fb:89:bd:72:03:c8:ad:af:04:c8:be:1f:07:71:24:7f:75:0c:
e0:51:01:34:9c:e8:f5:1c:8a:3f:2e:3f:f7:c3:ec:59:f7:d6:
f6:3c:07:18:bc:44:75:ec:49:42:3d:3b:87:01:ea:63:11:36:
f4:36:ab:83:4f:33:43:d6:24:88:80:f3:1e:93:fe:c2:a7:a5:
25:1f:52:e7:60:74:36:1d:24:65:b8:ed:d4:15:cc:69:69:7e:
55:f3:da:f8:29:44:3e:39:6e:62:c9:1a:24:2e:c1:a7:16:e8:
f5:78:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:54 2025 by rpki-client