Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: DEvjD7N8NF6me60Ziwitq2fIjmtX6aCMnWmgrXjcv6o=
Subject key identifier: 1A:D0:CB:76:2E:14:93:62:C8:A7:E4:B5:89:34:B4:81:81:5D:3F:95
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 0198D54EAFA3459B4C67F12E7FC0B0A98BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: BR9gTsDPWUD2N9y0+HXlvhZvf87A5y4wRPmH6Ii0hZA=)
2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:af:a3:45:9b:4c:67:f1:2e:7f:c0:b0:a9:8b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=1ad0cb762e149362c8a7e4b58934b481815d3f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:c0:56:b8:66:4f:3e:30:22:39:1e:3c:98:
95:a6:cc:f9:33:03:36:b7:94:25:df:c6:f8:b0:2d:
e5:7e:73:69:85:5e:1d:6d:2c:ea:d5:25:1f:bd:b9:
a6:1e:6c:45:3d:6f:22:bf:ac:31:d6:e3:67:0f:54:
a2:66:34:3f:ec:f8:ac:64:c8:6c:ed:59:77:87:a5:
db:7b:8b:44:50:3f:df:88:92:e3:d7:df:15:ca:29:
92:8b:fe:3d:22:8e:12:8f:d3:9d:35:06:8d:ca:87:
f8:62:a6:58:31:a7:df:51:2b:5d:f2:3f:78:cf:e4:
31:a0:4d:33:6d:56:29:13:93:bd:28:f1:99:cf:6b:
3a:bb:d3:c1:1a:c1:f3:30:6d:c4:2d:ce:a9:53:2b:
48:1c:21:58:92:45:31:74:4c:ba:35:df:f0:14:1f:
5a:ef:ed:cb:95:f0:9d:96:8d:8a:23:96:12:d0:ce:
1d:c8:f6:ce:bb:2a:f3:5f:29:bf:2b:8f:55:66:fd:
e0:05:30:07:bd:44:52:c8:56:7a:94:c8:9f:60:c0:
d0:86:89:69:90:14:d7:1c:1f:19:d5:70:89:d9:4e:
bc:44:f9:eb:d5:31:ae:d9:8f:c4:e0:7e:c7:e2:31:
ba:42:fd:42:34:c7:96:3b:92:56:e9:1e:4f:fc:3e:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D0:CB:76:2E:14:93:62:C8:A7:E4:B5:89:34:B4:81:81:5D:3F:95
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:78:47:13:ec:2c:a7:c5:08:a4:3b:aa:ed:e1:db:bf:d9:ac:
96:f7:e3:29:fd:65:cb:f2:e9:75:ca:4c:bd:d0:cf:c5:16:4d:
41:76:48:ab:1a:b6:a1:30:04:a4:77:08:86:77:1d:00:14:c9:
f6:a8:af:5a:5e:48:68:a4:97:3f:1c:1d:dd:16:16:02:77:d6:
4d:60:b9:ee:6c:9a:ce:9f:a1:25:2f:a0:17:69:84:85:6a:59:
e8:cf:e5:e3:de:42:db:f1:2a:c0:89:64:f5:45:d0:95:93:ea:
77:71:8c:66:af:b0:d6:09:d7:10:2f:86:6b:90:e6:d5:3e:82:
17:02:95:04:a4:08:11:64:06:08:e1:68:e2:26:4c:0c:68:49:
1a:05:e8:83:91:b7:58:1d:c6:92:52:0c:6c:d3:f6:7e:8a:f1:
e0:b5:33:45:f3:3b:ca:c4:00:ec:46:db:50:82:c4:4d:f3:e4:
c9:80:dd:90:30:6b:c1:84:6a:0e:7f:9d:c7:f5:d3:ad:01:25:
68:7d:15:6c:51:da:90:0c:6e:0d:2d:9b:bb:4f:c7:c0:55:b0:
8c:bc:2c:b4:22:6b:2d:32:86:df:08:a9:03:c7:49:61:13:f9:
c5:ed:ce:92:0f:4f:b1:c5:c1:d8:e6:29:04:59:84:7e:96:e0:
e3:27:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:46 2025 by rpki-client