Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: 5LaPnDhHxbfX3AxYc12b6UJrhdxszhtvJdYEd4vSbrE=
Subject key identifier: 97:0F:54:57:E4:CA:21:C0:28:F5:E9:30:42:15:D6:4F:DB:AB:13:FD
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 0198D6600A94DAA5FCFABF0919D45D8F44B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 10:01:15 +0000
Manifest this update: Sat 23 Aug 2025 10:01:15 +0000
Manifest next update: Sun 24 Aug 2025 10:01:15 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: QkEUhVs4NFp6nNhXrhMMEhcrM3F/Onfuqmm7NpFqxDo=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0a:94:da:a5:fc:fa:bf:09:19:d4:5d:8f:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Aug 23 10:01:15 2025 GMT
Not After : Aug 24 10:01:15 2025 GMT
Subject: CN=970f5457e4ca21c028f5e9304215d64fdbab13fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:01:43:a8:e2:0b:c8:c7:f6:41:59:a1:cf:
34:ef:2e:90:e5:1e:fd:a3:eb:23:be:57:18:74:ce:
2a:d6:85:bf:85:ce:67:92:35:e3:a2:c4:5e:f4:38:
cc:89:2a:6a:07:f7:b2:64:b4:76:2b:57:8d:3b:38:
62:b4:ad:71:aa:ce:f7:26:8b:0f:a1:89:19:7f:53:
a0:f0:be:41:10:c4:8a:78:79:14:73:aa:42:ca:ee:
2d:b2:61:4b:6a:cb:0e:c4:db:d4:4a:8c:44:85:ea:
a9:18:c8:c6:02:85:ae:fe:fe:2a:72:09:2a:d3:06:
40:59:fb:55:4a:88:ed:66:82:4c:89:95:32:90:96:
3a:bd:db:6e:ee:fa:84:75:d1:e0:ac:82:53:f5:88:
e2:8f:8e:a1:15:ce:c1:8c:57:0d:d8:74:0e:43:22:
89:79:74:b5:e8:ec:cf:5a:f7:41:cf:21:b5:61:3e:
9a:a7:c7:a8:f2:65:98:e5:2c:59:59:2f:4c:fb:ab:
d7:89:57:6d:e5:67:00:77:b3:87:c0:df:06:17:87:
a4:d7:9b:fb:69:09:3e:08:16:9d:74:2d:9d:d1:da:
3b:fc:fc:ed:1e:ae:bc:c1:51:9a:e2:8b:86:15:ae:
70:c8:34:c0:b4:9a:48:74:32:2b:4e:78:6e:9d:b5:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:54:57:E4:CA:21:C0:28:F5:E9:30:42:15:D6:4F:DB:AB:13:FD
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:70:c9:47:ce:54:0f:80:17:0d:e4:72:24:a9:69:82:94:
d6:3f:a0:d0:ea:bc:f0:b9:15:3f:ae:8e:3c:a7:ee:96:84:2c:
57:ac:46:98:c5:40:44:81:85:a9:27:2e:56:c2:fe:a3:a5:c5:
db:96:86:54:45:95:0c:8b:52:bc:41:d4:cc:3a:cf:47:20:ba:
3a:6c:30:23:0b:c6:b8:99:c3:1f:84:27:55:46:c6:12:36:f8:
fc:03:4b:c8:d3:15:9d:fa:99:43:ef:aa:08:bf:b7:3d:90:b8:
dd:65:b4:d2:27:9e:36:55:0c:39:84:dd:8e:d8:cc:5a:0b:69:
66:eb:79:1e:46:4c:b1:a7:a8:88:e4:6e:87:1d:68:41:ca:f1:
83:e4:b2:da:07:13:58:d5:29:b3:f2:ed:af:e7:96:bb:7c:49:
35:65:59:bc:fe:3e:0d:91:0b:3d:29:cc:aa:c1:b8:5b:39:ee:
32:96:10:d2:9f:19:df:44:65:cf:3d:af:16:be:31:78:d2:30:
a2:b7:a0:e0:bc:0a:77:2e:0e:e0:43:78:13:a9:92:45:65:64:
cc:36:c8:41:d2:3d:09:ea:ff:44:40:7c:bd:ec:f1:99:dd:8f:
ac:5b:1a:4f:db:74:57:47:e3:85:8c:ff:8e:cd:73:ad:26:4d:
5e:41:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:34 2025 by rpki-client