Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: Kuxgb0iuAiCg+FLP2Ah/naBcKvLWQL+a1gMG5cLzfaE=
Subject key identifier: 7D:3B:DB:CC:88:8D:C1:F7:CF:84:E0:54:03:2C:1F:32:45:60:FC:B9
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 01984A40EB05CE6A31404B99B9F403D5DB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 1613
Signing time: Sun 27 Jul 2025 05:00:25 +0000
Manifest this update: Sun 27 Jul 2025 05:00:25 +0000
Manifest next update: Mon 28 Jul 2025 05:00:25 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: PLyM8rInkqcmnScimH6j3rPeuiG4YkWDWW8wd0kS4WM=)
3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:eb:05:ce:6a:31:40:4b:99:b9:f4:03:d5:db:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Jul 27 05:00:25 2025 GMT
Not After : Jul 28 05:00:25 2025 GMT
Subject: CN=7d3bdbcc888dc1f7cf84e054032c1f324560fcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:aa:fe:3d:32:5b:ed:6a:53:23:d8:81:55:
6d:6b:16:c6:9e:05:9e:c3:15:ea:8d:a6:03:cc:27:
8b:a1:aa:4c:4d:c4:ed:28:e0:0e:42:67:61:10:94:
b5:eb:2e:2c:0c:b2:3a:77:e0:52:f1:94:f9:56:cd:
c3:9e:10:c1:c5:9e:ad:d8:e9:34:04:14:b4:d4:71:
33:9f:df:b6:42:11:f7:98:95:cb:7a:77:52:6f:97:
67:b7:a5:06:80:a6:f6:1b:3f:ec:96:dc:d5:78:ac:
c2:09:34:04:ad:c6:27:6a:cb:b2:29:82:09:0a:c4:
71:7e:40:c3:01:51:2e:7f:c0:bd:6f:47:20:35:e0:
b6:f6:4e:3f:6b:27:09:9f:9f:0c:cd:43:c8:fb:b6:
83:64:f7:9b:01:a2:2f:69:00:09:37:22:e8:09:b1:
2a:39:b0:01:8c:1b:60:ae:ba:67:d0:ed:79:02:47:
a4:6f:ef:50:d3:f3:83:03:6b:f0:2e:bb:39:30:95:
04:aa:95:71:2a:e7:4a:02:32:6f:23:23:80:0d:66:
90:01:29:63:ec:c8:7f:aa:70:ad:ca:29:16:fd:5e:
a6:27:23:1e:6e:c6:1d:34:2d:14:0a:23:5a:da:ce:
4f:d0:bb:ec:04:be:cc:9a:05:0f:ce:35:77:ad:6e:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:DB:CC:88:8D:C1:F7:CF:84:E0:54:03:2C:1F:32:45:60:FC:B9
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e5:0d:cf:d5:4b:53:4b:09:d3:c6:5b:53:42:59:b6:3f:f1:
c3:1a:1f:61:39:69:39:65:78:87:65:c3:df:e4:c3:0e:46:16:
f5:db:c3:fa:ae:84:0a:34:78:d1:62:20:10:e0:0e:74:e8:b4:
54:97:9d:2d:c4:d2:67:d6:0f:15:ab:22:87:18:ac:4f:26:42:
bc:c4:52:b3:cd:b6:d8:48:29:b7:1f:0a:b5:e5:64:58:13:29:
08:55:6c:2d:17:c6:88:1a:cf:8e:12:55:83:f4:68:3a:c2:24:
3a:37:07:72:b3:c1:c4:5f:7b:31:8e:4a:b7:dc:b9:30:69:50:
d9:86:51:e6:f5:85:a4:4a:58:c0:9d:b5:f7:81:0d:92:6a:2f:
50:62:be:11:69:81:3f:2d:15:05:c3:81:60:55:73:20:d2:7a:
6a:d0:6f:4c:b5:37:6c:a3:0e:b0:2a:28:9a:91:f2:7a:7a:91:
11:aa:87:a7:e3:73:6c:06:96:de:1a:5a:ee:0f:f9:61:ce:d6:
32:e1:de:cf:8e:07:c8:f4:05:24:da:1c:fc:2e:13:25:80:70:
82:a8:d5:f5:06:ba:9f:fc:18:07:70:f3:a5:d2:fb:a6:88:6c:
ff:ff:92:8c:76:a4:63:bb:8f:91:75:ed:8d:f7:c3:29:a6:e7:
c2:9e:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:11 2025 by rpki-client