Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: VIvm+XvDFV3RQI7vfQhc+/7813ETRTdGm+QQ6JVIv9Y=
Subject key identifier: E3:CE:C4:95:2E:0E:06:3C:C5:35:62:8B:C1:8E:B7:EC:FC:36:CA:8C
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 0198D7E1477F31A44D2C64E90FE141F24DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 07A8
Signing time: Sat 23 Aug 2025 17:02:01 +0000
Manifest this update: Sat 23 Aug 2025 17:02:01 +0000
Manifest next update: Sun 24 Aug 2025 17:02:01 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: 96mnkNA8P6Lus2SKuqBiq9AjEsH2dc9T0UPzzAPVHQc=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:47:7f:31:a4:4d:2c:64:e9:0f:e1:41:f2:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Aug 23 17:02:01 2025 GMT
Not After : Aug 24 17:02:01 2025 GMT
Subject: CN=e3cec4952e0e063cc535628bc18eb7ecfc36ca8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:45:31:ac:4e:d0:e6:5f:67:52:77:5f:f7:
6f:d8:d4:fd:68:1e:51:84:27:72:b4:da:cf:85:6a:
e0:d6:90:8d:c5:9a:01:7f:9c:38:96:10:28:a2:16:
7d:20:6d:ca:05:e1:1c:fd:10:74:12:a2:ba:b9:9c:
21:4f:45:6c:af:59:9c:df:7c:5b:bf:7f:e2:8f:64:
0d:f0:63:8a:eb:67:fc:6c:99:c3:63:a8:31:95:1c:
0c:d4:8a:7b:ee:35:1d:6a:2c:8a:dd:52:80:25:94:
aa:c3:06:ba:a5:88:2b:29:fc:ae:62:ef:22:42:c6:
c2:bd:df:2b:3a:cc:50:58:70:40:74:4a:6d:8f:75:
96:94:50:21:07:ea:d4:fa:bc:48:7a:35:24:bd:9a:
e7:7f:0f:36:e7:c4:23:0e:a2:8e:f8:28:6e:e7:96:
72:44:0f:c1:1c:83:2d:08:f4:1a:0e:87:b7:fb:ed:
d2:3e:e1:ba:1b:78:9d:e9:28:f1:62:ed:7d:c8:68:
6e:dc:f0:8e:2d:46:48:b9:20:99:3b:f8:ba:f9:61:
68:22:64:f1:9f:4f:a3:7f:b2:b1:b8:10:52:ba:f6:
ab:bd:cf:68:fc:fe:46:21:3c:3d:1f:ca:a9:73:6a:
50:05:56:c2:b5:41:ef:7b:40:5a:99:20:b1:14:9f:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CE:C4:95:2E:0E:06:3C:C5:35:62:8B:C1:8E:B7:EC:FC:36:CA:8C
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:a0:a7:65:e8:2c:a0:4c:82:f0:25:52:35:cf:0a:8b:f4:
47:92:a5:31:1f:20:91:47:4e:91:f7:35:0c:19:39:a1:ee:b9:
01:e3:3c:f8:5b:49:ae:a5:a1:a8:fd:1d:9f:f1:83:1c:5a:9f:
a4:41:5b:f1:93:c1:ac:7e:88:9a:0e:7d:58:8d:6b:e2:0e:9a:
2b:53:97:28:30:70:36:03:7c:86:e9:7d:63:a0:d7:72:47:f6:
63:c1:d3:c5:93:84:fa:73:14:a3:d4:c4:7b:55:f7:6d:2c:6b:
52:9c:53:b7:89:e2:03:32:8b:8f:0f:7b:5d:3c:c3:a8:5a:57:
70:44:fc:bb:2e:12:66:e7:5c:c2:7b:55:2a:78:2a:88:fc:a8:
eb:db:e0:93:a2:5f:a0:33:f8:1e:0b:84:3e:f7:7a:8a:a0:10:
d8:ee:50:bd:a0:39:52:35:d5:65:fa:4c:56:d4:27:a3:26:3a:
45:c6:84:e6:69:5e:10:ec:3a:6b:93:55:5d:6e:00:47:6c:03:
2e:f4:c8:99:19:50:5d:6e:33:4e:63:d2:3e:48:16:d5:e2:ab:
fa:b6:20:c9:74:73:8b:b6:e8:c5:f1:99:6b:54:11:f6:ba:6c:
c4:d4:90:e3:a9:e2:aa:c5:43:7b:f0:08:b3:b7:31:43:ec:55:
c4:f4:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:14 2025 by rpki-client