Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: SdZE/pnClTnq7jKBELI4eE2FYN+L6k6h4U1NS2VDwF0=
Subject key identifier: 99:A9:C4:52:99:26:CB:D8:47:FC:AC:77:3E:70:5B:DE:90:E8:2F:6C
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 0198D4A7BFD1EF1F6897BC1BF555EFCE8C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0CCD
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: 0lFD7VuGQw0FF1GXrHcWtRvnT01WHuAtREuETpMvxwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bf:d1:ef:1f:68:97:bc:1b:f5:55:ef:ce:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=99a9c4529926cbd847fcac773e705bde90e82f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:02:db:88:fa:c5:f3:fd:45:8a:fc:79:0e:
53:c0:6f:cc:5b:7d:48:c8:04:5f:78:a5:29:52:c3:
40:9a:75:23:00:1e:f9:c7:c8:9b:6b:58:36:f6:64:
56:3e:a7:71:d3:0d:66:22:3a:9e:7a:26:46:33:b7:
00:13:93:4f:e1:16:04:d1:31:16:80:36:cb:c5:7d:
87:66:6d:42:79:32:01:0f:d0:6f:ba:6d:98:6a:04:
be:d9:3d:74:f3:8c:87:bd:31:37:56:87:bd:6b:90:
5a:90:41:4c:96:7a:58:4f:8a:19:fc:82:b2:9a:72:
9e:df:9d:1e:3c:1b:5c:cf:f2:3f:49:60:b0:03:6e:
06:30:30:ca:71:e0:2b:5f:a6:5f:fa:6a:a2:b5:01:
22:ef:28:3b:a8:bc:71:7d:4f:f5:24:13:ef:4d:35:
9b:b0:1c:92:d9:43:0c:96:c4:91:15:e3:3f:ce:62:
f9:48:8a:6c:7b:5c:b2:e3:76:3d:a2:b0:72:d0:a4:
ef:76:cd:82:31:97:0d:26:f7:45:58:99:6f:55:d1:
9a:f1:6d:53:7a:e7:73:cd:db:42:68:d1:e2:43:ee:
1c:2e:25:52:75:d0:91:b8:60:5c:f3:08:43:f1:d5:
b2:5e:7a:ee:55:52:7e:59:23:9e:10:08:24:e4:2a:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:C4:52:99:26:CB:D8:47:FC:AC:77:3E:70:5B:DE:90:E8:2F:6C
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1a:14:19:f6:09:c1:69:99:88:c6:51:1b:1c:3e:84:89:ef:
e3:16:96:c8:e7:b9:3d:74:38:c8:6b:93:67:c8:b2:04:fe:a5:
38:2f:8f:2c:bd:dc:a8:7b:51:61:d1:65:34:bc:ea:b4:48:55:
f1:35:66:65:63:5d:f1:0e:38:dd:5f:68:45:0d:45:3a:31:8a:
57:bd:2f:2d:44:14:68:24:d2:68:fa:8c:8e:6e:55:a4:26:7a:
54:41:5a:45:f9:48:75:e0:b6:28:54:22:df:95:d7:0f:0d:52:
c5:f0:3d:92:3c:f1:33:2c:e2:94:cd:04:33:7c:30:6d:b2:d6:
72:99:1c:30:9f:e9:ed:fe:ae:eb:e9:75:44:ef:c9:c3:7c:b9:
53:38:e4:ac:ba:0f:98:00:a7:da:12:a7:fe:6f:1d:25:b3:31:
56:1d:47:57:1f:65:47:5b:c7:cb:a8:5b:5a:13:61:77:83:47:
d7:14:21:c5:0a:04:f1:91:85:d8:24:33:85:d4:ad:c1:e2:a5:
9a:01:7e:a8:bc:41:d1:e0:93:ef:b3:b3:52:7b:c2:2e:8b:17:
dc:f5:2e:85:6f:3d:e3:da:3d:85:f8:b1:55:e5:70:94:61:92:
52:8b:13:fe:20:57:8f:13:eb:00:1d:fd:c5:43:a4:c4:d8:fd:
d1:c5:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:36 2025 by rpki-client