Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: BIRm74aM/NUoMruoiIm5Enw35ztn0vKnaViTr2fwZDc=
Subject key identifier: 40:60:AC:31:F9:D4:A1:D5:EA:A0:5F:44:95:99:9C:41:21:D9:AA:7D
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 01984AAF25E5F0BF64B13E1AFE840EA6BC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 09BE
Signing time: Sun 27 Jul 2025 07:00:49 +0000
Manifest this update: Sun 27 Jul 2025 07:00:49 +0000
Manifest next update: Mon 28 Jul 2025 07:00:49 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: cyLR90WRe1HswlHCJdEnhNYFt6Nu2aJFx5Q0kJDDv1U=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:25:e5:f0:bf:64:b1:3e:1a:fe:84:0e:a6:bc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jul 27 07:00:49 2025 GMT
Not After : Jul 28 07:00:49 2025 GMT
Subject: CN=4060ac31f9d4a1d5eaa05f4495999c4121d9aa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:b5:8a:6d:e7:da:f0:68:69:ef:88:58:56:
a1:74:fa:6b:45:a3:6d:7d:d6:2f:b5:79:a3:dd:16:
8d:00:8a:da:66:b3:ca:21:cc:c1:06:a4:b4:39:66:
87:d5:bf:86:08:c3:c6:07:54:1b:f4:40:46:f4:27:
ac:00:7f:ff:fa:26:27:24:c6:85:0e:e9:0a:93:ff:
59:d2:6c:65:40:ec:e9:f5:30:ff:95:01:13:a5:ed:
a2:85:26:d8:cd:76:8a:86:c0:79:39:35:d2:d0:e6:
fc:a3:a6:77:61:75:e5:e8:71:3a:c7:83:5b:b1:e8:
eb:83:90:7b:14:11:a0:9b:81:5b:60:de:64:f6:01:
a3:88:27:bc:5a:9b:b9:ef:3d:23:0b:15:f7:19:43:
cc:eb:48:d7:c2:20:2e:04:1a:e0:18:e4:57:11:7b:
92:bf:81:fc:c0:49:09:a4:a8:d7:e3:81:01:09:ed:
50:b4:a1:8b:c9:db:7b:ba:11:ed:74:6c:f7:0d:5d:
79:1e:93:04:da:bf:45:64:9b:84:6e:7a:93:25:3a:
6d:9b:17:c1:a7:79:cf:3e:9b:87:b3:01:e8:25:f0:
c7:18:da:6a:30:68:e3:18:43:73:ae:f0:bf:22:35:
36:c3:68:7e:d8:0a:99:e3:3c:78:af:0c:05:69:f7:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:60:AC:31:F9:D4:A1:D5:EA:A0:5F:44:95:99:9C:41:21:D9:AA:7D
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f2:7a:16:e2:ef:b2:ea:be:a2:4b:84:67:08:3a:74:5a:e5:
ee:50:81:24:3b:30:ae:8f:8d:28:df:59:76:35:b6:0c:4f:b1:
8e:57:b1:d0:07:26:df:0a:cf:db:1d:dc:f4:38:89:1a:03:78:
5b:db:3a:4a:ce:2a:29:c0:8f:95:34:5d:c7:11:c7:96:fa:93:
2c:1d:92:ec:f3:70:04:8a:72:be:81:cc:d3:61:a2:21:bd:a9:
30:92:26:09:8e:4c:42:a2:c3:d9:2c:33:f8:cf:90:0c:e2:61:
56:48:5b:5a:21:1e:9d:23:19:d1:8e:3f:65:a8:01:b4:f5:02:
86:5b:aa:3a:aa:80:ac:ef:75:90:66:48:3c:62:14:5f:17:5d:
c1:60:be:04:be:87:db:f6:3e:93:8d:6e:a0:a7:30:1a:6d:14:
3e:95:34:23:a9:57:18:63:ca:55:18:7e:39:97:02:25:aa:7f:
c1:37:d1:11:8c:08:20:04:8b:8a:a7:86:4e:0d:04:84:4e:e7:
d0:48:56:bb:6f:84:08:af:b8:53:23:50:66:00:ad:b1:77:b6:
d6:1c:36:3e:bb:f3:49:0c:18:72:30:e6:70:5f:3f:de:67:f1:
c4:e5:b7:87:74:79:d0:96:f6:5f:01:f0:5a:e0:2a:d9:ba:3f:
90:13:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:19:56 2025 by rpki-client