Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: AFGAz9Dbn7WNDzsvr46k0Z1BPrLReYAcftsS2Vm3veM=
Subject key identifier: 52:EA:93:8C:EA:35:55:94:49:82:04:8A:C2:8C:C4:40:2A:44:43:0D
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0198334B4BD6847A01CFF92001257E1329DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 1642
Signing time: Tue 22 Jul 2025 18:00:29 +0000
Manifest this update: Tue 22 Jul 2025 18:00:29 +0000
Manifest next update: Wed 23 Jul 2025 18:00:29 +0000
Files and hashes: 1: D5XR2b5InYjm0YIYaDZAQo66ZPk.roa (hash: ZhLkJHM6xVS8UPlgNHka4b5xtGdwxE6x/5c9EAFafAA=)
2: N501NOe2mS9D7_nnALWwNM80qMs.roa (hash: P/E9ioDB6VA9gH9ex0UhOk2JFyAOw06oFgivm68Pnbk=)
3: Q9p0QJN6H9jyFPICDwUTafEcjBM.roa (hash: mJxb/ajhHCWZn7xRwovfYsrIjO7tS7X5e7MECXO/7kE=)
4: TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa (hash: xdJre5WYs0QeN/1xP/iEZblWiapiREglW6GQPHWgPiI=)
5: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: xdwX1Bwe2Y4ei1au3y62Eo/4traVuSbLE9wo6B5RNtE=)
6: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
7: qaon0_VUrQ1CtM8ujS3h5z-HyYE.roa (hash: QjdBf8u7Dl0e5x76/XhPz/FbSF5qqjpq22dycf6FL9w=)
8: zya-nVnvYDRCe-NCa3yWVbEp98k.roa (hash: YAuOnGIJzSzoCT2LI34mrWSk3/Q4ZvQVKTNwjixKRhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:4b:4b:d6:84:7a:01:cf:f9:20:01:25:7e:13:29:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jul 22 18:00:29 2025 GMT
Not After : Jul 23 18:00:29 2025 GMT
Subject: CN=52ea938cea3555944982048ac28cc4402a44430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:a0:92:d6:3b:cb:83:8b:22:bb:6a:5e:d6:
1c:4a:85:fd:04:c9:0f:c4:41:2b:3f:54:46:cd:54:
27:a2:6d:dd:5b:ed:31:2b:26:db:fb:6b:fb:1d:aa:
26:f8:57:a1:32:e1:5a:34:13:ee:a1:42:76:fc:0e:
b4:99:ba:fe:ec:be:b9:67:ab:69:14:86:2f:0e:b3:
56:64:ed:fd:02:60:3e:43:8b:d9:96:a1:70:a6:61:
43:52:a8:53:ef:6f:0e:a0:46:3f:38:f7:58:67:95:
b1:b6:1e:ef:42:cb:e6:e9:ee:e3:93:a1:f3:33:5c:
b8:c5:24:a5:ce:ca:0c:3a:06:69:f2:9c:bb:2c:16:
a6:c2:cd:10:35:26:a1:56:f9:2a:dc:40:2c:b9:9c:
6d:c8:60:ad:b2:d0:1f:d4:51:97:d3:47:ec:4b:5f:
6f:86:6c:ad:5d:d7:be:55:b0:97:05:c0:00:b2:a0:
bf:50:27:fd:0d:39:84:92:94:62:91:ae:82:9f:28:
c6:e7:1f:af:51:7a:48:cd:63:6e:82:6b:12:56:38:
df:ee:a5:83:ab:40:05:d1:f4:06:a0:61:42:73:b0:
0b:14:f5:a9:f1:97:ac:98:4c:44:bb:dd:7e:c6:fd:
04:90:c3:67:4e:58:72:81:6f:3d:6c:76:06:76:8e:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EA:93:8C:EA:35:55:94:49:82:04:8A:C2:8C:C4:40:2A:44:43:0D
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:72:c0:58:65:54:e1:fe:c5:3a:99:46:17:ba:4c:82:51:1c:
ed:ea:1a:b1:4c:b9:e2:8a:37:22:36:5a:10:1c:87:5a:bc:04:
aa:de:50:63:53:17:05:fd:f1:4a:97:a7:e8:2b:75:04:f9:53:
e9:5c:15:df:d9:8b:67:9a:55:47:9c:8c:73:69:12:b4:86:7b:
e1:72:bb:5c:ee:b3:85:9c:8c:5f:3a:c0:88:4a:c0:ac:da:e0:
e4:d5:52:9a:e7:98:36:6f:33:62:94:e3:15:6f:d9:2b:6f:b8:
da:9f:92:8d:a2:2f:0a:34:6d:72:e5:cf:00:8f:8b:cb:62:89:
79:ea:0a:09:cb:c6:6a:0d:5f:69:5a:f5:6b:e4:3c:93:d5:17:
b7:99:f3:bb:52:6b:26:21:75:4c:d2:47:d6:9d:19:eb:a8:46:
9b:8c:20:24:b0:eb:af:71:32:7a:92:62:b3:09:07:ee:97:46:
77:2a:cd:94:76:db:ab:6f:28:98:51:63:14:b5:64:88:ea:77:
8c:be:d5:0c:7e:a8:91:2c:a6:ba:e6:bc:53:84:66:63:f8:0d:
bb:3e:78:ce:82:0d:5a:ef:ed:4f:86:62:bd:94:6e:59:e7:45:
be:c2:86:f7:d9:ee:a7:1a:86:ac:25:35:2d:45:b7:91:0f:d0:
00:43:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:59:55 2025 by rpki-client