Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: AME4WBuE7In42z9XMroOOfedP13UzUBrIpFy/To59uk=
Subject key identifier: 58:74:EE:D9:53:34:90:92:3D:12:D3:AB:EC:DC:AA:12:CB:CB:25:A7
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019847AE09494C2BCA5A27654EC618AE97FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 04D9
Signing time: Sat 26 Jul 2025 17:00:44 +0000
Manifest this update: Sat 26 Jul 2025 17:00:44 +0000
Manifest next update: Sun 27 Jul 2025 17:00:44 +0000
Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: c9t4iIivCcit1JMvTVoMRqFStiKnJxYBm3Men/Xf/78=)
3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ae:09:49:4c:2b:ca:5a:27:65:4e:c6:18:ae:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Jul 26 17:00:44 2025 GMT
Not After : Jul 27 17:00:44 2025 GMT
Subject: CN=5874eed9533490923d12d3abecdcaa12cbcb25a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:a3:cd:7b:36:7e:81:da:aa:ab:0f:d6:02:
70:bc:6b:ff:da:e3:6e:d5:9c:69:12:c1:6f:3b:0b:
96:ae:ae:9f:29:53:51:2d:49:2f:32:6f:cd:4b:35:
d0:bf:50:8c:65:75:e1:ca:5c:f9:dd:3d:0e:a3:b4:
23:d1:94:ac:3a:cb:1c:a6:48:ac:65:d1:02:94:89:
f8:69:b3:ee:8f:0f:cf:ed:5e:8f:aa:67:e1:b3:de:
8f:94:87:22:52:96:69:42:bc:02:c9:b8:50:bf:a5:
61:5b:8a:a6:e9:af:4b:0b:94:10:56:96:e6:18:29:
49:72:a0:9b:bd:22:d9:5a:46:2d:7d:0a:59:c7:bf:
a5:36:94:6c:dd:01:80:d5:1a:9a:e5:2b:ed:2c:4c:
18:69:c3:03:f4:91:8b:78:86:e8:d8:80:df:1b:ea:
fd:fb:70:e4:0e:db:03:e3:d4:a8:f6:06:03:93:c5:
06:5d:fc:ad:73:15:be:00:02:7e:76:6b:9d:e8:33:
b9:33:eb:b4:79:60:a0:e5:40:94:4d:49:c6:a6:df:
ba:c5:51:73:20:1d:d4:2d:67:f0:4f:6d:3c:cd:1f:
95:12:a4:09:eb:66:d2:d8:af:ea:70:29:ce:3c:d0:
3e:5e:48:f3:a8:c5:51:f0:4b:51:a3:d6:ac:ca:4e:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:74:EE:D9:53:34:90:92:3D:12:D3:AB:EC:DC:AA:12:CB:CB:25:A7
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:80:cf:f2:2d:0e:ac:77:08:3d:4b:78:e8:1d:9f:f4:e4:3d:
43:ca:b7:0d:2e:0b:5a:ad:40:10:f3:af:c5:c5:56:87:b8:28:
83:b9:86:9e:71:62:a3:88:62:0d:f3:ee:eb:3a:c5:61:ca:9a:
ac:a9:b2:f1:d4:30:88:5b:9e:44:9d:3b:e1:c4:fc:93:2e:30:
e0:2b:02:3f:53:52:af:ae:a8:b6:47:9f:f5:a0:ca:c8:ea:20:
99:0d:77:8d:77:2d:02:04:53:2e:ef:24:a5:a9:9e:b9:91:a1:
b8:cc:4a:98:d0:8e:fa:b0:3e:ec:27:49:ad:12:cc:67:20:41:
b9:0b:b2:a7:1a:b1:26:a9:a2:0c:c6:3b:95:bc:4f:d9:38:b2:
16:d7:89:45:fe:43:45:3d:d2:34:39:a4:c1:48:26:f9:e8:f0:
fc:f8:3f:ae:81:bb:16:24:ed:7a:17:b1:4c:6b:ba:22:c1:21:
9f:64:85:3c:2d:19:77:d9:47:06:66:65:e5:69:e8:1b:90:63:
0a:28:3f:80:9b:7b:8a:1b:fb:b9:ae:47:59:04:a5:eb:52:bf:
a3:59:08:c2:c5:7f:f5:a2:92:c3:6e:26:ec:bd:d3:5c:41:12:
53:ce:fb:aa:30:23:c1:7d:a3:1c:c0:6a:24:ef:d3:e7:f4:9a:
40:19:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:26:19 2025 by rpki-client