Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: RMwonV6KraF1pruNuYNpTIKYXshgQKXJj11YhaNtsM0=
Subject key identifier: 5A:7A:32:BC:35:FB:CE:E2:D0:84:6B:47:1E:B6:DB:0B:E8:37:37:5F
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 0198D4E000E179882677B7BD58174FAB26D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 0876
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: sutJtsKarF/1FXLisvaXM9c7U1IHfDMONvyvyJgsDP8=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:00:e1:79:88:26:77:b7:bd:58:17:4f:ab:26:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=5a7a32bc35fbcee2d0846b471eb6db0be837375f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:2a:f0:2b:58:28:c8:c8:ae:c3:f9:36:e2:
eb:7d:86:03:a4:69:23:2f:40:2f:5f:2b:b8:66:a2:
53:09:06:da:0d:70:5b:ca:6f:42:80:18:e6:be:ad:
74:4e:4a:42:e9:f5:67:6a:b5:a2:10:2b:60:a6:b1:
8c:f9:56:28:16:9c:a9:e4:bf:68:27:6f:29:27:38:
88:8e:1c:76:bb:5c:1c:74:dc:f6:d2:45:57:68:4f:
51:e1:9c:34:09:30:46:ed:57:3b:73:19:78:e7:76:
c7:dd:6e:70:85:9a:59:dc:46:43:15:dc:a3:ac:c6:
72:2f:58:df:11:18:56:4c:a2:26:8a:7e:1a:b6:e9:
75:54:66:91:2f:6b:ec:9d:c9:76:45:ad:fb:1f:e5:
b4:56:6b:7e:fd:fe:66:b8:a3:14:bc:34:9b:2a:33:
39:70:31:1f:9b:3e:5a:22:64:c7:dc:71:b3:42:19:
d6:11:30:1b:0f:4a:b8:69:e2:93:f9:a9:08:4c:d7:
14:9d:c8:66:5f:a6:b7:c9:de:be:63:fb:74:20:71:
fa:4a:fd:e6:4f:e5:44:bb:b5:70:57:c2:d3:2a:89:
d4:39:b7:17:3a:f2:c5:c3:5c:7a:5e:8b:bd:27:fd:
39:df:c8:16:60:de:8b:74:25:d9:7c:d6:e7:8c:d6:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:32:BC:35:FB:CE:E2:D0:84:6B:47:1E:B6:DB:0B:E8:37:37:5F
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:27:09:39:0c:06:bd:5a:e6:db:82:d0:e1:15:0b:c2:67:
dc:90:85:b2:8c:b3:e8:27:2e:ba:24:8f:b7:de:98:d7:3f:d0:
37:92:0d:c6:e9:38:a0:ef:23:45:c1:75:14:2c:45:48:6d:85:
4d:08:a2:01:2b:a4:a0:2c:99:6d:33:b7:79:1b:dd:6b:a2:68:
35:05:0e:af:34:24:77:47:1d:39:2c:2a:f2:4e:a2:f9:31:76:
ea:5e:2b:9b:49:84:57:6d:bd:54:27:51:31:4b:5a:95:b1:bf:
f0:bb:e0:8e:09:7f:e5:f2:41:84:c4:ea:60:9f:eb:4a:be:5b:
ca:86:d4:5b:1f:a2:52:21:6e:6c:6e:24:d8:17:1c:07:df:bb:
03:05:4a:47:8f:01:de:cc:1c:76:29:cd:83:6d:f6:92:b0:ad:
ec:18:5b:c8:c9:03:10:7f:ab:13:20:a0:3e:85:08:50:68:f5:
6d:eb:ee:c3:8b:fd:9d:1d:95:17:a3:7c:ab:77:74:e2:63:04:
a1:55:d4:d2:91:19:b3:6d:49:5b:e5:bf:ba:6b:aa:0b:f3:9c:
e0:e9:29:f6:a7:63:d9:b8:1c:e4:49:46:f3:50:5a:9b:88:dc:
3d:d9:5c:f8:34:ec:16:15:b4:b9:2b:05:92:6d:09:0a:60:53:
f1:44:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:49 2025 by rpki-client