Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: 184qyWR3Kl9OhCFEVSUBOR+EtiFRJ6211VeaMBCnkp4=
Subject key identifier: 7B:AE:0D:79:5F:55:E3:CC:98:02:EC:DD:9F:C0:F0:FD:8A:59:8E:D3
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 0198D47267EB6C83868FF1B6F00B9634B7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0CDB
Signing time: Sat 23 Aug 2025 01:02:04 +0000
Manifest this update: Sat 23 Aug 2025 01:02:04 +0000
Manifest next update: Sun 24 Aug 2025 01:02:04 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: lvjoAi8viY/cBdJ950nFoR7MOKzt8ETT6yJgAClWlto=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:67:eb:6c:83:86:8f:f1:b6:f0:0b:96:34:b7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Aug 23 01:02:04 2025 GMT
Not After : Aug 24 01:02:04 2025 GMT
Subject: CN=7bae0d795f55e3cc9802ecdd9fc0f0fd8a598ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:5a:55:58:27:39:bc:e1:c4:74:79:53:dd:
d7:5a:d2:76:2a:02:28:53:3f:5a:95:10:be:5f:73:
e7:e1:2c:e0:52:81:10:65:b1:92:14:bc:12:69:f9:
07:7d:de:6a:bf:23:d2:72:50:27:f8:a8:15:d9:f0:
fb:20:ef:c9:18:85:99:7d:6f:57:e0:02:99:c3:eb:
50:ab:bc:38:c4:e3:1a:bb:e9:b0:ef:8d:33:e6:3f:
9a:9c:59:45:66:c3:57:4e:23:5d:b3:77:40:f8:a4:
81:b6:54:9b:65:3b:47:f5:b8:6d:77:f2:66:15:f8:
08:6f:23:d5:7f:93:df:53:a4:e5:e1:87:56:56:d1:
ea:d3:00:6e:26:7c:81:8a:54:eb:35:46:01:78:d6:
ef:85:9b:7b:bb:b1:0d:e1:70:01:b6:d1:07:90:45:
db:13:10:02:cf:b0:fb:ab:d5:b7:56:55:43:8c:5d:
77:f7:e1:b9:3e:22:49:91:a5:7a:b8:a8:a8:9e:0a:
8f:aa:e8:7b:60:80:2b:86:1d:f2:29:c3:b1:d6:02:
d7:d2:81:a5:89:f4:c9:c1:ab:d6:9c:3d:10:32:37:
ed:95:2f:b9:6c:16:fc:7c:ef:42:95:3f:a0:6f:86:
54:a9:af:e5:b7:6c:c6:b5:a3:16:a8:5b:34:de:32:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AE:0D:79:5F:55:E3:CC:98:02:EC:DD:9F:C0:F0:FD:8A:59:8E:D3
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:82:4a:c6:ab:c6:8c:48:2e:0b:81:e2:97:b7:67:63:c5:92:
e8:f0:19:68:0a:10:5f:79:f0:b2:23:c7:40:04:06:dd:c7:78:
68:45:d2:d3:10:7d:68:2a:c4:b8:c2:7e:cb:86:f6:6f:dc:b3:
f1:66:b7:06:89:f9:e4:d1:99:05:01:bb:0b:c8:26:bb:0a:18:
a9:b5:7f:0f:c0:25:cd:d8:3e:ee:af:c4:eb:83:5b:85:ae:87:
6f:1f:5f:9e:a9:55:78:b0:bc:55:9a:76:ac:77:2f:2e:d0:90:
68:5b:6a:63:a3:31:18:d7:fb:fe:fb:22:48:e8:06:cc:c4:87:
e2:d8:9c:7c:33:4c:d9:d0:2b:f3:1f:34:16:bd:c6:a5:ec:b3:
b2:21:ce:50:02:b8:7f:48:30:33:fd:a0:cb:0b:e2:92:f1:7a:
52:db:18:72:ba:e8:7f:1d:77:ca:30:4e:7a:80:82:24:49:b2:
61:72:66:13:80:23:08:2a:50:84:b7:7c:5c:06:b4:01:c8:84:
47:73:29:01:bd:4b:90:6d:b7:03:e1:e2:8c:a4:7e:25:32:1e:
a0:b5:9c:90:8b:cb:a4:88:ed:fb:f5:7b:bf:a3:d2:aa:a7:3c:
df:47:f2:48:8c:62:9c:4f:51:ec:75:19:33:77:ff:4c:27:68:
f7:b9:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:09 2025 by rpki-client