Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: R980ZwEQIJCVQ6P6KVObMxlpZkE8RmiJebcZRlat7Ks=
Subject key identifier: DD:E7:86:74:FE:20:91:D5:4A:A3:5D:A3:47:85:BC:DC:B6:5D:DF:3B
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 0198D5BBF7AEE90BBC4308D68B1C1FF999D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: CMbjdpALuwpmVTGOtSM4yGrvJvPn/EiGv+5TJmKPy88=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f7:ae:e9:0b:bc:43:08:d6:8b:1c:1f:f9:99:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=dde78674fe2091d54aa35da34785bcdcb65ddf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:17:7c:07:c7:eb:17:4d:b1:f8:ac:fd:1d:
44:b8:98:ec:7e:00:f6:e2:5b:e5:b7:1a:17:67:3d:
32:84:77:fc:44:88:1d:52:c2:10:04:50:d5:9f:a0:
03:69:93:d5:85:a8:fc:f4:68:64:25:b9:b8:1f:b3:
06:fd:92:d2:d9:cd:1f:aa:93:68:3d:0a:6f:86:18:
d0:ea:dd:bb:79:af:49:df:17:42:20:2e:bb:bb:35:
89:f6:cb:07:73:33:99:4b:03:67:24:03:d9:aa:25:
2b:a8:60:c9:59:07:ae:7a:10:96:bb:11:2c:3f:d7:
78:5b:a1:78:e3:14:89:11:0b:b4:8e:e7:2f:cf:17:
2a:eb:66:cf:5b:a3:5f:64:5d:61:38:bf:36:ef:fa:
69:d6:f7:22:22:4d:91:19:a5:8e:85:3a:a8:98:cb:
a2:9d:d0:5d:d4:ab:06:0d:7f:66:c3:38:c8:08:a6:
60:54:bd:de:aa:3d:37:d0:91:25:53:fe:89:e9:08:
4f:5a:27:bb:86:22:46:45:4e:d2:17:21:21:76:1a:
d6:a8:a4:72:b8:c3:e9:7d:fd:bf:54:43:b1:14:be:
fc:93:14:08:d0:00:79:3a:94:90:f8:46:93:55:84:
4f:3b:22:51:0c:31:a7:96:a2:2e:8c:da:61:f0:49:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:86:74:FE:20:91:D5:4A:A3:5D:A3:47:85:BC:DC:B6:5D:DF:3B
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fd:f5:09:6e:2a:88:29:80:84:1c:af:1c:da:ae:30:c5:7e:
f6:d3:4a:51:32:4a:69:62:3c:d3:d6:b3:39:95:dd:46:ae:4a:
dd:d2:28:14:01:cd:96:0c:22:92:24:fa:d5:17:37:90:71:39:
49:d3:aa:10:e7:fd:2f:65:f0:71:2f:cc:86:ef:3f:16:e9:2e:
f7:c4:ed:e9:b4:52:8b:f6:cb:e3:27:1e:4b:4c:a3:cc:f5:8a:
ec:04:cb:81:4e:a9:ae:96:80:a6:3a:63:0c:22:77:92:84:33:
f8:67:29:16:12:9a:55:1b:6c:8b:9a:c9:93:3b:c9:79:fb:be:
60:e5:53:5e:7e:bd:79:04:09:2b:1f:07:27:4a:3e:db:b6:57:
55:86:96:92:b4:e2:94:2f:03:8a:80:5c:ae:ba:83:cc:07:c8:
68:df:2e:03:c4:32:9f:21:14:19:df:c2:80:5e:0b:01:f9:d5:
c5:a7:82:d4:50:d8:10:3c:cf:d1:14:36:ec:7b:33:d5:cd:c3:
dc:d0:15:17:b1:4a:47:fb:c5:2f:f5:68:84:e0:b2:75:38:11:
f4:33:6b:82:4d:cd:45:2a:59:14:6c:4c:ed:a9:4d:98:40:df:
2a:eb:59:e7:14:66:26:9c:35:f4:4a:80:4d:cc:1c:cb:a7:b3:
7f:aa:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:23 2025 by rpki-client