Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: 7TdQPkB04D7vcsJSFSCawFveJ+A9bz6Pk3A5kLIfWts=
Subject key identifier: D0:29:8B:95:48:23:C3:A2:BC:A0:4E:D7:34:49:D4:01:6D:9A:7A:B2
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 01984F9E3E94AC060DAC46C312029ABF0BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 06:00:27 +0000
Manifest this update: Mon 28 Jul 2025 06:00:27 +0000
Manifest next update: Tue 29 Jul 2025 06:00:27 +0000
Files and hashes: 1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=)
2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: scN2XdfxpjUpcq1qrOPdKOQyaD5+TP5eQZeSyZK/FvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:9e:3e:94:ac:06:0d:ac:46:c3:12:02:9a:bf:0b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Jul 28 06:00:27 2025 GMT
Not After : Jul 29 06:00:27 2025 GMT
Subject: CN=d0298b954823c3a2bca04ed73449d4016d9a7ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:a7:6e:01:09:e0:20:73:95:01:a4:dd:10:
2e:d8:56:67:58:36:8b:43:0c:24:b0:49:34:f1:f6:
4e:ed:51:f6:31:87:b6:da:5d:06:8e:ac:c5:c8:2b:
90:7e:05:71:21:68:71:8c:77:5d:23:79:02:b1:ca:
37:96:a1:f1:f1:dd:7c:69:1a:15:e4:16:7b:84:16:
52:7a:05:34:0f:29:fb:ba:c8:07:10:83:a4:eb:b3:
54:17:91:06:69:9e:f8:cb:b5:c9:59:88:d0:51:f1:
7d:64:6a:22:d9:c6:1f:79:f6:59:6c:12:e8:88:2e:
58:f2:4d:72:f8:9d:87:b7:48:b0:1a:03:3a:e7:67:
da:cb:04:a4:a0:d6:85:82:cd:19:2d:2f:d7:0d:dd:
10:52:72:64:db:b9:21:81:6e:41:a0:fc:d6:0f:71:
ef:13:4e:1d:3b:51:90:ff:6e:22:45:7b:c4:bb:49:
33:49:6a:ec:f7:fa:75:e8:e2:c5:70:fa:f2:bc:a3:
64:f7:2b:68:d5:88:08:19:6b:04:2b:d3:a7:98:55:
7f:5f:ba:9e:cd:d2:00:68:13:54:5e:79:ef:60:d3:
04:79:09:ed:38:2b:b0:1b:11:f9:1d:3f:b6:94:24:
37:0a:37:ca:ac:46:0e:69:69:b1:2d:aa:81:1e:db:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:8B:95:48:23:C3:A2:BC:A0:4E:D7:34:49:D4:01:6D:9A:7A:B2
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bb:38:db:c9:e5:00:65:75:29:eb:f4:54:3c:a4:2a:87:b9:
f4:c5:2e:da:6a:5e:69:3c:02:c7:44:06:d3:5a:84:62:88:01:
8f:77:9c:96:69:66:49:15:8d:4b:79:6d:c0:cc:75:64:59:d3:
d9:de:24:84:f7:80:13:49:8c:ed:fd:4c:c7:41:bd:e3:9b:fb:
83:14:bf:5e:d0:bf:6e:88:74:c7:07:0d:d3:c4:b1:a6:e8:39:
52:81:7c:df:b5:1a:e9:13:87:b3:f2:96:25:96:f3:d9:91:67:
a4:cd:de:7c:0b:9e:84:f9:bf:19:26:00:ed:1c:57:e7:f8:2e:
1a:e7:a2:ac:aa:c2:53:df:cd:34:16:5c:d9:21:14:cf:16:30:
d4:04:d1:b7:e9:57:4b:18:73:4b:ad:ab:6e:78:2f:58:33:3f:
4f:d9:ed:95:44:7b:dd:2e:11:5b:b2:fb:9c:9e:ad:fd:9c:5d:
f2:95:45:b5:43:a6:ac:4a:1a:e2:00:95:54:b7:dc:f9:f2:84:
06:35:c0:e2:51:e6:4f:0f:58:09:40:7a:57:36:14:36:aa:3b:
84:02:c3:6e:50:90:c2:57:05:43:93:19:5f:60:f8:d8:d6:77:
13:8d:f2:95:f6:03:1e:32:db:bd:67:53:48:4c:0f:1f:f5:9e:
7d:14:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 10:51:06 2025 by rpki-client