Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: Y0gtaQRNMy5UHKQIHjguDv+5GiuG9G7oOSgDjQ2irbE=
Subject key identifier: 93:3F:1B:EE:79:7D:E4:53:37:08:48:AA:8B:98:08:09:04:14:D7:77
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 01984965E275196774F6D987397BAF6EF65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 061D
Signing time: Sun 27 Jul 2025 01:01:10 +0000
Manifest this update: Sun 27 Jul 2025 01:01:10 +0000
Manifest next update: Mon 28 Jul 2025 01:01:10 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: n5gVtyfcWv7sC3WEQcd/thB2Zs90JKecVKExuy6kQ+Q=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e2:75:19:67:74:f6:d9:87:39:7b:af:6e:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Jul 27 01:01:10 2025 GMT
Not After : Jul 28 01:01:10 2025 GMT
Subject: CN=933f1bee797de453370848aa8b9808090414d777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:de:03:5b:a2:fe:4c:29:56:9d:a5:58:1e:
cf:b5:ce:21:c7:d2:d0:3c:c7:dd:8e:81:34:75:b0:
f4:be:f3:e7:72:16:ce:f8:25:b1:e0:3a:a3:6b:ab:
66:1f:07:bb:7a:fe:41:fe:61:ca:4c:50:48:68:c7:
f0:f4:6f:2c:09:03:af:f2:af:22:85:db:cd:60:8e:
38:49:fd:fa:ea:ff:91:58:9b:e2:c9:00:f2:68:08:
a2:2b:b5:25:78:af:e3:76:a8:02:e6:32:8a:d6:14:
09:14:c3:25:fd:0f:5e:97:0b:6d:f2:2e:23:04:51:
1b:18:1c:1b:d6:0f:45:ed:78:d0:0a:b2:68:30:eb:
8a:90:47:11:a8:8d:e2:a2:f3:77:71:d1:26:e5:69:
ed:22:f5:42:3c:88:ed:1e:d7:a3:20:41:30:7b:ca:
2b:f7:bb:31:ae:c2:14:6d:5a:d8:50:d5:c2:ee:f1:
cf:ec:73:01:3d:63:1b:e5:b2:84:64:f0:00:51:7e:
a7:58:61:8c:91:77:3c:6b:eb:91:e3:57:72:b9:65:
b4:8c:8d:26:35:ba:d5:78:47:5e:85:e6:6d:bc:fe:
4d:8f:9e:09:67:8c:3f:cd:79:e2:ee:9e:ed:01:ff:
65:ef:e9:3d:27:1d:20:16:34:dc:95:00:c4:a8:12:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3F:1B:EE:79:7D:E4:53:37:08:48:AA:8B:98:08:09:04:14:D7:77
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:32:e8:f0:c5:73:ce:04:27:9f:d1:a2:9e:bc:38:1b:34:b3:
90:2e:2f:f0:33:37:98:90:36:af:9b:28:f0:8b:40:57:76:f8:
48:1e:59:fa:a2:1a:36:4c:90:85:9a:6d:b2:5e:bd:3c:01:bf:
1c:1b:5e:18:a8:cd:1b:37:7e:eb:37:7f:2c:16:4c:ce:5c:79:
1e:84:75:10:b1:89:c7:1b:83:0d:5c:ff:85:ea:b9:cc:de:3b:
ce:ce:90:0b:96:db:24:0e:4d:90:3c:58:44:b4:65:4c:e3:bc:
6b:09:35:fb:58:de:d6:00:ac:19:b1:3c:ab:ab:0a:2c:35:06:
b5:35:93:ee:96:cc:da:ef:84:14:0c:cd:45:5c:f7:89:aa:87:
a8:fa:12:b0:9f:11:52:4e:8e:2e:fa:18:d0:d2:1a:b2:bd:66:
93:88:d9:92:57:f2:ef:66:5b:7b:0a:01:39:4f:31:7e:84:31:
69:fd:ba:a4:dd:be:43:a6:83:41:a4:9c:95:3b:14:6d:95:1b:
65:06:e8:52:7d:91:92:45:55:f3:b2:cd:ab:b1:a8:73:0f:70:
a6:8c:7f:8b:3f:cd:93:38:f7:c7:af:a4:8b:8e:e2:9b:f9:b3:
e6:3c:1c:a5:18:55:63:97:84:2b:5b:cc:b9:57:55:d3:de:a0:
f1:eb:17:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:40:25 2025 by rpki-client