Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: uARcD+AISZRIyoMHonx0MTkFciYR54mKLBJv8tubNqc=
Subject key identifier: 92:AD:45:73:6D:8F:89:84:37:8F:07:92:C5:52:CA:26:BA:91:A1:30
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 0198D66032429AEF870BE57269B86761085A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 06C1
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: 1-7dAZzRBbFa11Vn8DGlQ2QYhnKQ.roa (hash: paOrHtzZ6Pf1no7vHSa5YDI9HD1Gf08R7MZd074FoNM=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: vLdEbUcHMMoWwoJIjhajoyJM86/QLU+d/rXxVXEgze0=)
3: aAUDoOMiIkIoTxqpgiR2vBHCYiA.roa (hash: bEbrJBN9qOyrrJrbKszXph6Dv/8oZGFIwIyFCbBw1tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:32:42:9a:ef:87:0b:e5:72:69:b8:67:61:08:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=92ad45736d8f8984378f0792c552ca26ba91a130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:84:49:10:0b:23:5f:82:cb:0d:e2:1b:04:
a8:1c:1c:ed:65:6c:d6:44:45:f2:b8:de:c2:bb:21:
75:be:7f:51:96:8b:f5:8c:c5:9e:28:f4:b8:d9:35:
ea:45:9a:74:ef:0c:6f:fa:77:80:a0:a2:1f:6d:ad:
1e:00:28:02:82:0d:24:29:37:17:1c:75:59:22:0f:
b5:9d:59:e5:e0:ef:7b:f5:a6:38:d7:1a:fa:c7:1c:
94:b6:23:28:04:55:0f:cc:ce:1b:e1:d1:76:81:2d:
f4:38:7e:70:d2:50:f7:e6:6d:b7:af:58:29:b3:5e:
92:b3:40:1b:11:28:1e:53:99:6a:d9:4b:f9:67:2c:
e1:6a:a5:60:24:09:1f:b8:54:49:ff:8b:72:87:ca:
12:5f:83:8e:9e:04:c5:9d:b1:ee:48:27:c5:f4:80:
84:64:a1:2d:fc:bf:82:2d:87:dd:a5:d0:d2:a8:98:
dc:f7:cf:c3:15:10:68:76:97:6f:0e:88:db:67:8c:
48:5b:c5:0d:f7:6f:6d:c2:68:a3:85:b1:fd:f2:e6:
98:3e:9f:a3:3e:8b:bd:5d:b2:f9:94:f9:31:7f:08:
6b:13:ba:43:94:ff:a6:d7:18:0e:45:61:49:97:ea:
6f:1a:63:01:d2:48:37:b8:49:d8:14:b5:d8:51:77:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:45:73:6D:8F:89:84:37:8F:07:92:C5:52:CA:26:BA:91:A1:30
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5f:6f:fc:e9:34:80:05:06:57:a1:91:89:dd:eb:63:ef:42:
49:56:cd:0b:d9:63:02:08:c3:35:1d:62:eb:b1:b1:0f:d3:bd:
e8:d0:17:a0:14:ca:94:93:e0:46:c0:54:32:12:3a:37:9a:15:
a8:1a:49:fe:26:7a:87:15:b6:24:bb:ce:d8:6e:30:e3:88:b0:
16:10:f3:01:e7:13:62:6d:b9:87:3c:07:fd:5b:4b:86:f2:dc:
8e:8c:76:2d:6a:ce:42:46:d6:43:f9:25:fc:a9:6a:4f:e0:7b:
d3:98:1f:d3:f5:11:1a:77:67:c8:cc:9c:e6:e4:07:72:43:03:
50:dc:ae:ba:fc:c2:eb:e9:7c:3a:c8:4a:ac:a7:88:1d:a6:e6:
65:9a:a0:63:47:54:24:02:b8:b7:28:a7:73:f1:2e:61:a5:ee:
09:5b:93:4b:b0:79:ee:2b:ef:a4:bc:f4:53:44:5a:63:4a:0a:
44:54:ae:01:d8:da:f2:eb:53:d9:b3:e8:8b:8f:32:5e:d4:e5:
7e:b2:17:11:c1:d1:53:a5:dc:42:31:0d:36:86:8a:b6:7c:9a:
f2:2b:50:60:4e:01:df:b0:51:e9:b4:99:d2:3b:27:a3:ab:8c:
71:cf:cb:82:a3:dc:8f:91:c9:4d:c5:99:2e:d5:9c:a4:a7:ec:
40:c8:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:30 2025 by rpki-client