Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
File: Y6wkfmJx8GSRY3K1If3IZJslTFU.mft (raw, json)
Hash identifier: fCl9jemNoPeDu5XqYihxXiM8ZXty5jiZmqR8tWVVzH8=
Subject key identifier: 7A:00:DF:E5:3E:79:2A:1D:20:DC:4C:2D:46:3F:C7:72:10:EE:FA:F1
Authority key identifier: 63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
Certificate issuer: /CN=63ac247e6271f064916372b521fdc8649b254c55
Certificate serial: 0198D515C0974D6E7E28E75FFD2619F5EE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
Manifest number: 33
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: HXhAt88aYTtYDdQLdLWbknoSgT0.roa (hash: azbswWmtD7ITOZIhHbYMzJSZrhSqw/iil9iMk48paVs=)
2: Y6wkfmJx8GSRY3K1If3IZJslTFU.crl (hash: Dbtj8clUqSWdjKO0YhbMiy+fiz/EI+HJyQ9HpDIzEeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c0:97:4d:6e:7e:28:e7:5f:fd:26:19:f5:ee:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ac247e6271f064916372b521fdc8649b254c55
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=7a00dfe53e792a1d20dc4c2d463fc77210eefaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:21:e3:d7:81:25:8d:9e:fb:da:1b:f2:7d:6a:
3a:be:4e:62:1c:07:f4:96:e7:bd:93:68:6a:15:ce:
b4:41:60:7b:96:be:88:17:6b:dd:86:e0:db:15:bb:
ce:1a:80:82:43:f8:50:19:ad:22:e2:88:72:e3:47:
ae:fe:dc:da:a8:42:d7:b7:b1:f0:74:a3:91:da:2d:
e9:81:68:58:5a:1d:8f:d8:0d:00:c4:df:90:1e:87:
d8:35:30:91:39:a4:05:bd:13:3c:ef:24:d7:51:c2:
26:74:9c:87:6c:40:9a:12:42:d6:90:39:87:3e:2f:
df:69:56:fc:8c:46:31:6e:ef:05:94:78:29:ee:67:
23:c8:29:52:7e:eb:99:6f:ab:ce:7a:ae:47:eb:0c:
c4:22:b5:38:00:98:4b:96:89:68:fd:01:dd:ed:87:
4e:9c:c7:0c:c1:45:b0:36:6f:c7:e8:4e:e8:37:c0:
b8:3d:4c:4e:37:ef:bb:74:40:dc:6e:1f:5e:ed:3a:
d7:21:7f:7d:dc:7e:de:02:0c:07:54:f6:85:15:93:
1e:90:21:e8:5d:f2:52:b1:e5:63:4c:5a:76:1b:47:
01:97:63:5b:4a:e4:f6:2c:29:de:e3:7e:c5:23:8a:
7c:3d:4f:b8:7c:f5:b8:6d:6b:d0:08:f1:f3:37:5f:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:00:DF:E5:3E:79:2A:1D:20:DC:4C:2D:46:3F:C7:72:10:EE:FA:F1
X509v3 Authority Key Identifier:
keyid:63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a7:6b:d3:15:63:6a:fc:ac:82:a8:38:5b:01:ee:1d:4d:44:
c3:7b:2c:9d:84:5a:23:d8:47:33:d2:c4:f6:cb:dd:50:1c:fe:
a7:ad:e8:45:3e:f2:4a:6a:6f:e2:ec:e1:99:01:09:61:77:dd:
f7:be:f8:f0:26:18:db:04:a4:e9:de:1f:9f:29:73:4c:93:57:
11:51:eb:46:0e:fe:39:74:f5:0c:a6:f9:e2:47:66:c8:63:b7:
ea:09:cb:eb:bf:af:25:40:a4:03:db:f6:27:be:26:b7:be:73:
3f:87:73:6a:78:70:15:97:c1:72:eb:d6:4e:66:d8:63:5d:34:
65:de:2b:d0:c7:d1:8f:51:05:69:cd:03:58:5d:7e:e3:87:bd:
8f:ee:d4:e3:9c:f3:0a:4c:10:71:7c:a8:3c:21:b0:c1:91:e3:
62:e9:30:c2:84:e5:c1:b9:c7:5e:4a:55:e4:cb:bf:1c:f3:75:
ce:f2:c6:68:0f:87:5f:7c:5f:45:f8:99:6c:49:93:c3:89:68:
c5:e6:02:6f:1a:81:11:4a:b1:5a:14:5d:21:67:b9:d8:7a:a6:
90:17:c0:82:bb:ff:7d:5e:17:a6:93:0c:67:95:db:a2:6a:9a:
be:df:06:fa:2e:0d:7e:3f:20:c1:f0:fa:15:41:97:2d:45:aa:
cf:a9:2a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:30 2025 by rpki-client