Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: SRyPJtrfpzhyYzO1PZUgue6fiM9TrmWLDXoxgai6Pn8=
Subject key identifier: B8:55:DA:9C:ED:60:A4:D3:22:95:15:9D:83:B3:66:55:78:AC:E2:10
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 0198D404A421C055F76A6159F675B2DBB2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1397
Signing time: Fri 22 Aug 2025 23:02:10 +0000
Manifest this update: Fri 22 Aug 2025 23:02:10 +0000
Manifest next update: Sat 23 Aug 2025 23:02:10 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: 6u8t+8UxpwGkaDX9Z0g54B92NY2mMK1y1D7XN1dOue0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:a4:21:c0:55:f7:6a:61:59:f6:75:b2:db:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Aug 22 23:02:10 2025 GMT
Not After : Aug 23 23:02:10 2025 GMT
Subject: CN=b855da9ced60a4d32295159d83b3665578ace210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:69:68:b0:93:7d:aa:5e:f4:7b:5b:18:03:
95:94:fe:bf:b9:b0:73:a2:b5:d6:af:72:a0:20:4a:
8d:bc:8f:88:cc:50:7c:49:4e:2c:1e:de:0a:1d:9c:
b4:dc:d1:a8:a3:c8:ba:92:4b:09:85:9c:78:ad:a1:
14:5f:52:31:b9:ce:b4:d1:00:f1:1b:b7:1f:9a:a4:
b1:dc:d6:3e:92:08:6f:e9:4b:a5:72:6f:05:0d:c1:
25:75:19:e0:ab:1b:0e:f2:48:35:3f:30:f4:ce:cf:
17:3a:26:8a:b0:ea:bb:db:2d:77:8f:87:5a:be:df:
d5:0d:e2:d5:f8:06:eb:2f:81:c3:27:fb:d6:38:20:
4c:fb:59:cf:43:8c:3c:93:cd:53:c2:c4:71:05:15:
fa:09:ea:c9:4a:53:ae:e8:b3:bf:81:ce:73:fd:a9:
7e:53:58:b8:6f:dd:83:15:c1:66:45:4c:94:8e:99:
5c:78:c5:d0:6a:bc:ef:e6:67:c2:ad:57:af:6e:d9:
5a:b8:cc:9d:80:b7:8c:cc:af:2f:96:4d:a7:aa:6a:
d4:3a:69:fc:54:28:fa:ec:a8:ef:a7:fb:d5:41:e8:
bf:90:1b:cd:84:1b:a0:a4:b9:0b:42:48:22:f5:af:
f7:02:11:0a:04:fc:23:90:b6:79:86:8f:51:b3:fe:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:DA:9C:ED:60:A4:D3:22:95:15:9D:83:B3:66:55:78:AC:E2:10
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:11:a5:14:66:ea:ab:b3:3b:00:7f:7d:2b:4e:65:c6:6a:af:
36:32:e1:b7:54:ea:bd:18:75:3a:23:b9:ca:5b:1d:84:6f:4d:
b1:fd:60:5d:1e:6f:cc:91:6f:a1:43:c4:3c:d0:ef:78:9f:bc:
7f:bb:c6:c4:6d:18:56:3e:05:f6:27:d1:8e:58:bb:90:45:2a:
03:86:6c:95:66:cb:4d:e3:98:35:31:62:f9:80:28:12:4f:3d:
f5:4f:c8:02:61:ab:cc:04:33:05:54:47:1a:36:f8:a4:75:c1:
b9:40:2e:7f:1f:56:d2:46:da:72:fa:19:5e:4d:1e:2f:bf:a2:
4a:7b:fa:8d:04:c2:b2:e6:b9:b8:cd:49:13:d0:a4:7b:bc:25:
9f:67:ff:a2:56:b4:35:c5:4e:55:91:06:c0:94:93:ea:4f:aa:
d1:7a:c2:7f:03:53:af:2f:34:6c:e9:50:b5:22:4d:b1:b5:30:
72:40:0f:94:51:e3:5e:69:c8:53:35:bf:cb:a3:30:03:96:81:
a0:62:8d:95:8e:9c:82:e2:df:b4:5a:13:96:96:b1:c7:b8:17:
49:cc:43:2e:b0:0d:09:2a:d0:2b:78:3d:69:1b:89:c0:64:45:
42:52:f0:3b:6d:2e:ae:a6:25:0a:e3:e2:35:ff:1c:d4:f0:98:
bb:79:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:02 2025 by rpki-client