Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: XXkVx/use3s1mzau1kEPfqCyoLpEBXyACDG75qkODvM=
Subject key identifier: 8C:FE:30:0E:D9:00:05:8C:8B:BB:5B:00:61:B9:45:78:86:CD:14:CE
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 01984A77DC21749A8C3773892225B291FED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 06D9
Signing time: Sun 27 Jul 2025 06:00:25 +0000
Manifest this update: Sun 27 Jul 2025 06:00:25 +0000
Manifest next update: Mon 28 Jul 2025 06:00:25 +0000
Files and hashes: 1: 7NPjy0_LNEtrF1BCG60HRzqdKlw.roa (hash: QFPKpHBMjVle5FlNRbqdK60lHpC8YmYJkA7cV7MHx8U=)
2: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (hash: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=)
3: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: L276wcAMKqVmo+vUzb32NMB6bVCKwzypaaBBgFFY1HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:dc:21:74:9a:8c:37:73:89:22:25:b2:91:fe:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Jul 27 06:00:25 2025 GMT
Not After : Jul 28 06:00:25 2025 GMT
Subject: CN=8cfe300ed900058c8bbb5b0061b9457886cd14ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:ff:64:3b:6f:aa:78:df:70:00:a9:c8:12:
da:4f:e0:11:fd:04:70:f1:ce:21:c0:32:55:ba:7c:
ba:cd:03:bc:dd:5f:da:c7:18:80:ba:ff:50:b9:b3:
b2:ef:5e:bc:3a:3d:0e:65:d9:5b:72:52:f7:3f:4d:
1e:a9:2c:a0:fd:91:fd:aa:08:02:ed:9d:b3:8b:c3:
53:de:29:4a:3e:a3:84:10:af:81:5d:72:2d:e2:46:
40:a7:76:7d:0e:26:cc:a3:40:5b:7c:4c:87:90:ed:
ce:fe:b2:65:0f:94:6e:3e:79:69:3b:08:9f:13:ee:
7a:17:1e:6b:07:e3:dd:72:b2:49:00:a7:5f:ea:92:
77:f2:cb:c0:1a:36:10:7c:80:fd:80:ec:0f:bd:a8:
3d:91:4b:89:44:5d:a3:ea:61:58:16:40:5a:49:29:
e3:49:ff:6a:aa:80:ac:5f:c6:e5:fb:50:db:cb:06:
07:c2:b4:7e:66:63:6b:2b:eb:c9:5f:7a:34:af:67:
04:0e:02:03:52:33:53:db:fb:98:ff:81:88:c5:2a:
f2:d5:6d:e5:f7:3f:77:e2:f6:68:cf:0f:cf:06:c0:
d2:9a:68:7a:21:0b:b2:15:9b:6e:8d:88:6c:98:b5:
a2:38:f3:53:92:68:4e:9b:3d:e0:97:1b:71:6b:35:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FE:30:0E:D9:00:05:8C:8B:BB:5B:00:61:B9:45:78:86:CD:14:CE
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:99:96:a6:bb:0b:5c:26:98:dd:50:e8:44:23:76:f7:d7:
92:02:a9:26:67:70:9d:10:f0:e9:a0:fd:c6:d9:34:2b:66:2a:
be:a3:20:48:bd:ea:4f:d1:a7:47:7a:05:67:1a:89:4b:6c:e3:
c1:24:53:62:5b:5b:71:5f:3e:6f:da:4e:32:ed:48:89:87:90:
d5:17:9a:1b:24:0e:02:2e:54:45:25:8f:c8:65:22:53:db:2f:
f2:62:34:38:5f:4b:63:94:d4:72:fe:46:f9:7d:fb:aa:66:2a:
f7:5b:48:83:ef:3e:8c:b7:a1:9e:fd:e3:43:5a:3d:4d:31:ba:
a9:07:33:4f:c0:b1:79:bc:70:01:41:cf:77:68:9a:c8:70:83:
74:37:c1:40:c6:ae:f6:81:97:7b:ff:91:4c:59:17:44:ee:dc:
c7:3b:2e:11:02:22:ea:3a:36:42:d3:a0:8c:f8:20:06:cb:99:
74:ea:9e:ef:58:57:70:9d:d1:fc:2f:ef:42:00:b1:05:e5:3b:
cf:0e:f7:af:d6:8f:be:6d:e5:43:a1:ab:66:d8:1b:78:0b:e2:
ae:74:6c:0c:6c:c9:4f:3e:d6:4e:0c:47:82:07:2e:70:05:a4:
82:f5:ff:31:96:99:80:77:d3:3a:e5:2e:dd:cf:d0:44:16:a3:
59:69:21:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:23 2025 by rpki-client