Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: UX/OW1tTheo6tI9extCfTnPCSRTJ+wIeEz38o0YUgsg=
Subject key identifier: A0:45:2F:8A:AF:14:11:16:17:76:77:98:92:59:36:CC:1D:B9:5F:E4
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 01983D60D4CC9130F5E7468375B3C942CD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 0809
Signing time: Thu 24 Jul 2025 17:00:12 +0000
Manifest this update: Thu 24 Jul 2025 17:00:12 +0000
Manifest next update: Fri 25 Jul 2025 17:00:12 +0000
Files and hashes: 1: R4scpsswEHtZHUE-nwU3HaURKXg.roa (hash: og9/o35XSt8h5Pisf2/20OBVwfKzhDJ2QToFc39vgzg=)
2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: uF0FoRSo60GWQ7SQpe1P18OfxyOVILG/oiKaUKzagko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:60:d4:cc:91:30:f5:e7:46:83:75:b3:c9:42:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Jul 24 17:00:12 2025 GMT
Not After : Jul 25 17:00:12 2025 GMT
Subject: CN=a0452f8aaf14111617767798925936cc1db95fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:64:ef:f5:61:35:a8:6b:8f:21:e3:27:c5:
2f:9f:6e:09:e7:1c:93:c4:64:69:bd:c1:09:2c:3e:
8a:de:61:2b:a2:79:36:ba:a4:05:d1:8c:16:1e:65:
80:d2:82:8a:4b:86:22:03:39:a8:dc:8a:7e:6e:3e:
ff:2c:a8:24:23:c5:1a:62:2b:6e:0f:63:17:0b:82:
23:77:ea:92:43:80:ee:d7:d1:b7:d7:e4:59:0f:78:
43:33:3a:73:c8:90:3c:89:08:02:68:d0:be:e7:3c:
b5:43:39:8c:08:25:ee:aa:7b:64:17:0a:73:26:98:
02:f6:37:9d:eb:44:3b:5a:f2:de:6f:fd:63:bd:e5:
1e:3b:c7:aa:68:3b:db:4a:22:d2:47:d9:f4:9b:dd:
dd:35:8e:e2:93:1a:8c:1d:2a:c8:bb:12:ad:fb:8b:
46:dc:a6:df:7d:7e:b9:19:dd:f1:97:8c:c5:98:81:
55:0d:27:1a:ba:2e:e6:cc:84:45:70:ab:b5:5c:9a:
a5:ae:60:87:3c:1c:ef:6b:10:5f:78:e9:a1:27:de:
d2:48:46:17:97:a3:c2:22:7c:e2:09:c8:48:f7:1a:
b1:e7:8d:06:1b:25:51:96:33:e1:f7:29:e1:1e:74:
eb:4b:a0:46:70:ab:69:46:38:29:85:08:4c:b1:f1:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:2F:8A:AF:14:11:16:17:76:77:98:92:59:36:CC:1D:B9:5F:E4
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9d:43:90:51:c1:4b:70:91:b0:35:36:2c:b8:c7:6b:d6:34:
25:5c:28:c3:a9:5c:9a:53:4c:fe:01:6f:9b:bd:68:33:f5:b2:
f5:3c:0f:15:d8:9d:61:eb:bc:cd:38:1b:91:6c:c9:e7:6b:56:
2d:0c:56:10:99:46:0d:62:4a:c6:2e:2b:e3:45:a4:21:99:b3:
75:49:62:7d:4c:a3:91:96:93:07:21:eb:6f:b4:13:cf:5f:35:
9c:bc:3c:81:02:a2:eb:6e:48:5c:c6:9c:b2:be:fd:39:54:14:
e9:c7:20:1b:81:b1:c1:d2:0c:7a:7d:d7:28:3e:cc:af:41:a5:
8d:f7:8d:6b:82:e7:86:21:7f:1f:26:46:61:6a:35:32:b6:0f:
7d:f5:ed:ce:54:f4:61:4d:d8:ca:8b:99:26:54:a2:12:c3:c2:
3c:50:f9:36:42:cf:6d:6a:2a:6a:9a:c8:c7:2f:ea:3e:3a:1e:
a2:16:2b:f9:d0:7b:69:71:92:6d:32:31:7a:b1:46:6e:69:64:
f1:b6:48:a5:3a:9a:3e:49:a8:95:99:77:14:5f:39:63:31:13:
1b:64:bb:92:be:d7:21:66:cf:08:7b:88:da:b8:8f:ce:37:ee:
d3:0d:26:e1:b1:0d:03:92:2a:55:92:c4:be:50:9c:7b:4e:3c:
60:aa:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:13:20 2025 by rpki-client