Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: 2QpKbNMH5KRIMMJkIhgVSqo1AtsKrAk6WAkUn63tXOg=
Subject key identifier: 06:B4:AF:03:D3:59:89:34:66:48:2C:DC:D8:1A:FE:96:E8:CD:CA:BC
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 019844762F30CF258FF961CF023D473FE616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 05CA
Signing time: Sat 26 Jul 2025 02:00:52 +0000
Manifest this update: Sat 26 Jul 2025 02:00:52 +0000
Manifest next update: Sun 27 Jul 2025 02:00:52 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: KiwKnwAt9EJEC3dS7Ivsj0U3/7Gau43YIzfe9FXGnzc=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:2f:30:cf:25:8f:f9:61:cf:02:3d:47:3f:e6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Jul 26 02:00:52 2025 GMT
Not After : Jul 27 02:00:52 2025 GMT
Subject: CN=06b4af03d359893466482cdcd81afe96e8cdcabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:38:f8:93:13:4d:e2:65:0d:ea:96:3b:33:
95:9c:68:31:67:5b:67:d8:7f:18:2d:02:b6:66:4a:
db:1c:6e:97:0a:9f:7e:42:f5:d7:b7:86:c4:a8:be:
c2:df:f2:ca:3c:22:62:e2:e4:60:70:a5:06:99:ab:
8e:25:27:8f:0a:e5:59:bf:34:ac:99:63:4b:21:8e:
8f:a1:ff:b7:a7:46:05:77:82:d8:ff:bd:f2:30:bc:
62:2a:80:a4:ac:1f:61:dd:68:02:0a:23:f5:f9:ee:
10:cf:07:6d:b5:4d:1b:2a:40:4c:e5:99:59:e1:b4:
21:73:62:cd:82:2d:ea:0f:69:81:df:ea:ae:9f:20:
bb:5d:17:39:cd:1d:fe:67:8e:27:6e:7c:56:d5:c0:
a7:bd:8d:a8:54:c0:0c:b4:7d:f5:23:c1:fe:f4:63:
75:06:e5:44:7f:89:60:ea:81:f2:14:35:b6:72:46:
cd:54:40:91:63:85:7b:3a:39:ff:f4:6d:ea:f3:60:
0d:56:39:7a:e8:92:c7:c4:54:56:7c:5f:6a:ef:22:
ca:7e:37:5c:7d:60:88:7d:18:21:31:10:ae:66:75:
95:12:36:45:b4:9d:c9:79:00:e8:61:cc:61:3e:51:
61:03:f9:f1:9e:53:c5:0c:c0:bd:b4:9c:b1:14:09:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:AF:03:D3:59:89:34:66:48:2C:DC:D8:1A:FE:96:E8:CD:CA:BC
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:58:79:29:ba:61:be:e6:6b:35:08:39:8a:a8:e4:71:9e:26:
12:23:28:59:72:2d:68:b8:25:c1:8f:da:97:49:c6:bd:2d:70:
e2:c9:e2:00:66:aa:de:d2:50:42:d0:c0:69:9f:4a:25:a8:eb:
72:7c:4f:2c:9d:d3:50:66:d1:57:1f:5f:ef:9f:60:9f:4d:b5:
fd:89:70:4f:e8:02:1a:62:a7:c9:34:4f:9d:d2:a7:a6:8a:94:
9a:c4:e7:c9:67:a7:5e:e7:ad:1c:b5:23:d4:60:23:28:87:14:
86:a7:70:9e:d5:3f:18:22:bd:77:02:41:a4:e3:66:03:db:00:
b0:ef:fc:c0:15:6d:6b:c1:ae:71:0b:c7:47:39:e2:67:a6:a1:
6c:97:1b:b9:b2:83:e5:3b:5b:bd:29:86:c8:df:be:77:29:33:
5c:35:09:db:a5:12:ac:68:3b:e7:70:1e:36:86:bb:1c:b4:fd:
12:23:56:f3:56:38:da:b6:ed:62:81:d8:6d:13:51:4f:80:a5:
dd:9f:fa:6c:6e:60:8a:96:f4:22:3d:01:ac:9f:34:0c:56:7b:
a5:b7:61:80:65:f6:77:e1:54:0f:88:19:70:f5:ca:df:e8:71:
4d:ae:c0:c0:a4:f3:bc:46:9f:21:56:58:6b:5f:53:fc:18:71:
ca:3d:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:11:07 2025 by rpki-client