Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: FTdZ20wYMZhATjeY8VJFJcwwOjyNZG7E6+Lr2Ef6USk=
Subject key identifier: 03:78:83:3C:67:4E:3C:CF:72:EA:4F:50:DE:0E:4C:B7:08:4B:DC:86
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 0198D5F15CFB51E3F8036417A1A4BDE869E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0833
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: N3SUbW8sX2O8DaOeAZFzhimF8nPbdR4/YgNB/9nyCE0=)
3: e9Z_8CtChGt4iClYaH_YgcqeT1k.roa (hash: 2K2jsaRk3MeR/R/Hwsml8Lc+ehwc8rBqNjGIvU2lgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5c:fb:51:e3:f8:03:64:17:a1:a4:bd:e8:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=0378833c674e3ccf72ea4f50de0e4cb7084bdc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:d7:2d:36:bf:28:59:48:83:57:3f:c8:9e:
ba:ed:98:0d:56:28:13:f5:e8:82:14:60:52:01:a4:
41:c5:e3:12:15:6b:9a:6d:77:e9:5c:85:a3:79:22:
a9:cf:72:55:1d:31:5b:63:a8:56:d1:d1:98:ff:96:
a1:55:e2:7c:19:60:29:1f:d2:55:54:9f:92:84:f6:
2e:46:02:be:ed:e8:2c:b2:87:74:22:e2:06:63:85:
fc:64:78:55:fc:81:a4:d7:8c:63:b2:04:9e:b1:68:
e1:d3:16:6d:d8:cc:67:28:70:de:e6:fc:e9:ed:ee:
a1:93:e5:5e:55:23:83:3a:57:1b:f5:a9:29:07:ad:
38:d1:bc:bc:aa:02:a1:0f:9a:8a:73:40:49:9e:b1:
a2:7e:34:6c:c2:22:ea:d3:67:a6:10:f6:77:fe:be:
27:14:a7:7e:6a:12:7b:9e:24:38:8e:f8:f4:20:aa:
44:9f:ed:4b:af:40:ab:ef:35:b9:fd:de:bb:2e:84:
3d:89:07:de:20:8f:1d:a2:ce:73:be:40:2a:f6:4a:
17:30:28:7d:d8:4a:2d:1a:6e:61:58:ab:ff:6e:c1:
f9:40:12:5d:7b:bb:e8:56:e9:4d:9c:71:e7:84:af:
2e:49:6f:d9:09:8f:dc:73:76:04:8e:05:5a:8e:00:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:83:3C:67:4E:3C:CF:72:EA:4F:50:DE:0E:4C:B7:08:4B:DC:86
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:84:d5:47:3a:d4:35:a0:d2:34:bf:f3:18:51:0f:e5:4b:11:
4d:6f:f9:b6:bf:72:2c:0f:f8:09:4e:55:51:51:be:a2:f4:3b:
85:8e:3f:09:09:c2:88:c6:b1:20:91:2d:46:f7:56:87:50:18:
10:42:9e:a3:68:65:37:6c:4e:1a:4e:53:d8:36:8e:df:0d:26:
bf:0d:96:c5:04:f6:44:10:51:91:ad:50:c4:3e:48:31:d5:87:
99:75:45:f9:cb:8c:30:8d:2b:ca:02:a9:cf:3e:8b:d9:6d:ac:
9c:ee:3f:92:85:b8:6a:f0:2a:1f:56:9b:34:be:98:90:a7:1c:
17:39:98:74:e0:73:5b:34:f0:4c:d9:36:43:e3:c1:13:e9:fd:
52:6c:4c:c5:14:62:1a:4e:88:8a:10:f2:08:17:8d:88:7d:59:
7d:52:a1:0e:53:4b:41:9f:ee:79:cf:1e:76:32:fe:70:7a:17:
99:91:36:2e:a5:b8:83:32:f8:62:d5:dc:3c:56:5a:68:2c:a1:
92:68:39:e4:d3:58:3d:66:2b:c4:53:14:5d:e4:08:08:f9:1a:
6b:a0:35:89:05:6e:e6:8b:ad:38:dd:52:52:06:0a:86:c9:d3:
e7:c9:3e:aa:29:d2:ae:08:23:6d:fa:27:f1:54:d1:24:d0:31:
bc:09:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:24 2025 by rpki-client